Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139362e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3139362e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          iIT8OVQheIauTwDCgLURwufszo46Z8NRlgMVsa06K48=
Subject key identifier:   C2:EE:C9:D7:78:97:3B:3C:0F:47:34:2F:15:53:99:34:F6:CD:94:D1
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       75617EE49E247783867DE33CEFA686FDCAFD5EE1
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139362e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:01 +0000
ROA not before:           Wed 20 Dec 2023 19:55:01 +0000
ROA not after:            Wed 18 Dec 2024 20:00:01 +0000
asID:                     28234
IP address blocks:        189.127.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:61:7e:e4:9e:24:77:83:86:7d:e3:3c:ef:a6:86:fd:ca:fd:5e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:01 2023 GMT
            Not After : Dec 18 20:00:01 2024 GMT
        Subject: CN=C2EEC9D778973B3C0F47342F15539934F6CD94D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:96:4c:c9:b3:aa:ed:6c:d6:b6:20:27:96:
                    8d:9f:5e:57:93:f0:bb:fa:7c:f9:c9:b6:36:b9:61:
                    78:45:31:6b:68:cc:7a:29:e6:21:d8:24:a4:bf:bf:
                    0a:2b:bb:88:4c:3c:c7:dd:aa:04:97:6d:75:f0:fa:
                    9d:ad:95:34:6a:9c:09:5a:ce:b6:5f:d6:31:47:7d:
                    bc:23:0f:e5:b3:04:d9:33:d2:c7:1f:0c:a7:3e:b0:
                    3f:15:41:91:47:5c:5b:fa:58:ff:4f:4b:32:78:80:
                    3d:79:6e:5f:54:ea:64:ee:c7:6e:3c:33:55:89:52:
                    32:d7:46:a6:5a:80:4d:b7:c0:82:f5:c7:31:80:2d:
                    d1:86:0e:ab:84:35:4a:7c:d7:bd:df:ff:59:e7:45:
                    81:4a:c4:62:b7:f2:87:82:db:48:12:ca:9c:3f:fd:
                    cf:fc:85:82:53:38:f5:72:5d:0c:7d:e1:a6:f5:e2:
                    7a:e2:db:5d:61:17:3f:51:91:d4:f3:22:7d:c0:5c:
                    db:29:11:8d:fd:a6:05:51:bb:59:36:d0:82:33:6c:
                    52:9b:00:a1:de:80:9c:26:ff:30:92:65:f0:e9:7d:
                    9f:6b:71:2f:5a:bc:91:49:c9:da:68:f0:05:9b:9e:
                    fc:46:11:e6:10:cc:ff:ed:48:d2:f6:d1:09:3f:85:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EE:C9:D7:78:97:3B:3C:0F:47:34:2F:15:53:99:34:F6:CD:94:D1
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139362e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:8c:62:a7:35:01:40:93:a2:b4:2c:a7:ab:3e:f0:fd:29:38:
         2a:76:42:42:68:b4:02:b3:3a:ed:b1:fe:e4:19:73:ba:85:f4:
         3d:b2:4b:fb:22:7d:a2:ee:d2:72:5c:45:44:8e:e1:5f:3b:46:
         a3:df:86:4b:98:c0:b2:cb:4a:1a:f6:e9:cc:60:4b:14:6d:f3:
         7c:30:19:8c:1b:20:5c:56:28:a8:82:b3:83:bf:7c:d5:48:32:
         61:0c:3d:a5:ed:8e:58:3d:72:56:60:97:62:75:eb:7d:ca:97:
         6a:84:86:38:89:42:1c:da:66:69:71:83:d7:7e:d4:69:0a:12:
         45:ba:ca:dc:97:d6:51:b2:ca:e1:67:2c:bd:93:61:0b:f5:77:
         50:86:3a:f4:a5:db:95:b2:28:d1:5c:fa:d3:36:97:7b:25:53:
         8d:9b:d7:03:13:47:5d:72:dd:ae:e8:9b:df:df:22:15:4f:0a:
         60:42:23:0e:22:ae:d6:e5:96:6a:34:ea:7d:6d:1c:35:8c:1c:
         6e:ad:2c:c7:d0:2d:db:8c:84:11:26:b3:76:be:07:45:4e:d7:
         16:24:89:1c:08:41:02:50:11:68:be:fa:51:f7:c6:83:48:ea:
         86:2e:16:4e:92:45:33:ce:a0:65:92:0b:8e:cf:ad:71:bb:87:
         ca:f4:84:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org