Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139392e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3139392e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          58Y89zzypOhdd5bm2hfj/KkYi8WmHXewkuc8dnQSEaw=
Subject key identifier:   35:40:41:ED:E6:8C:32:86:AC:E3:46:CD:54:00:1B:64:BE:90:08:CF
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       166731F6BDEA2F2F5BAE968BB341ED2301428425
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139392e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:02 +0000
ROA not before:           Wed 20 Dec 2023 19:55:02 +0000
ROA not after:            Wed 18 Dec 2024 20:00:02 +0000
asID:                     28234
IP address blocks:        189.127.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:67:31:f6:bd:ea:2f:2f:5b:ae:96:8b:b3:41:ed:23:01:42:84:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:02 2023 GMT
            Not After : Dec 18 20:00:02 2024 GMT
        Subject: CN=354041EDE68C3286ACE346CD54001B64BE9008CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:09:5b:f2:7e:b9:1f:9c:bb:ba:4d:8a:c3:
                    69:12:e2:15:1f:9a:8f:49:8f:7f:d9:dd:73:cd:16:
                    39:88:6a:29:6b:f8:7f:b5:86:7b:e6:d3:06:fb:a2:
                    75:6a:ab:27:60:70:d3:b8:23:d0:9e:cc:0d:a0:5f:
                    b7:ab:7f:5f:42:b8:ac:54:fa:97:49:11:6c:47:94:
                    cf:e6:9f:f1:da:2e:58:0c:5e:05:bc:ec:48:d9:e1:
                    9f:bb:e2:7c:5b:a5:38:84:57:3a:2e:4b:47:05:db:
                    7e:a7:bc:dd:a1:03:96:27:cc:36:aa:de:72:91:bf:
                    f5:e7:67:0c:4e:34:69:96:c4:a9:62:15:09:b9:48:
                    ff:e0:8b:32:46:58:cb:d0:2a:2f:b4:81:3d:69:9f:
                    ef:32:89:ef:44:8d:a7:fd:7a:53:1b:ae:a0:2f:df:
                    1f:ae:d3:30:ee:8d:a8:86:72:29:b8:14:31:d5:ba:
                    f9:fb:63:9f:02:d4:18:5a:29:47:1a:5d:c0:ed:64:
                    da:5f:4d:79:d8:d4:c0:82:38:1d:b5:7a:e7:04:fc:
                    60:43:5f:84:3e:fa:f9:3a:bf:fd:cc:01:19:9f:ea:
                    da:a1:ac:a6:4c:43:91:05:79:e0:2e:a2:2f:2e:73:
                    7a:81:0b:ff:b5:2b:0a:75:0b:23:c4:df:ac:eb:80:
                    7d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:40:41:ED:E6:8C:32:86:AC:E3:46:CD:54:00:1B:64:BE:90:08:CF
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139392e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:39:88:5c:1a:6f:2b:7e:7e:16:d5:41:74:04:f9:19:99:73:
         ba:68:0c:f2:9f:d7:dc:70:df:60:fe:95:84:29:07:1e:65:00:
         bb:11:6b:ea:03:4a:d0:1c:e4:a0:12:7b:b3:32:38:d1:d9:e6:
         d5:6d:3b:df:70:77:33:08:69:44:6c:69:f2:e1:2b:c8:80:a5:
         fe:11:9b:05:04:8e:f7:25:01:e6:a6:2a:0e:46:13:0c:91:e4:
         10:69:de:fe:c5:1d:ba:60:3b:e7:07:0f:6c:0d:69:7a:b9:cc:
         50:94:1a:ef:8e:b7:c6:40:14:96:5c:47:6c:57:55:f4:16:b4:
         f2:66:3f:de:f7:5b:6e:b7:bd:c0:b8:61:c6:2c:56:7a:31:85:
         56:93:08:b6:e4:08:1b:9f:71:18:73:02:ab:df:66:e3:3f:bd:
         c0:fb:e5:ee:44:0c:b3:fc:6b:80:11:ca:81:64:fd:2a:85:f2:
         8f:35:93:d1:81:8f:38:69:a3:c8:bb:03:20:4f:3b:8d:f1:df:
         f6:15:7f:ce:61:06:a4:70:1a:b8:58:a3:dc:7d:b9:6e:be:45:
         51:b1:91:6a:31:07:1c:52:51:82:f8:34:66:f7:a5:c6:16:d7:
         05:44:63:52:b2:39:06:52:7d:e8:64:ff:b4:ee:eb:62:7b:a5:
         bf:e8:e5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org