Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230302e302f32332d3233203d3e203238323334.roa
File:                     3138392e3132372e3230302e302f32332d3233203d3e203238323334.roa (raw, json)
Hash identifier:          nrDeoXF4VPPCdXAVqvxBHhA15eeQ/QGiXvQLaXSUXOA=
Subject key identifier:   E7:4D:02:C8:C5:C9:02:85:D2:D6:DC:63:3F:EF:96:D0:F6:02:20:D4
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       5F4497213454841B1E21CA4043180543409CAB8E
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230302e302f32332d3233203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:02 +0000
ROA not before:           Wed 20 Dec 2023 19:55:02 +0000
ROA not after:            Wed 18 Dec 2024 20:00:02 +0000
asID:                     28234
IP address blocks:        189.127.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:44:97:21:34:54:84:1b:1e:21:ca:40:43:18:05:43:40:9c:ab:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:02 2023 GMT
            Not After : Dec 18 20:00:02 2024 GMT
        Subject: CN=E74D02C8C5C90285D2D6DC633FEF96D0F60220D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5f:fc:61:27:45:e1:83:7a:c5:05:b3:18:70:
                    04:ce:71:aa:ab:eb:0b:cc:f8:c9:90:28:3a:35:b5:
                    d1:09:5b:65:9d:fe:64:65:47:98:1f:8c:6a:0c:b6:
                    d1:44:db:71:3b:54:1c:86:3e:71:39:c1:51:a8:8a:
                    50:be:99:47:42:7d:cb:4d:b4:ba:46:df:28:47:b9:
                    af:16:15:3e:21:2d:ac:27:95:4a:4e:87:89:69:1e:
                    5b:bd:be:37:e2:d9:a7:8c:3b:54:da:24:6d:72:e2:
                    d1:03:d3:2d:b4:ab:fa:e5:80:b9:2a:07:7f:39:c7:
                    8a:69:7f:fd:1f:8f:10:c5:8c:08:af:44:e8:41:4a:
                    86:68:59:60:00:36:02:be:0b:36:d2:f8:05:2c:b6:
                    94:6e:3c:54:4e:c1:05:e6:1f:75:ca:e8:e3:7b:2e:
                    5e:3b:dd:2f:37:99:fb:e9:ae:8a:80:17:d8:06:5b:
                    cc:5e:40:55:0b:16:2f:94:20:88:06:ca:b4:6c:20:
                    5b:99:30:13:a4:df:6c:0c:a4:8e:ad:d7:d5:29:2e:
                    20:9b:6b:fe:b4:4b:09:7a:d5:f2:e3:1d:44:d8:3b:
                    c7:12:2f:b4:d9:63:5a:77:23:8c:42:01:c5:d6:f1:
                    84:cc:77:d6:73:50:78:33:f5:f3:4b:99:a6:1a:6b:
                    d0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4D:02:C8:C5:C9:02:85:D2:D6:DC:63:3F:EF:96:D0:F6:02:20:D4
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230302e302f32332d3233203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:30:a1:24:80:b7:22:eb:a4:62:6c:66:3a:27:73:0f:c1:de:
         50:e1:29:3d:00:c0:94:7c:51:ee:2c:94:e3:b1:74:91:7b:7d:
         38:d1:da:16:55:ed:0a:7c:9d:73:5f:a8:ee:f4:63:89:1a:4b:
         89:13:86:1a:65:15:fb:16:43:e1:00:47:fd:e1:fa:7b:a5:b9:
         73:42:78:e5:6c:49:b3:fe:81:80:2b:cc:9a:92:58:a6:16:1f:
         28:4a:26:2b:98:c0:d0:a1:a7:56:48:0b:7e:3f:db:cd:b1:5b:
         fd:fd:5e:b9:69:c4:62:cb:4b:4f:3f:08:3b:96:a1:b5:88:29:
         dd:db:98:11:37:29:63:dc:6b:0a:77:0a:e1:cd:aa:31:62:67:
         61:fa:3a:75:8f:72:16:10:ad:c5:a4:07:1d:19:d6:b6:91:5c:
         27:64:1e:aa:b0:80:2b:eb:f4:c2:03:f7:cf:43:22:e7:4b:d7:
         05:c7:9c:57:77:dd:1e:cb:a3:1f:dc:b6:4b:33:69:ca:06:3b:
         01:e0:fe:b1:ef:79:db:31:c8:b3:42:e7:0f:dc:d6:79:91:fe:
         aa:2d:b0:f5:53:f3:0c:3b:40:32:00:e3:bb:fc:ec:ff:b0:d3:
         d2:2d:1c:17:f0:fb:e7:31:c0:6e:4a:53:2d:d4:24:e9:fb:1b:
         76:84:7a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org