Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230342e302f32332d3233203d3e203238323334.roa
File:                     3138392e3132372e3230342e302f32332d3233203d3e203238323334.roa (raw, json)
Hash identifier:          Icp3lK5S99AItL9x66CgOGUFX0o7JunGWbsyNcTc+zk=
Subject key identifier:   87:42:C1:52:9F:EB:71:69:DE:25:A6:D1:1D:5C:A9:A5:93:75:8A:2B
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       23EEDF1A0A011E66136A2DD53BE30FA3FD73AE8B
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230342e302f32332d3233203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 19:00:00 +0000
ROA not before:           Wed 20 Dec 2023 18:55:00 +0000
ROA not after:            Wed 18 Dec 2024 19:00:00 +0000
asID:                     28234
IP address blocks:        189.127.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ee:df:1a:0a:01:1e:66:13:6a:2d:d5:3b:e3:0f:a3:fd:73:ae:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 18:55:00 2023 GMT
            Not After : Dec 18 19:00:00 2024 GMT
        Subject: CN=8742C1529FEB7169DE25A6D11D5CA9A593758A2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c3:a9:27:be:4b:28:aa:3b:d8:ab:8f:1b:19:
                    8d:09:2d:9f:ff:f7:b9:bb:b6:7b:b4:f3:18:64:68:
                    ea:bd:c7:5c:9a:45:b3:12:cb:52:18:4f:60:60:55:
                    c8:ea:5d:71:fe:7c:27:3b:9f:d1:c7:54:86:03:0c:
                    6e:90:a2:82:90:3c:c7:2d:39:26:97:d7:a1:52:41:
                    ba:1b:69:2a:a9:28:ab:9a:c7:dc:e7:f9:89:ad:5b:
                    80:54:c9:a0:2b:42:48:8f:6b:16:e2:c9:d5:5a:29:
                    2c:ac:ae:1e:1f:6f:56:29:5d:2b:e0:76:4e:0e:40:
                    02:f1:6c:b0:c6:10:d9:4c:d5:24:77:ac:74:9f:4a:
                    46:e0:8c:db:9d:92:b2:13:6d:0a:a4:21:7e:3c:f0:
                    11:a7:cd:98:76:43:12:bc:b4:31:3e:48:4b:9d:c0:
                    e5:dd:1c:19:b1:0d:21:2b:66:0d:11:9e:ad:45:57:
                    ac:2f:84:fd:b0:7a:92:52:9c:30:79:04:5a:4c:a3:
                    59:cb:3a:c3:48:cc:a1:96:54:b3:7b:63:5f:59:66:
                    45:7d:c0:d0:80:48:ca:0c:81:37:3b:21:28:38:22:
                    b2:97:bc:3f:3d:12:76:f7:27:e1:91:8a:95:3e:0e:
                    d3:2d:58:af:45:45:ea:93:00:f1:e7:b7:b4:c2:e6:
                    81:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:42:C1:52:9F:EB:71:69:DE:25:A6:D1:1D:5C:A9:A5:93:75:8A:2B
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230342e302f32332d3233203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:17:12:32:63:5f:2e:94:81:5e:bf:b1:a0:99:c1:a6:89:28:
         f4:f3:ec:c8:c0:ea:c9:25:b7:7b:1a:24:9d:51:a5:fa:6b:84:
         ca:0c:d1:d8:d3:00:c3:55:1a:b4:bd:56:17:9f:28:e1:a8:ba:
         e7:2a:8a:c4:b7:26:aa:23:a9:1c:ff:ab:f0:b1:d1:45:7c:d5:
         fd:5a:4d:c9:80:80:ce:d0:a1:23:2e:a2:75:8b:92:41:fe:a1:
         54:8c:90:94:62:47:67:08:58:af:7a:09:42:f8:64:bf:e5:51:
         b9:ec:2b:0c:86:a6:5e:96:41:37:bc:aa:c1:db:1e:19:ee:52:
         b1:c3:ae:af:fc:fd:a6:a4:51:44:50:06:e1:fe:de:a5:c0:ac:
         b8:fd:20:d3:7e:b0:4c:ae:f3:f8:e6:ad:42:bf:b1:a7:7a:ac:
         c8:2a:92:95:99:bf:2a:22:39:42:fe:b2:41:a2:e7:f5:4c:d7:
         45:ea:2f:09:91:b9:12:07:7a:59:37:c4:eb:23:75:dc:06:1b:
         9f:a3:4c:00:f7:3a:c1:fe:f5:a4:77:16:09:f8:6f:fd:38:34:
         03:ad:3f:74:33:14:94:f6:ab:7a:2c:05:fd:54:9b:af:09:37:
         84:8f:ab:8f:73:7f:91:fa:6b:3c:32:4b:e8:ff:36:49:56:bd:
         ce:3d:9e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org