Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230362e302f32332d3233203d3e203238323334.roa
File:                     3138392e3132372e3230362e302f32332d3233203d3e203238323334.roa (raw, json)
Hash identifier:          PAgbB5q9ds5vc2u6WmywRYlA5NWLyxaypxSoiof+onc=
Subject key identifier:   DE:ED:C4:D8:B3:76:20:70:46:AF:27:F3:4F:DB:ED:20:31:55:24:CD
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       76C2CC34CD9EDB516B6719DA60E02CB07BC6CBAA
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230362e302f32332d3233203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:00 +0000
ROA not before:           Wed 20 Dec 2023 19:55:00 +0000
ROA not after:            Wed 18 Dec 2024 20:00:00 +0000
asID:                     28234
IP address blocks:        189.127.206.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c2:cc:34:cd:9e:db:51:6b:67:19:da:60:e0:2c:b0:7b:c6:cb:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:00 2023 GMT
            Not After : Dec 18 20:00:00 2024 GMT
        Subject: CN=DEEDC4D8B376207046AF27F34FDBED20315524CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:56:f7:9b:a4:36:d0:3a:4d:27:58:8d:1c:15:
                    26:20:89:8a:4d:d7:04:e1:77:22:11:5f:6b:be:4e:
                    e2:46:d5:80:87:31:59:4f:98:ac:d7:33:ea:92:23:
                    4d:82:cc:ce:3d:09:5d:55:71:8e:68:c0:79:18:70:
                    55:6e:5e:58:41:62:1b:e3:e4:55:ea:e5:79:7e:95:
                    7e:2f:13:3b:df:98:79:21:e9:14:29:e6:a4:2d:3f:
                    00:21:45:b4:c1:57:c5:53:b5:63:2a:6f:b6:d1:f6:
                    e2:f0:b8:14:42:b4:f0:40:89:22:47:54:49:98:e6:
                    a1:35:62:4d:11:ec:8a:ef:12:f1:d6:f3:b6:45:2d:
                    0c:13:32:bb:32:a9:dd:23:dd:a2:54:3d:b0:db:e3:
                    5c:2d:58:8f:ce:e7:ec:1a:73:ae:5d:d4:6b:0c:25:
                    6f:6e:22:f0:35:9a:65:c6:22:f6:da:d4:8b:bb:67:
                    f5:41:66:f7:54:2e:0b:6d:70:29:38:64:47:08:be:
                    2e:86:96:0c:74:db:b0:95:eb:0b:a1:51:1c:c0:6b:
                    b7:c4:ac:84:34:2e:88:04:58:92:b4:f7:7e:9b:84:
                    31:1b:12:8e:77:e5:a4:64:55:40:a2:a4:c1:dc:16:
                    4f:76:aa:9a:a7:01:11:f0:26:25:e3:b5:30:28:31:
                    c1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:ED:C4:D8:B3:76:20:70:46:AF:27:F3:4F:DB:ED:20:31:55:24:CD
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230362e302f32332d3233203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:61:db:47:8d:d5:0d:5e:ab:a4:0f:3b:ed:6c:50:45:f1:c0:
         01:29:b6:a1:76:df:b4:94:a1:fa:b3:c3:51:03:f6:87:31:bd:
         7d:42:7a:74:a7:57:d3:ac:f0:71:69:07:2d:8c:61:27:63:ab:
         c2:c8:7f:ee:23:da:1c:52:96:46:d3:19:87:b3:b0:34:5c:95:
         15:06:c3:2a:2a:97:c1:c5:d6:93:e3:76:f1:f8:e3:80:fc:9a:
         51:1c:05:ee:28:b6:e9:97:78:5b:c0:c3:29:44:d6:7e:a8:68:
         d0:6d:f9:00:c3:8a:3d:e2:01:44:5e:fe:c4:9c:14:db:ce:fe:
         b5:41:74:da:7e:5b:71:ee:bb:34:ad:86:55:f0:c0:39:e1:e2:
         6e:e0:75:28:36:0a:31:47:f8:5c:77:3b:64:c6:24:31:f2:4f:
         38:b3:cd:2e:e5:3d:c4:a9:c3:f5:3e:d4:0d:94:da:9d:ad:80:
         77:85:fb:32:6f:99:38:a6:ec:35:34:28:5c:6f:5e:91:8b:7c:
         d8:b5:d0:49:4f:b3:5e:63:72:99:2f:f1:00:3a:45:b7:eb:e5:
         2d:6a:c1:df:33:80:cc:96:08:72:3c:3f:09:e0:3d:3a:37:f1:
         8e:e1:87:99:42:f1:7f:3f:3e:ce:7c:f4:2e:93:e2:5b:91:e4:
         da:18:9c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org