Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/3138392e33382e38302e302f32302d3234203d3e203238323939.roa
File:                     3138392e33382e38302e302f32302d3234203d3e203238323939.roa (raw, json)
Hash identifier:          vKxLIlSHd24EzBM5cBTtfU1dBiJJt7Ja3nj+8fGjoN4=
Subject key identifier:   4A:73:88:92:DD:70:08:72:CF:C8:E2:5E:C5:DC:39:25:4B:B9:C1:2E
Certificate issuer:       /CN=6AF905DD92B0782F965D1A954DCEA4CC6032EEBE
Certificate serial:       35A8AD60FF190C42D1B8D29D5BB88A927AD36299
Authority key identifier: 6A:F9:05:DD:92:B0:78:2F:96:5D:1A:95:4D:CE:A4:CC:60:32:EE:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/3138392e33382e38302e302f32302d3234203d3e203238323939.roa
Signing time:             Wed 08 Jun 2022 19:04:10 +0000
ROA not before:           Wed 08 Jun 2022 18:59:10 +0000
ROA not after:            Wed 07 Jun 2023 19:04:10 +0000
asID:                     28299
IP address blocks:        189.38.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a8:ad:60:ff:19:0c:42:d1:b8:d2:9d:5b:b8:8a:92:7a:d3:62:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF905DD92B0782F965D1A954DCEA4CC6032EEBE
        Validity
            Not Before: Jun  8 18:59:10 2022 GMT
            Not After : Jun  7 19:04:10 2023 GMT
        Subject: CN=4A738892DD700872CFC8E25EC5DC39254BB9C12E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fc:6b:5e:15:10:f2:58:ee:19:45:ca:9e:0f:
                    72:f1:f2:0b:4c:94:f0:22:d1:62:24:58:09:c5:83:
                    6a:ad:8e:03:b0:c4:f3:ed:f5:ff:26:de:c8:5e:a5:
                    63:7c:f7:15:47:1a:5c:e0:42:21:4d:a9:d7:26:79:
                    b6:c9:52:89:27:ac:33:0e:d5:c3:8c:32:68:0f:93:
                    b6:77:74:5d:60:0f:a1:c2:f2:bd:ad:b7:dc:3a:c0:
                    ac:ba:63:ca:43:9b:b9:74:ba:4e:91:2b:52:56:18:
                    fb:e1:24:9c:c5:b2:af:be:26:6c:62:cd:cb:57:22:
                    72:ee:e5:86:32:a1:48:fd:e7:8f:23:be:4c:b7:c5:
                    92:7b:0a:78:3a:b9:95:d0:bd:0b:bb:70:da:8b:0f:
                    4c:2f:d4:33:40:48:91:34:dd:f7:e1:b9:c0:82:63:
                    73:84:23:fd:61:0b:69:7b:b3:5a:23:6b:ef:ac:39:
                    1f:0d:e5:d5:2b:34:98:b6:41:03:96:d9:8e:b6:a9:
                    6b:e1:d7:c3:ab:46:07:48:11:72:85:7c:e7:de:ae:
                    76:fd:55:ab:34:5c:66:6b:69:77:89:d4:3d:3a:2e:
                    11:80:d1:bb:01:ee:31:cf:9e:25:a4:aa:39:86:14:
                    5c:17:c4:54:a3:89:6c:18:10:26:e1:90:16:f1:e6:
                    f3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:73:88:92:DD:70:08:72:CF:C8:E2:5E:C5:DC:39:25:4B:B9:C1:2E
            X509v3 Authority Key Identifier:
                keyid:6A:F9:05:DD:92:B0:78:2F:96:5D:1A:95:4D:CE:A4:CC:60:32:EE:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/3138392e33382e38302e302f32302d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:df:57:84:a6:1a:96:b9:1c:64:e8:2b:f3:d1:4e:03:63:df:
         b7:40:6c:25:46:cf:aa:aa:3a:d3:9b:fb:b0:72:5e:4b:48:b5:
         6a:58:11:e2:94:e6:9c:3e:39:97:85:d7:5f:52:66:49:a5:64:
         80:84:20:c3:c8:a5:47:16:17:c9:20:c5:31:22:fe:2d:a2:55:
         22:4c:7e:4c:17:c7:14:33:2a:de:2c:a5:aa:bb:53:8e:3c:2b:
         9d:8d:ff:97:4a:c5:2d:49:87:8b:26:43:2d:f7:2e:ed:29:8f:
         f1:2c:8c:f6:2f:60:65:c9:bb:e1:92:63:1f:c9:c5:34:85:27:
         41:ef:48:99:b0:f5:72:e0:a0:36:3e:73:a5:1c:68:23:46:ee:
         c6:66:11:d7:32:6e:ec:f2:db:7f:13:56:83:41:ca:76:a3:dd:
         a2:cb:ed:a8:8e:b1:29:ef:d0:c6:ac:20:83:98:81:7a:86:3c:
         4d:49:10:e3:bd:8a:64:e3:3b:db:8e:95:34:6c:4f:5e:6d:cc:
         40:82:d4:66:a0:31:56:3c:72:34:d2:bb:25:11:0b:67:82:f9:
         7b:89:54:42:2b:60:71:b1:c5:18:f3:5c:5b:aa:ad:b1:ea:2b:
         01:78:50:9a:1b:6b:4f:f8:b1:41:ee:f0:b1:2d:6b:fa:22:66:
         46:b1:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org