Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134342e302f32332d3233203d3e20323730373034.roa
File:                     3138392e3132372e3134342e302f32332d3233203d3e20323730373034.roa (raw, json)
Hash identifier:          53jATnPIQV+eYWw9tMHdAy2YaSKbES1DW7xhco6QcNI=
Subject key identifier:   BF:16:BE:61:24:F3:6A:64:1C:00:79:AF:FB:D3:B4:1F:1E:45:A4:CA
Certificate issuer:       /CN=08DC97818473BD73C2DD2C6E472F59268A919F1D
Certificate serial:       61FE98C89D611FBF9C34E4F5179779900D0A3D6C
Authority key identifier: 08:DC:97:81:84:73:BD:73:C2:DD:2C:6E:47:2F:59:26:8A:91:9F:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134342e302f32332d3233203d3e20323730373034.roa
Signing time:             Mon 13 Feb 2023 19:33:37 +0000
ROA not before:           Mon 13 Feb 2023 19:28:37 +0000
ROA not after:            Mon 12 Feb 2024 19:33:37 +0000
asID:                     270704
IP address blocks:        189.127.144.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fe:98:c8:9d:61:1f:bf:9c:34:e4:f5:17:97:79:90:0d:0a:3d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08DC97818473BD73C2DD2C6E472F59268A919F1D
        Validity
            Not Before: Feb 13 19:28:37 2023 GMT
            Not After : Feb 12 19:33:37 2024 GMT
        Subject: CN=BF16BE6124F36A641C0079AFFBD3B41F1E45A4CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b2:a2:b8:5e:42:79:3b:1f:0c:89:8b:ef:74:
                    33:52:1e:35:f6:34:13:94:78:b4:15:9c:6b:78:ea:
                    f5:87:06:47:40:68:17:40:c7:2e:ab:f1:cb:24:72:
                    8c:dd:1a:76:b6:ed:7d:13:00:99:7b:53:ad:11:62:
                    2f:d2:6f:9c:4f:00:cf:d3:f3:3c:14:cf:82:39:e6:
                    6e:46:50:a7:e2:9c:c6:29:58:28:ee:25:35:34:a7:
                    31:0e:bc:f2:d4:4f:77:ec:4b:28:e4:0c:f1:71:6c:
                    c5:1f:05:dd:89:c6:5a:81:3a:1b:d2:eb:6e:95:6b:
                    27:a3:16:0e:ca:96:8a:7c:64:83:91:55:af:6e:e5:
                    12:07:bd:0b:33:ab:b9:cf:29:fc:a8:ac:54:3c:05:
                    d3:d9:c0:23:21:59:bf:a5:66:c1:4d:46:a3:5b:9d:
                    72:ca:89:29:0d:1f:ec:c7:8a:ff:52:ef:8a:3e:75:
                    85:0a:01:aa:c8:ec:c1:83:09:97:cd:d5:a2:18:1b:
                    af:57:76:f0:ea:95:04:6e:be:82:7d:3c:6e:29:8d:
                    54:45:82:15:b0:ac:6d:a1:06:0f:df:a7:e7:af:06:
                    18:d7:da:ac:b7:60:d7:b9:3a:f4:22:c5:b3:9f:f2:
                    7d:2b:f5:1a:da:1c:6f:b0:57:fa:85:b9:71:9e:d1:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:16:BE:61:24:F3:6A:64:1C:00:79:AF:FB:D3:B4:1F:1E:45:A4:CA
            X509v3 Authority Key Identifier:
                keyid:08:DC:97:81:84:73:BD:73:C2:DD:2C:6E:47:2F:59:26:8A:91:9F:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134342e302f32332d3233203d3e20323730373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:6f:e1:d2:9e:c5:b1:df:58:14:4f:65:ce:2d:a2:5a:4e:4d:
         24:ca:98:d4:b8:b5:57:1a:08:03:34:1b:84:e1:2b:6a:59:7c:
         88:d1:8e:40:68:bc:e9:55:80:e1:99:61:b8:1a:57:7e:b5:9f:
         1f:6b:15:15:98:77:b6:cf:4c:fb:ab:22:42:19:1c:3c:0f:a9:
         02:98:f8:45:df:7b:ac:64:58:08:30:ab:5f:48:e5:cd:c2:39:
         de:bb:d0:73:f8:60:33:7a:b0:3b:36:9f:7f:1c:42:1b:a5:53:
         f8:44:5c:89:ff:88:4f:fd:4f:86:02:70:92:21:3d:96:c5:7f:
         21:54:ac:3a:16:8f:2d:bd:d4:f1:2a:bf:96:5a:5c:17:62:0c:
         5e:f2:c6:56:a6:48:61:fa:96:ad:98:82:89:d9:f0:1e:3e:df:
         f2:2f:3e:4d:d0:93:ec:cd:6c:a1:18:25:19:4e:87:ca:25:89:
         4b:33:b9:04:82:3e:9f:5b:bc:21:e0:2a:1f:5b:8f:47:28:fb:
         5c:7e:ac:98:46:06:df:6d:ea:ce:94:34:06:67:df:10:67:e7:
         9c:e2:e4:5b:47:5c:6e:17:89:26:cd:48:35:8e:d0:87:b5:f0:
         80:1b:d6:e2:cc:a8:4e:21:7a:7a:ff:00:c1:42:55:df:d1:f8:
         da:b1:58:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org