Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137322e302f32322d3232203d3e20323731333030.roa
File:                     3138392e39312e3137322e302f32322d3232203d3e20323731333030.roa (raw, json)
Hash identifier:          TKzUznFg4e3QRlK+D0ePdsZaObJ55UnQgsu4VsV0sm4=
Subject key identifier:   F5:80:BC:C5:0B:42:DA:3F:0A:B6:4E:C8:71:43:FD:37:7B:9B:46:F5
Certificate issuer:       /CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
Certificate serial:       028D11AEE6A83AADFD9A4AA7D8A8F64833288AA4
Authority key identifier: 1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137322e302f32322d3232203d3e20323731333030.roa
Signing time:             Wed 09 Nov 2022 20:12:47 +0000
ROA not before:           Wed 09 Nov 2022 20:07:47 +0000
ROA not after:            Wed 08 Nov 2023 20:12:47 +0000
asID:                     271300
IP address blocks:        189.91.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8d:11:ae:e6:a8:3a:ad:fd:9a:4a:a7:d8:a8:f6:48:33:28:8a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
        Validity
            Not Before: Nov  9 20:07:47 2022 GMT
            Not After : Nov  8 20:12:47 2023 GMT
        Subject: CN=F580BCC50B42DA3F0AB64EC87143FD377B9B46F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:03:76:29:1c:ce:15:90:47:ba:6b:9b:ee:
                    61:d7:57:15:73:23:42:bd:39:07:a3:33:50:00:9e:
                    be:01:4a:1a:5e:ed:fa:49:ac:fd:72:46:7b:78:cf:
                    ed:48:15:17:1a:e7:3b:f2:1d:a6:f0:b0:91:43:4c:
                    df:96:72:1e:2d:6d:29:5b:28:34:29:02:1e:f9:3d:
                    16:47:0a:16:e4:df:f3:aa:89:9b:84:07:39:dd:1f:
                    fc:71:18:d4:66:2f:95:84:69:c6:cf:2d:d1:97:48:
                    22:f3:c9:6c:0d:e6:c2:6a:f2:1b:d4:d7:8a:c3:11:
                    ba:66:57:ed:0c:14:80:29:51:be:46:3c:e7:01:dc:
                    de:76:b0:ea:53:de:13:1b:94:e7:b8:bb:be:47:b9:
                    ae:d0:8c:52:c5:e8:af:44:42:90:f4:9c:7c:dc:44:
                    b1:ab:12:07:1b:ff:fb:de:6e:d4:a0:e2:c3:83:7d:
                    76:76:2c:ae:43:3f:71:8a:92:d4:06:0b:20:ec:08:
                    56:02:60:89:31:57:cd:fd:2f:d1:7e:45:86:76:41:
                    3b:83:43:3b:03:4f:84:d6:75:31:02:38:9e:88:7d:
                    f4:49:22:3d:9c:e4:fd:d8:72:88:49:fc:10:4c:99:
                    1b:45:f7:b4:d2:fe:e9:ca:be:f2:f5:8e:74:18:5d:
                    ea:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:80:BC:C5:0B:42:DA:3F:0A:B6:4E:C8:71:43:FD:37:7B:9B:46:F5
            X509v3 Authority Key Identifier:
                keyid:1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137322e302f32322d3232203d3e20323731333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:e3:c3:c5:5d:28:72:90:68:34:a3:ed:25:7e:06:e1:75:ef:
         1b:db:db:ac:46:58:3d:5e:c4:b9:e9:fc:98:82:9d:d6:50:8e:
         fa:11:a0:93:d0:11:c3:27:23:fa:c3:ee:ab:cc:20:24:99:a1:
         35:a0:5c:40:b0:00:ad:b8:0d:e7:22:f1:47:ee:4d:04:cc:ef:
         89:32:a3:bc:f6:62:d3:20:92:a2:7b:7d:b5:cf:6c:1d:ab:10:
         88:2b:05:15:8d:c6:43:d9:4c:0e:17:4e:9d:29:df:41:0c:cb:
         07:13:0c:d1:bc:2f:87:d6:87:76:db:3d:d1:33:cb:c1:3e:7b:
         31:a1:bc:68:d4:24:c8:6a:65:bc:1a:38:5a:f1:36:96:96:ac:
         5f:a4:0c:1a:0d:39:40:35:1c:a2:e1:27:b9:b4:c4:8a:ee:dc:
         bc:64:dc:f4:1a:75:ae:c9:70:60:e3:75:d0:6d:f4:9c:3e:64:
         ee:96:ff:2a:96:b3:00:f0:47:bd:c8:f2:a2:f2:b9:24:cb:71:
         fb:3b:aa:02:1b:a4:e9:ba:dd:e6:28:70:42:71:70:b1:3a:63:
         48:55:6a:7d:10:b0:16:44:c3:e9:23:88:70:1b:79:9e:0e:7f:
         38:a7:e7:c2:8b:64:f7:99:50:8d:bf:e6:89:65:b1:66:7d:c9:
         07:2e:e7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org