Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137352e302f32342d3234203d3e20323731333030.roa
File:                     3138392e39312e3137352e302f32342d3234203d3e20323731333030.roa (raw, json)
Hash identifier:          J5Hnk/kQutTJGZ4RybJUdpGnenHQU5L7bRchDepFsSA=
Subject key identifier:   57:F4:8E:AD:21:14:92:BB:D0:29:B6:7A:2E:6D:E1:03:C2:F7:79:0A
Certificate issuer:       /CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
Certificate serial:       5BF5CB94DC949FA56633C37A27A6B8B3DD40CCE9
Authority key identifier: 1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137352e302f32342d3234203d3e20323731333030.roa
Signing time:             Wed 09 Nov 2022 20:12:48 +0000
ROA not before:           Wed 09 Nov 2022 20:07:48 +0000
ROA not after:            Wed 08 Nov 2023 20:12:48 +0000
asID:                     271300
IP address blocks:        189.91.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f5:cb:94:dc:94:9f:a5:66:33:c3:7a:27:a6:b8:b3:dd:40:cc:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
        Validity
            Not Before: Nov  9 20:07:48 2022 GMT
            Not After : Nov  8 20:12:48 2023 GMT
        Subject: CN=57F48EAD211492BBD029B67A2E6DE103C2F7790A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:58:31:72:af:54:9a:d5:08:3c:11:c2:28:78:
                    9b:87:a4:cb:ed:c6:41:19:f3:5c:95:36:90:db:23:
                    7e:c1:e0:33:b2:92:96:45:9d:fc:41:88:08:b0:1b:
                    67:aa:81:d4:ee:cc:11:85:ab:7d:3f:bc:f3:ea:06:
                    7b:49:4d:e4:7e:13:97:79:4f:47:8e:c0:de:ae:f2:
                    74:1b:eb:0b:ca:bd:ba:9f:9f:a7:d5:a9:cb:b3:89:
                    a2:d9:d0:27:7c:75:9e:ed:a4:88:6c:7c:54:24:8b:
                    85:4b:92:07:9a:1a:86:72:a8:5b:5c:c8:f0:23:ca:
                    6b:42:b1:fb:a9:d3:0e:2c:37:7d:8c:64:0c:f8:99:
                    8f:5f:3f:f8:68:e1:8a:0f:4c:75:93:91:44:7f:7a:
                    44:56:dc:d9:63:c2:60:ca:61:e8:40:a6:09:b3:c2:
                    99:66:7b:7f:9c:e9:a1:76:41:14:66:4e:38:74:69:
                    54:68:6d:87:4a:82:2b:49:f0:d3:33:04:a3:38:cb:
                    60:0f:ad:0f:64:05:ea:f5:e6:a9:cc:97:a4:a0:0f:
                    2e:8e:f5:ce:d3:16:04:0a:f0:3f:66:f4:74:0d:c2:
                    99:49:f4:76:b9:c3:13:fb:b1:2a:f3:78:4f:68:fc:
                    68:a6:0a:bf:4d:b2:0b:1d:ff:c5:16:c8:52:97:11:
                    5c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F4:8E:AD:21:14:92:BB:D0:29:B6:7A:2E:6D:E1:03:C2:F7:79:0A
            X509v3 Authority Key Identifier:
                keyid:1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137352e302f32342d3234203d3e20323731333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:d4:5a:e4:8b:a3:de:4d:2f:43:0e:3c:e8:d8:ef:02:b1:47:
         a3:97:cb:3b:33:c0:4c:dd:e4:42:c1:53:00:94:65:ae:55:a3:
         0a:93:70:f7:80:8d:5e:48:2e:a5:f2:c6:89:54:cc:31:03:a6:
         b8:a6:9c:18:64:fd:91:e3:b5:bf:f7:24:54:aa:22:1f:63:73:
         2a:58:17:2e:11:5d:86:54:60:27:16:2a:cd:2b:94:f4:80:80:
         39:47:67:78:b0:7f:a8:af:67:50:4d:76:f2:4a:d2:43:f0:a1:
         3b:13:a7:07:5a:87:47:a7:e3:9f:1a:74:7e:a6:a3:88:8c:6d:
         20:e1:ba:95:16:9b:3a:0e:10:18:7f:24:6e:36:83:92:f9:91:
         c7:6d:6d:2c:fe:93:23:ae:2c:56:0e:c2:0f:b6:41:9d:e5:5b:
         cd:cd:a5:3d:3b:5b:78:c4:5c:cb:a1:5f:1f:ae:13:36:d9:06:
         62:22:96:cf:7d:73:26:89:14:11:2c:7a:1a:e2:b1:e8:72:94:
         c0:d8:4a:f0:6e:f0:44:1c:06:da:15:d8:eb:b2:5a:5c:5a:7d:
         99:a2:d4:2b:7e:57:22:b9:b3:d4:fb:55:2c:37:36:04:1a:e2:
         d2:a3:0d:a0:a1:a3:9c:bd:c9:70:69:0a:33:0d:8a:a7:25:4c:
         16:52:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org