Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/1/3138392e3132362e38302e302f32322d3232203d3e20323730363332.roa
File:                     3138392e3132362e38302e302f32322d3232203d3e20323730363332.roa (raw, json)
Hash identifier:          Xb4l/A96VDi/pfjsQ1JRXTtIvhx5Hdij/x15H+gcxSo=
Subject key identifier:   26:9A:7B:FD:3B:4A:5E:BB:73:EA:52:FA:FF:A6:C6:BD:E5:18:96:59
Certificate issuer:       /CN=0E360C167E3056F3D890BB4E81F1D75F599456F9
Certificate serial:       73CA5A31454151498B67E5A5E54B069082ADDC4A
Authority key identifier: 0E:36:0C:16:7E:30:56:F3:D8:90:BB:4E:81:F1:D7:5F:59:94:56:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E360C167E3056F3D890BB4E81F1D75F599456F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/1/3138392e3132362e38302e302f32322d3232203d3e20323730363332.roa
Signing time:             Tue 16 May 2023 06:00:00 +0000
ROA not before:           Tue 16 May 2023 05:55:00 +0000
ROA not after:            Tue 14 May 2024 06:00:00 +0000
asID:                     270632
IP address blocks:        189.126.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ca:5a:31:45:41:51:49:8b:67:e5:a5:e5:4b:06:90:82:ad:dc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E360C167E3056F3D890BB4E81F1D75F599456F9
        Validity
            Not Before: May 16 05:55:00 2023 GMT
            Not After : May 14 06:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:50:c6:f5:6a:76:4a:74:37:c4:8a:4e:51:
                    28:84:85:f8:c2:7c:fe:e6:48:d1:04:75:ad:d4:13:
                    fe:73:ce:db:3e:89:4c:90:7a:79:48:68:2a:02:19:
                    9a:7f:ff:f9:ed:c8:6a:6c:4a:4e:29:1e:30:ce:6b:
                    fa:28:cd:53:f4:6e:fd:b6:10:9a:a9:00:9c:83:a0:
                    dd:a2:70:e9:fa:66:55:db:18:02:90:35:f1:03:36:
                    93:d5:fb:43:10:c9:cf:69:36:43:4d:48:2b:6d:6f:
                    b2:fc:40:c9:f6:d7:77:51:cd:db:52:26:7d:ab:47:
                    46:98:f1:3d:02:37:ce:93:54:3c:24:f1:35:48:fa:
                    4b:20:d8:6a:5f:6b:4d:28:d7:95:fe:ac:5e:d2:70:
                    1b:14:8e:07:79:cc:62:61:18:a6:88:c3:5d:89:f4:
                    49:5b:2b:94:ed:37:08:69:e7:e1:e6:d4:3f:91:03:
                    be:c9:9a:ec:52:68:7b:9c:12:d4:a1:e6:a4:d7:1a:
                    05:42:d3:ed:16:7a:a5:47:36:c3:35:87:2e:ee:4d:
                    6c:ee:a5:43:e4:e0:3d:0a:6b:37:58:19:40:16:ac:
                    01:ff:ec:96:91:b5:bb:34:9f:15:d7:75:1f:dd:33:
                    5a:01:d4:27:a5:c5:3b:25:ea:0c:48:ae:ce:92:b4:
                    40:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9A:7B:FD:3B:4A:5E:BB:73:EA:52:FA:FF:A6:C6:BD:E5:18:96:59
            X509v3 Authority Key Identifier:
                keyid:0E:36:0C:16:7E:30:56:F3:D8:90:BB:4E:81:F1:D7:5F:59:94:56:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/1/0E360C167E3056F3D890BB4E81F1D75F599456F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E360C167E3056F3D890BB4E81F1D75F599456F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/1/3138392e3132362e38302e302f32322d3232203d3e20323730363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:4f:83:ad:6b:10:10:c3:13:a2:81:1b:52:c5:47:41:f7:8f:
         60:9b:d6:fd:e9:b5:da:21:24:ec:f1:0c:dd:d2:28:39:2d:83:
         58:67:d2:1f:04:5d:1c:a1:ae:98:c9:60:18:3b:a0:ca:28:88:
         9e:52:d9:2b:8a:2b:80:35:74:d7:df:a0:69:82:36:b5:22:11:
         ec:e3:78:7b:a6:ab:91:53:55:f0:71:24:ff:06:82:58:36:ca:
         58:79:be:bd:10:00:4e:33:4a:5a:e4:39:c0:7c:99:f7:1c:19:
         54:60:c1:d1:64:47:da:f4:d8:09:c6:0c:42:4f:1f:cb:9c:e3:
         1d:eb:79:77:92:cb:67:c9:23:3b:95:2a:4b:f5:93:16:31:ae:
         9d:8a:18:8e:88:57:8a:b7:1e:7f:46:c3:3d:3f:d9:2e:20:88:
         52:12:5d:05:a7:da:8b:c8:e7:59:0b:56:bc:e5:bb:f1:40:71:
         89:28:55:a2:cb:1d:23:e4:eb:53:95:7a:d4:e5:1c:36:b7:6f:
         e0:aa:20:33:73:a9:58:81:59:3d:49:4c:4c:4a:3b:28:ea:ea:
         82:d1:6b:a8:9d:e6:5e:c2:66:df:05:9c:24:6e:e0:95:5d:92:
         97:82:64:ee:e7:06:09:ed:24:dd:83:de:65:32:8c:4e:8a:6e:
         a7:10:84:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org