Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32342d3234203d3e20323730373136.roa
File:                     3138392e3132372e3138382e302f32342d3234203d3e20323730373136.roa (raw, json)
Hash identifier:          lV+8wkG+D4ASpRxfO2x/gJ+dDsYZ2FEhJRXS05Owb/s=
Subject key identifier:   FC:57:4F:06:66:73:96:53:8A:AC:DF:51:2C:7D:9D:5D:EE:37:C6:0D
Certificate issuer:       /CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
Certificate serial:       34B8DFA8A9FBF25D47BBD072A2203BEC0798D067
Authority key identifier: 88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32342d3234203d3e20323730373136.roa
Signing time:             Tue 24 Sep 2024 21:44:56 +0000
ROA not before:           Tue 24 Sep 2024 21:39:56 +0000
ROA not after:            Tue 23 Sep 2025 21:44:56 +0000
asID:                     270716
IP address blocks:        189.127.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b8:df:a8:a9:fb:f2:5d:47:bb:d0:72:a2:20:3b:ec:07:98:d0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
        Validity
            Not Before: Sep 24 21:39:56 2024 GMT
            Not After : Sep 23 21:44:56 2025 GMT
        Subject: CN=FC574F06667396538AACDF512C7D9D5DEE37C60D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:89:ff:b0:cc:90:66:31:f1:87:8f:c5:d6:3e:
                    df:74:7e:d5:e7:98:93:44:ee:4c:3a:42:54:4d:1e:
                    25:d5:2d:99:2e:b1:1b:ea:71:54:d2:09:3e:1a:da:
                    cc:2b:a0:ca:cc:2c:de:d7:a4:d6:fb:45:64:97:9b:
                    13:23:39:7d:04:1d:84:da:29:b4:e7:9f:0a:d3:a2:
                    a3:75:d7:d5:25:f8:3f:ac:a5:fd:e3:91:da:3e:5f:
                    f8:45:d1:f3:de:b6:5f:10:d9:46:b9:37:ab:58:39:
                    80:0c:98:6f:c5:db:b0:9b:f0:0e:e0:38:64:bd:70:
                    59:51:7c:c4:b9:b2:6c:84:f7:b2:95:aa:e9:5b:f8:
                    c8:b5:aa:c5:93:50:5d:12:20:d5:9c:9e:46:80:8d:
                    92:ad:3b:32:60:f4:61:7d:46:05:01:af:3c:96:dd:
                    51:d9:c2:a4:f5:1e:30:c1:3d:91:60:b7:43:57:dc:
                    0d:8f:9a:5b:30:fa:78:68:be:e1:1d:be:b2:c1:6a:
                    3e:80:28:2b:bd:21:d8:91:da:6e:70:81:2c:a3:f1:
                    da:e5:2f:58:0f:df:a1:0c:73:2e:b9:7f:1e:8e:82:
                    ef:47:7e:42:1c:68:43:82:60:27:37:fa:6f:55:64:
                    36:ac:79:41:8f:42:11:25:cd:f9:f4:47:bb:f3:77:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:57:4F:06:66:73:96:53:8A:AC:DF:51:2C:7D:9D:5D:EE:37:C6:0D
            X509v3 Authority Key Identifier:
                keyid:88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32342d3234203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:ff:59:48:eb:15:59:ff:e5:b9:ab:56:35:75:35:fd:91:62:
         f8:2c:9d:41:97:c9:60:bb:fb:90:9b:7c:98:8e:a6:66:8b:ad:
         86:4d:e8:4a:94:63:95:6d:a5:b9:e5:dd:0e:79:57:29:f1:68:
         bd:1b:6b:58:99:5c:ad:4d:82:86:1d:bf:10:81:c7:5c:05:fe:
         8d:d5:78:f5:1c:36:b1:d6:c3:84:b9:42:18:c0:f5:8f:19:01:
         1f:5b:ad:b5:52:aa:63:92:9f:ad:0b:14:b7:71:c1:35:54:e2:
         44:0b:33:45:54:ca:fb:87:2a:6e:d8:91:fb:d1:df:14:e8:c8:
         4f:83:41:e5:39:24:89:8e:73:7a:2d:14:7c:ab:55:09:f5:36:
         0b:e8:f3:2a:b1:75:09:5b:1b:58:5c:7c:79:f2:11:64:31:1c:
         8d:b0:93:b3:63:b7:93:87:c0:7e:06:7d:e6:c7:90:0f:60:1f:
         68:61:15:62:b2:07:4e:e8:1b:ac:3a:a0:10:30:15:8f:6e:9e:
         4c:11:2e:9e:19:c9:d4:0a:9b:fd:b2:bd:88:7d:67:05:a9:1e:
         f1:95:83:19:6c:fa:19:5f:d6:6a:01:f6:4b:30:7f:11:36:b5:
         91:59:11:71:e9:23:1c:9d:8a:56:6f:21:39:ae:09:89:5f:6a:
         71:3b:d9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:26 2025 by rpki-client