Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/3138312e3138392e382e302f32322d3232203d3e20323731333830.roa
File:                     3138312e3138392e382e302f32322d3232203d3e20323731333830.roa (raw, json)
Hash identifier:          6GBTAM5IshrDH+7y00u9GEAkb4oJSwY4BXL/MY04QMc=
Subject key identifier:   63:A8:86:77:79:48:EA:20:C1:A7:CC:18:73:0A:DC:6F:C7:A9:09:27
Certificate issuer:       /CN=F29CBF3783E5E2250C27F456D15288BD25A3BCC0
Certificate serial:       0539B65B512F6FD846CB35E0FDC25D37F1ED0AF0
Authority key identifier: F2:9C:BF:37:83:E5:E2:25:0C:27:F4:56:D1:52:88:BD:25:A3:BC:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/3138312e3138392e382e302f32322d3232203d3e20323731333830.roa
Signing time:             Thu 07 Mar 2024 13:58:36 +0000
ROA not before:           Thu 07 Mar 2024 13:53:36 +0000
ROA not after:            Thu 06 Mar 2025 13:58:36 +0000
asID:                     271380
IP address blocks:        181.189.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:39:b6:5b:51:2f:6f:d8:46:cb:35:e0:fd:c2:5d:37:f1:ed:0a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F29CBF3783E5E2250C27F456D15288BD25A3BCC0
        Validity
            Not Before: Mar  7 13:53:36 2024 GMT
            Not After : Mar  6 13:58:36 2025 GMT
        Subject: CN=63A886777948EA20C1A7CC18730ADC6FC7A90927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:42:84:dc:06:9c:5c:40:7a:55:bf:1e:1e:
                    28:bc:52:21:a4:5e:ce:eb:63:7f:61:08:0b:5c:01:
                    ef:23:69:b6:fc:23:c0:5c:b3:30:4b:14:b2:37:60:
                    7a:22:64:c5:8e:9e:46:da:db:1e:94:f8:6c:5e:33:
                    89:fb:c7:1a:c6:d2:74:e8:8f:48:84:32:a0:1e:d1:
                    00:39:c7:dd:7c:ca:3e:7a:ab:63:41:c8:ad:34:e7:
                    52:08:24:0f:96:fd:f1:cf:4d:55:5c:c0:48:fe:cb:
                    0a:e7:3e:ab:e0:b8:e4:53:3a:ba:b9:8d:e0:e1:a2:
                    2f:3a:c8:d1:f8:be:48:98:f5:d4:ed:a4:4c:a4:d9:
                    f9:14:9b:82:43:9c:a3:7b:36:bb:d5:9b:8c:d1:3c:
                    d1:84:ad:2e:48:4d:4f:9c:fc:bf:35:5b:ea:ec:7c:
                    f7:cd:65:da:96:1a:1c:37:80:77:62:d6:be:37:eb:
                    8f:12:ef:71:e4:2d:55:11:ca:24:15:80:8d:53:c8:
                    e0:2d:b3:7a:3b:61:e1:27:15:ec:65:8b:01:2b:3a:
                    f3:37:c1:20:cd:be:89:c7:be:f3:94:d0:42:dd:93:
                    19:f7:eb:a4:11:0d:90:4a:f6:70:37:11:6e:9f:56:
                    11:3f:22:9f:20:2c:3f:ec:00:87:70:01:8f:d7:40:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A8:86:77:79:48:EA:20:C1:A7:CC:18:73:0A:DC:6F:C7:A9:09:27
            X509v3 Authority Key Identifier:
                keyid:F2:9C:BF:37:83:E5:E2:25:0C:27:F4:56:D1:52:88:BD:25:A3:BC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/3138312e3138392e382e302f32322d3232203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:8c:f1:80:cf:7a:78:5f:ea:7f:ed:64:df:e9:41:20:3b:67:
         fc:71:a0:82:06:85:06:da:7e:44:71:0c:4f:b8:d9:fd:03:76:
         0a:d3:53:e7:c6:20:9f:6a:ef:49:d3:bc:d7:39:8c:5f:ba:df:
         30:84:7c:a9:b8:3b:2c:7b:49:ad:06:8c:9e:63:9c:14:df:61:
         35:3d:10:47:f8:89:2a:63:15:88:7a:5e:80:d6:17:e1:01:cb:
         f6:49:8e:46:34:6f:63:4a:3f:66:2d:0e:87:f8:09:e7:be:d3:
         38:9c:f8:13:67:af:b4:ef:90:ac:c2:8d:66:59:58:b5:c2:88:
         f6:9e:fa:3a:8e:85:cf:99:a7:f6:a8:dc:22:af:82:5a:52:1d:
         8c:09:c8:bb:0b:95:70:fd:67:2d:0c:de:88:c0:b9:6f:29:d5:
         ba:f6:9b:f6:01:18:c7:8e:74:95:5a:22:76:d3:5d:fb:9a:41:
         0e:38:af:af:cc:73:0d:b7:18:a8:1f:1f:d2:28:c7:f2:3a:f8:
         f2:5b:7b:51:c6:cb:13:ad:f2:76:47:af:96:f7:8d:77:80:3f:
         47:d2:be:ca:74:11:fe:56:85:80:3c:d0:02:1b:5b:80:03:14:
         d2:e6:9b:51:3f:fd:93:54:76:07:c0:40:97:76:4b:49:7d:d9:
         dd:f4:4b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org