Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/3138312e3138392e382e302f32332d3234203d3e20323731333830.roa
File:                     3138312e3138392e382e302f32332d3234203d3e20323731333830.roa (raw, json)
Hash identifier:          MnvYfL1SM9oRCMhpvs58DwxIiNWqEawp0WV3mUSKYAc=
Subject key identifier:   96:CF:5B:E7:1D:9D:93:50:BE:9E:C0:59:11:3B:92:36:FD:8D:F5:6C
Certificate issuer:       /CN=F29CBF3783E5E2250C27F456D15288BD25A3BCC0
Certificate serial:       60B83EA0A849D1D5B04156D75AAAE896378E7642
Authority key identifier: F2:9C:BF:37:83:E5:E2:25:0C:27:F4:56:D1:52:88:BD:25:A3:BC:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/3138312e3138392e382e302f32332d3234203d3e20323731333830.roa
Signing time:             Thu 07 Mar 2024 13:59:16 +0000
ROA not before:           Thu 07 Mar 2024 13:54:16 +0000
ROA not after:            Thu 06 Mar 2025 13:59:16 +0000
asID:                     271380
IP address blocks:        181.189.8.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b8:3e:a0:a8:49:d1:d5:b0:41:56:d7:5a:aa:e8:96:37:8e:76:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F29CBF3783E5E2250C27F456D15288BD25A3BCC0
        Validity
            Not Before: Mar  7 13:54:16 2024 GMT
            Not After : Mar  6 13:59:16 2025 GMT
        Subject: CN=96CF5BE71D9D9350BE9EC059113B9236FD8DF56C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:11:a4:ef:8b:81:91:1b:17:01:92:88:b0:
                    89:16:24:2d:2f:be:79:3c:f5:41:07:b2:6e:8a:5c:
                    6e:ce:7e:1d:a4:9f:f6:85:2c:dd:1b:41:66:82:eb:
                    d6:47:37:ea:e3:0e:da:91:1f:44:5d:e7:41:d5:ea:
                    d8:24:46:44:44:ab:95:9c:73:a8:19:b0:aa:62:4e:
                    24:b5:67:f2:74:d9:a4:e1:5f:d9:6d:ad:f5:15:26:
                    b4:2a:86:6d:2c:37:a3:43:e6:09:9a:56:76:82:22:
                    3c:05:02:ba:f2:b5:8e:e9:1d:98:94:f9:64:73:44:
                    5d:25:c3:a2:73:a8:f8:1a:7e:24:26:31:18:68:9e:
                    54:07:68:99:35:b7:d6:4b:0f:fd:10:09:1b:fd:18:
                    68:56:78:29:92:cb:52:73:26:85:0c:23:0e:dd:a8:
                    05:71:e8:55:32:e0:df:bc:c8:7b:43:77:49:f3:4c:
                    02:46:d9:1a:24:b1:af:07:a1:1b:f9:ef:96:a5:83:
                    cf:51:61:de:b0:a3:74:20:fa:13:56:a0:81:c9:28:
                    40:08:a2:0c:8d:0d:bf:1a:3e:25:af:30:09:63:01:
                    87:c5:a4:0b:8b:c2:81:7a:88:73:72:02:84:a3:2a:
                    3b:38:9a:f8:3d:80:25:0d:d5:7c:7e:7c:e0:d2:92:
                    a1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CF:5B:E7:1D:9D:93:50:BE:9E:C0:59:11:3B:92:36:FD:8D:F5:6C
            X509v3 Authority Key Identifier:
                keyid:F2:9C:BF:37:83:E5:E2:25:0C:27:F4:56:D1:52:88:BD:25:A3:BC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/3138312e3138392e382e302f32332d3234203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:9f:db:76:7f:cc:64:39:0a:6a:f9:fb:ec:4d:3e:99:c8:cb:
         ef:28:49:64:72:ca:1e:d7:4b:bc:e6:96:3f:62:a9:64:1e:60:
         85:46:27:2b:5a:f0:e5:12:62:bf:89:fa:91:88:46:b0:1f:9b:
         d3:63:36:2e:36:d8:ce:39:ce:79:43:f1:52:7d:e2:8f:11:79:
         fc:c7:27:90:4f:61:04:be:0b:11:95:e2:b5:ec:41:84:ca:0e:
         47:3e:49:77:20:9c:b5:3e:16:6d:14:4c:4c:b6:b4:0e:3b:9d:
         40:91:3f:46:38:92:8c:19:d7:c4:f0:76:84:3f:99:bc:00:0e:
         66:4a:aa:fe:b7:47:56:a3:51:3a:7c:3a:02:1e:77:4d:30:6a:
         f2:1d:6c:c6:9d:fb:c7:bb:40:75:08:95:8f:8a:86:bf:83:54:
         fb:76:f1:6b:08:4a:91:4d:1e:df:65:b1:f4:44:02:56:17:d4:
         bd:7b:bb:ca:98:ab:bc:e1:85:3b:eb:b5:1d:df:05:b6:90:62:
         96:c0:dc:86:16:b1:75:86:26:b7:0d:71:12:2c:b0:ee:b5:f6:
         99:9e:ce:0c:3f:5f:14:6a:07:9d:2a:b9:5c:3d:d5:9e:28:79:
         4d:f6:3a:09:88:0d:fa:6f:eb:7d:36:6f:d6:94:09:23:8e:05:
         36:14:53:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:23 2024 by rpki-client on console-fra.rpki-client.org