Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/0/3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa
File:                     3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa (raw, json)
Hash identifier:          b2JFbgFFtHO8lMiPBK1M59wc9zvqpteqlze0x7BbBLk=
Subject key identifier:   F6:53:A7:16:24:DB:7C:8E:BC:23:9F:A8:49:87:DC:51:DD:33:A8:E9
Certificate issuer:       /CN=88EE4CB4E5DFECFA5360BE824F04DD4D07A9CE3C
Certificate serial:       37BCB4C511631D5C82F931A5984516481322DB33
Authority key identifier: 88:EE:4C:B4:E5:DF:EC:FA:53:60:BE:82:4F:04:DD:4D:07:A9:CE:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88EE4CB4E5DFECFA5360BE824F04DD4D07A9CE3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/0/3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa
Signing time:             Mon 05 Feb 2024 17:00:00 +0000
ROA not before:           Mon 05 Feb 2024 16:55:00 +0000
ROA not after:            Mon 03 Feb 2025 17:00:00 +0000
asID:                     270540
IP address blocks:        189.85.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:bc:b4:c5:11:63:1d:5c:82:f9:31:a5:98:45:16:48:13:22:db:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88EE4CB4E5DFECFA5360BE824F04DD4D07A9CE3C
        Validity
            Not Before: Feb  5 16:55:00 2024 GMT
            Not After : Feb  3 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:50:ea:cf:a2:0a:a3:f8:a3:95:48:87:fb:
                    fb:df:2b:8f:79:8a:c0:26:73:1f:b3:d6:f2:13:f1:
                    c2:95:41:a5:35:7f:6f:4e:ab:c9:87:94:6e:15:a0:
                    9c:de:08:b1:bc:10:cd:f1:f6:65:93:d8:30:73:80:
                    d6:03:30:6d:88:b3:3b:24:cd:90:67:14:f3:55:a5:
                    0d:85:a5:1e:0f:ba:c0:e7:5f:b0:d7:df:be:b1:ea:
                    05:7e:2a:99:96:4f:0c:f3:82:29:a4:af:a1:cf:b5:
                    a7:43:e7:08:6c:a4:f3:66:7e:79:33:7b:aa:55:7d:
                    0e:dc:7c:a2:31:2c:60:0d:df:1e:6b:e4:d6:e2:2c:
                    4f:13:16:6e:0f:b4:fe:09:f9:79:43:82:d2:64:f7:
                    3e:cf:43:2a:26:d8:0b:48:63:a8:6e:30:e0:b6:cd:
                    9c:aa:25:dc:72:f0:e3:6d:98:25:83:54:e8:25:aa:
                    36:bd:09:a6:02:61:0a:6e:ba:ca:8e:b8:37:7a:85:
                    d0:57:3f:99:7b:c2:2f:24:09:90:a1:50:c4:d3:57:
                    13:fe:89:e7:fc:c2:9b:83:94:80:96:ac:ea:98:a5:
                    13:03:47:42:eb:a5:c5:56:ef:6c:bd:de:09:19:3c:
                    3f:51:7e:5e:67:c0:de:22:29:bd:84:88:5c:16:74:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:53:A7:16:24:DB:7C:8E:BC:23:9F:A8:49:87:DC:51:DD:33:A8:E9
            X509v3 Authority Key Identifier:
                keyid:88:EE:4C:B4:E5:DF:EC:FA:53:60:BE:82:4F:04:DD:4D:07:A9:CE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/0/88EE4CB4E5DFECFA5360BE824F04DD4D07A9CE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88EE4CB4E5DFECFA5360BE824F04DD4D07A9CE3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/0/3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:c4:bb:7a:e9:24:fb:da:a8:e6:20:aa:15:9a:dd:13:37:fc:
         ed:c5:1a:77:76:bf:94:b4:43:ac:be:43:16:d5:c4:99:3c:99:
         8a:ac:d3:04:a0:88:a5:49:1f:ae:6d:8b:70:f3:b9:93:f9:1e:
         e4:8d:e6:1c:8e:90:7e:c9:b9:f5:9a:bf:fc:a0:36:81:09:b1:
         a1:21:5c:f5:a8:9f:6f:79:18:e0:5f:b3:ce:ef:d7:00:9a:d5:
         3a:2f:0b:90:f7:6d:55:fb:37:f2:7f:fb:c3:4c:a1:df:7f:6b:
         e6:2d:19:61:84:73:cb:39:5b:93:b9:b2:07:b1:e1:c3:1b:24:
         2b:8e:78:41:a2:3d:e1:2c:9c:5b:e4:96:d5:a1:93:bf:8e:48:
         ea:87:26:6e:c7:27:d9:03:ce:c1:3e:cf:21:3e:02:4a:b5:92:
         27:38:3e:e3:45:96:ca:f6:b0:fc:8d:dd:fb:ea:52:1b:69:02:
         d4:9a:53:da:cd:af:f6:4a:f2:56:27:2a:cd:34:8a:c2:f4:2d:
         a1:0c:f6:10:af:34:8f:29:54:8c:1c:81:61:23:da:7c:73:2a:
         64:54:39:f6:83:9f:d6:ba:9b:94:82:dc:4a:03:c8:62:dc:31:
         cf:9d:9c:3c:82:90:c8:fc:7a:f0:60:dc:f1:2c:50:6e:fd:a1:
         d4:85:26:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org