Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32312d3231203d3e203238333630.roa
File:                     3138392e37362e3230382e302f32312d3231203d3e203238333630.roa (raw, json)
Hash identifier:          Yz9Qs6AUuEfvWe2SSY4XQ2ykARG8Lr0B3ggBQ4qiLsg=
Subject key identifier:   92:A1:20:DF:64:DE:B4:92:EE:B8:79:10:7B:BF:40:34:5E:E3:F3:10
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       5584EA9308C0B8DFB394AECFDC38AFD355A23154
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32312d3231203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:36 +0000
ROA not before:           Thu 17 Nov 2022 17:58:36 +0000
ROA not after:            Thu 16 Nov 2023 18:03:36 +0000
asID:                     28360
IP address blocks:        189.76.208.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:84:ea:93:08:c0:b8:df:b3:94:ae:cf:dc:38:af:d3:55:a2:31:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:36 2022 GMT
            Not After : Nov 16 18:03:36 2023 GMT
        Subject: CN=92A120DF64DEB492EEB879107BBF40345EE3F310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:3a:b7:18:1c:10:01:c7:af:dc:9d:6f:fb:
                    cf:31:93:ec:d9:69:2b:2f:8f:05:c0:72:44:c5:a7:
                    b2:2d:b8:72:32:e1:94:2f:e5:23:cf:74:8f:85:6d:
                    02:7f:84:d3:71:41:54:61:d1:3c:0e:fe:aa:4e:98:
                    2d:f7:5a:38:71:9c:f8:47:30:20:26:63:31:4d:d7:
                    37:87:91:73:0a:e2:36:9b:de:0c:04:34:6b:ae:86:
                    c2:7b:0f:09:28:7a:ff:41:f0:3d:bb:60:93:e8:22:
                    01:a3:65:a6:d4:5f:8d:97:1e:c7:c7:c4:69:1d:9c:
                    e4:57:e4:80:10:61:7b:d5:76:e3:62:44:ca:33:62:
                    18:36:54:4b:01:9e:fb:0d:77:10:7a:62:0e:40:c4:
                    0c:96:f1:26:29:f4:2b:27:33:49:b3:60:97:9a:2a:
                    b8:ff:e8:84:33:e7:c9:95:0e:e7:de:66:81:c8:16:
                    77:4c:92:c8:15:c5:1f:e5:b0:44:1a:2a:e7:24:2e:
                    0e:4a:f2:80:1e:33:62:aa:83:5e:01:0f:61:07:04:
                    c5:e7:f2:d4:61:4f:f8:a7:5a:95:d7:0a:0b:55:b0:
                    2e:6e:99:4b:ea:36:39:0f:92:f5:5e:2a:fe:ba:15:
                    83:05:f2:d7:b8:bb:f7:11:39:fb:56:db:27:52:07:
                    01:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A1:20:DF:64:DE:B4:92:EE:B8:79:10:7B:BF:40:34:5E:E3:F3:10
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32312d3231203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:b0:a7:69:51:ef:ee:85:95:eb:3e:fd:b7:69:b3:d5:fa:98:
         37:be:36:8b:27:6a:0a:d7:d2:0f:a9:dd:4e:fe:d6:3c:48:13:
         6d:f5:a9:be:5d:07:ea:62:1c:50:de:61:67:23:04:ff:3a:6b:
         db:d2:8e:ea:aa:45:f5:41:c8:b4:b3:f8:cc:3c:9b:b6:d9:58:
         5f:cf:32:94:39:4f:7d:70:18:23:e9:65:8e:3c:b9:06:da:39:
         eb:80:4f:2c:1e:d0:16:f0:8d:26:84:fe:bb:26:e5:a9:1f:95:
         9a:7b:1c:1b:3d:95:83:70:be:7c:cc:52:5d:5b:19:b3:38:9d:
         cb:3c:fd:61:45:8a:30:83:54:ea:7e:58:50:4a:f8:60:48:8c:
         5c:bc:62:30:f7:5d:0a:ab:04:3d:99:ac:c5:bd:7e:4c:8e:86:
         19:b5:10:a2:3c:c4:e9:e7:dd:0f:ca:e0:44:ba:56:5a:12:77:
         93:96:57:ba:f3:d6:e7:b1:65:1f:4f:6a:d8:4b:e1:28:3e:af:
         f8:b0:ca:8c:6a:4b:80:75:17:eb:fc:4c:2a:24:b2:11:77:51:
         d4:a5:d9:a4:b4:8f:7e:bd:a6:91:0e:29:e7:0d:38:2d:fa:93:
         c3:a0:a2:41:b8:68:26:ab:43:93:ea:78:53:d6:5a:e9:c2:68:
         f1:56:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:25 2023 by rpki-client on console.sobornost.net