Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32312d3231203d3e203238333630.roa
File:                     3138392e37362e3232342e302f32312d3231203d3e203238333630.roa (raw, json)
Hash identifier:          HzI+xUjP/gytWhr8OIQW0GlKF5vY6O+tptVQjcocdko=
Subject key identifier:   46:13:81:09:C4:38:CF:EA:FE:C1:04:62:5E:FD:28:F9:00:68:E6:3E
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       3E254C90EC055BF2BBFF783AC17B6843CAA2906C
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32312d3231203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:35 +0000
ROA not before:           Thu 17 Nov 2022 17:58:35 +0000
ROA not after:            Thu 16 Nov 2023 18:03:35 +0000
asID:                     28360
IP address blocks:        189.76.224.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:25:4c:90:ec:05:5b:f2:bb:ff:78:3a:c1:7b:68:43:ca:a2:90:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:35 2022 GMT
            Not After : Nov 16 18:03:35 2023 GMT
        Subject: CN=46138109C438CFEAFEC104625EFD28F90068E63E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:6e:4c:a3:4d:df:64:c1:71:23:f6:e6:6a:
                    8a:34:09:a4:78:c6:38:9b:86:76:63:be:17:a1:01:
                    12:1e:56:84:d2:e5:5e:89:7d:5b:30:f7:bf:8b:8e:
                    4e:9e:fa:b2:ec:97:09:97:d9:65:38:45:ef:9c:e3:
                    96:7b:8a:b4:8d:59:58:06:00:15:4f:7d:97:31:b2:
                    03:ce:78:79:77:22:eb:1d:75:a5:25:5e:a6:11:43:
                    af:12:fa:ae:7c:97:b4:d3:90:d5:4f:0e:6a:4d:fb:
                    8c:be:05:fb:6c:a6:00:e6:d5:9c:a3:d0:e9:78:18:
                    22:c3:6a:4f:b2:bc:0e:c4:ea:9e:b7:bb:fd:3d:60:
                    ae:9f:31:0f:40:11:b7:70:f2:06:00:a3:3d:b9:eb:
                    00:37:56:0d:90:33:3a:f4:04:4d:a0:59:d6:ac:d5:
                    2c:0b:3e:fa:04:3c:e6:12:f4:6a:c7:67:49:4a:f8:
                    09:aa:32:90:87:43:98:0b:bd:25:6e:aa:ad:cb:35:
                    59:b9:27:3a:31:af:8c:74:08:10:24:2e:34:8c:d7:
                    9b:b7:eb:a0:58:12:c4:57:32:5b:79:ce:4c:f2:8a:
                    b4:b9:df:86:b9:06:1a:0c:f7:e8:34:48:45:17:a4:
                    d4:e0:80:96:32:e2:2e:16:ff:70:3a:90:70:1a:6b:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:13:81:09:C4:38:CF:EA:FE:C1:04:62:5E:FD:28:F9:00:68:E6:3E
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32312d3231203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:47:e6:a0:ad:02:26:60:a2:5d:86:93:04:ea:01:88:62:c8:
         36:b8:d5:f3:3a:53:a6:e5:ca:1d:d0:19:ff:32:21:0c:83:57:
         82:d5:58:0f:d9:93:3f:e3:fe:ea:a8:ea:1a:f9:58:bf:10:ff:
         3b:1f:bb:39:30:7a:7a:df:70:73:f8:8f:87:a4:e1:27:2e:9b:
         af:19:eb:19:f5:92:ae:5a:f4:dd:fa:4c:fd:d4:61:9f:50:cd:
         4b:f3:21:cf:ec:35:38:05:33:df:6e:ec:53:a1:93:15:61:39:
         bb:11:b9:66:57:a8:72:50:94:66:57:32:03:9e:dd:ae:86:91:
         de:a1:30:17:c0:1c:8a:bb:db:74:70:f3:5e:52:ed:fb:6d:80:
         10:a3:e6:6d:40:43:ad:69:98:b1:1a:ea:86:4d:25:ad:a6:bc:
         dd:8f:0f:5d:b2:f8:c7:04:85:09:4e:0a:3e:90:57:b8:1a:e5:
         ba:90:41:64:dc:7c:af:1f:d2:5c:43:b7:ad:1d:a8:12:5f:71:
         63:6b:80:db:09:52:2c:5c:3d:9e:b4:2e:55:a0:f2:41:f3:ba:
         d7:1b:3b:e2:71:73:ef:85:28:f1:28:c1:6f:de:43:81:9c:69:
         a9:27:8f:98:e5:ec:a8:3c:6c:d6:c4:07:1e:c0:20:bf:a5:cf:
         f9:f2:bf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:25 2023 by rpki-client on console.sobornost.net