Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3138392e35312e34302e302f32322d3234203d3e20323730373235.roa
File:                     3138392e35312e34302e302f32322d3234203d3e20323730373235.roa (raw, json)
Hash identifier:          6S2hCEyxhdBYV3r5yuiJgHyr/qtwCp7gSwhVZ0YD3Rw=
Subject key identifier:   B8:73:6E:FB:B6:4E:39:3E:5F:0E:1D:79:A9:D6:5A:C4:9F:EB:A7:C1
Certificate issuer:       /CN=580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE
Certificate serial:       40F766CCC5B8581C516138619FF9F458C2A69CB4
Authority key identifier: 58:0A:F0:46:1B:33:6C:9A:8C:2D:F4:7A:3B:A8:1F:DE:F5:4D:80:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3138392e35312e34302e302f32322d3234203d3e20323730373235.roa
Signing time:             Tue 29 Aug 2023 18:00:00 +0000
ROA not before:           Tue 29 Aug 2023 17:55:00 +0000
ROA not after:            Tue 27 Aug 2024 18:00:00 +0000
asID:                     270725
IP address blocks:        189.51.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f7:66:cc:c5:b8:58:1c:51:61:38:61:9f:f9:f4:58:c2:a6:9c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE
        Validity
            Not Before: Aug 29 17:55:00 2023 GMT
            Not After : Aug 27 18:00:00 2024 GMT
        Subject: CN=B8736EFBB64E393E5F0E1D79A9D65AC49FEBA7C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:0c:33:54:f3:b1:e2:40:04:0d:da:43:9f:
                    86:64:ad:4b:3b:48:3e:99:16:5e:dc:f3:9c:66:19:
                    f4:79:78:23:6a:04:6f:de:31:31:15:4d:c0:da:43:
                    62:1b:b8:d2:e8:22:09:52:06:01:6c:13:6b:bd:00:
                    62:ab:0b:e0:1d:c6:d9:d4:88:5f:bd:2b:50:05:4b:
                    7a:a7:b0:7a:e9:f2:5d:df:85:4c:90:fd:d9:cc:98:
                    c6:01:56:8d:b7:b1:35:f1:e6:67:b1:d2:d3:79:7b:
                    1e:fb:df:ff:53:0d:7e:b1:73:89:34:3a:be:47:71:
                    99:e3:24:d5:e4:21:44:0c:41:bd:f3:7a:ec:24:a7:
                    de:54:0c:76:df:cb:93:bf:3a:9f:e5:c7:97:c3:54:
                    66:ad:f1:de:18:13:9c:03:cc:fd:5f:bc:48:98:c9:
                    f3:c7:cb:90:27:7a:bf:2c:08:92:37:50:a3:e3:80:
                    58:86:5e:36:03:11:99:e4:ea:bf:b4:ae:74:ed:cd:
                    9c:36:15:2b:a8:64:0f:4a:67:31:aa:14:fb:42:f3:
                    e9:bf:d5:48:a9:8d:10:79:45:52:59:0f:7e:86:f2:
                    cf:cd:1c:27:f3:08:f9:c6:8b:fb:ce:05:26:c8:19:
                    ef:78:6b:48:a8:d9:a6:6c:34:c3:4b:49:8d:4e:ab:
                    93:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:73:6E:FB:B6:4E:39:3E:5F:0E:1D:79:A9:D6:5A:C4:9F:EB:A7:C1
            X509v3 Authority Key Identifier:
                keyid:58:0A:F0:46:1B:33:6C:9A:8C:2D:F4:7A:3B:A8:1F:DE:F5:4D:80:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3138392e35312e34302e302f32322d3234203d3e20323730373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:3d:80:3b:14:f4:44:72:0c:b7:b8:48:be:65:a4:cc:cc:cb:
         a2:bb:a5:f4:8f:3e:da:19:98:df:d5:24:ab:3f:7b:ed:a0:36:
         e2:38:67:28:7f:46:ff:9d:8e:01:c1:d3:45:5b:95:2a:d5:07:
         76:ff:69:90:7c:0e:ca:22:b0:81:18:9b:00:95:3f:6f:e2:5c:
         25:2c:1e:0f:8e:3d:c8:97:aa:a9:5f:81:97:13:58:ef:55:53:
         70:b9:50:40:77:52:ca:d8:d0:2a:76:8a:43:4b:63:b8:b3:4d:
         1e:8d:03:bb:3e:18:29:af:6c:1c:95:e3:62:07:47:9e:93:54:
         bb:15:43:7f:4c:a8:18:eb:67:eb:cd:d0:37:36:31:34:b5:67:
         f3:60:72:52:11:c2:05:8e:c3:26:c4:70:23:9a:40:78:b5:fd:
         5e:f8:dc:12:6d:ab:3f:21:d6:8d:b8:53:fc:37:db:b7:be:a1:
         7b:d1:f0:ae:f9:7e:82:98:9d:bc:a1:ba:ff:76:48:e1:b5:dc:
         82:44:be:64:f1:8a:6c:82:bc:3d:6d:17:a8:e0:1e:50:a9:4a:
         0d:f7:29:2e:85:68:f5:05:02:bc:c5:b8:80:34:fc:e7:f7:3c:
         3c:99:f6:04:2e:4b:bb:c8:25:7d:e0:bb:50:67:3f:bc:72:01:
         e6:ea:9b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:59 2024 by rpki-client on console.sobornost.net