Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139342e302f32332d3233203d3e203238323334.roa
File:                     3138392e3132372e3139342e302f32332d3233203d3e203238323334.roa (raw, json)
Hash identifier:          RCuteyXMPdOlMJZOxXSiRoIGYCngw+zzJXNdFnYeXyM=
Subject key identifier:   A0:C7:73:30:7E:B4:CB:2E:7A:F6:38:BF:4C:81:D0:1C:F2:37:1B:F2
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       74986380E2EA433B7C8B7B80AD6CDD31D8577948
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139342e302f32332d3233203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:03 +0000
ROA not before:           Wed 20 Dec 2023 19:55:03 +0000
ROA not after:            Wed 18 Dec 2024 20:00:03 +0000
asID:                     28234
IP address blocks:        189.127.194.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:98:63:80:e2:ea:43:3b:7c:8b:7b:80:ad:6c:dd:31:d8:57:79:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:03 2023 GMT
            Not After : Dec 18 20:00:03 2024 GMT
        Subject: CN=A0C773307EB4CB2E7AF638BF4C81D01CF2371BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:61:43:bd:df:87:99:71:ee:26:58:b0:99:ea:
                    0f:76:9d:52:f2:5b:3e:c1:ed:92:37:44:5e:3a:e1:
                    5b:c9:aa:23:2f:ba:4a:c4:49:3f:2f:91:e4:33:d9:
                    a2:3d:7b:48:d8:05:86:c4:d5:3e:35:7a:83:11:35:
                    60:b7:0a:da:dd:3d:4f:90:01:46:56:a0:e4:27:c6:
                    87:0c:8c:e2:65:7a:70:9b:0a:f6:b8:dd:12:5e:bf:
                    40:33:e7:61:73:46:4c:b5:2c:dd:50:17:c5:a9:69:
                    2e:4f:74:4a:3f:cd:7e:e5:2d:c1:50:1d:44:11:55:
                    07:7f:f3:84:ac:1f:85:a4:a2:48:47:3d:d0:1a:86:
                    d8:7f:4c:87:26:8f:5c:a1:28:ee:00:82:1b:29:70:
                    eb:23:13:1f:46:e6:5f:e9:4c:d7:bc:40:0e:2b:d8:
                    ab:de:78:cc:a6:8a:44:03:f0:a8:61:36:58:12:5e:
                    47:9b:b6:58:42:33:55:48:13:56:71:15:4d:f1:7b:
                    a0:9b:d7:35:c0:5f:81:98:6c:8f:04:ae:b2:33:9e:
                    cc:97:0a:f6:89:87:d7:ad:e3:c9:5e:ee:ab:62:d0:
                    1e:09:84:f8:fd:53:25:a1:81:45:b5:87:f6:00:46:
                    b7:a6:cf:c3:b6:ec:07:18:0a:e7:a8:24:ca:4e:67:
                    47:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C7:73:30:7E:B4:CB:2E:7A:F6:38:BF:4C:81:D0:1C:F2:37:1B:F2
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139342e302f32332d3233203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:11:18:b5:fd:f4:d0:15:95:62:6c:cb:94:71:d0:a8:c2:0f:
         93:9a:9f:9e:c9:1d:f2:55:67:a7:11:83:3a:92:45:e9:3e:59:
         77:68:51:d8:15:ee:e4:d6:bb:77:e0:d2:d5:96:60:99:5a:1e:
         3c:94:03:dd:6a:fd:13:51:6d:64:ce:70:fe:e7:e9:41:be:90:
         3b:21:bd:d9:36:f3:ac:82:ad:df:d4:6f:7c:a4:9f:b7:e0:81:
         b3:e1:a7:bd:3c:d8:86:79:77:50:6d:c5:38:bb:17:9e:2f:e4:
         c6:e2:55:1e:b7:4d:3c:fe:67:28:b8:b3:b1:fe:08:d8:92:fe:
         9e:0c:ce:26:73:72:b1:5b:b3:d5:89:05:80:a4:3a:4b:63:9b:
         07:5e:22:f0:cf:a2:50:6c:e9:9c:37:cd:69:fc:ab:7d:9c:39:
         a0:11:5d:19:0a:11:4a:a3:2e:0a:ad:92:7f:ec:b7:fe:f5:28:
         b4:4c:75:0c:ba:bf:39:f0:15:2c:1f:c1:74:52:28:0a:75:39:
         35:dd:a4:4b:3d:d8:ab:e6:5f:46:df:19:cf:12:1e:9a:6a:25:
         a1:99:1f:16:54:b0:6c:f1:99:f9:4a:32:4e:ef:a2:19:b1:4f:
         b9:86:01:95:b0:8c:8b:fa:57:f5:5f:8f:2f:68:a7:2d:d4:17:
         5e:e6:ee:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net