Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/3139302e38392e34382e302f32322d3234203d3e20323730333535.roa
File:                     3139302e38392e34382e302f32322d3234203d3e20323730333535.roa (raw, json)
Hash identifier:          QCBEgYSrZhhNd4hKOh5yKL3v4YgP2YaXirrW3HU9yGM=
Subject key identifier:   AB:5D:BA:B9:1D:12:55:FA:BD:06:B2:C2:03:58:3B:6E:63:20:BE:65
Certificate issuer:       /CN=DD0B472AAE8961BD1FE291D18650CF8BB2C4F046
Certificate serial:       5E8619618418C9433B7D2E94E139213EB40C0E3B
Authority key identifier: DD:0B:47:2A:AE:89:61:BD:1F:E2:91:D1:86:50:CF:8B:B2:C4:F0:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0B472AAE8961BD1FE291D18650CF8BB2C4F046.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/3139302e38392e34382e302f32322d3234203d3e20323730333535.roa
Signing time:             Fri 02 Feb 2024 11:49:33 +0000
ROA not before:           Fri 02 Feb 2024 11:44:33 +0000
ROA not after:            Fri 31 Jan 2025 11:49:33 +0000
asID:                     270355
IP address blocks:        190.89.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:86:19:61:84:18:c9:43:3b:7d:2e:94:e1:39:21:3e:b4:0c:0e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0B472AAE8961BD1FE291D18650CF8BB2C4F046
        Validity
            Not Before: Feb  2 11:44:33 2024 GMT
            Not After : Jan 31 11:49:33 2025 GMT
        Subject: CN=AB5DBAB91D1255FABD06B2C203583B6E6320BE65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:6e:56:20:d4:d0:86:a6:a3:0e:7e:7a:e1:
                    4e:32:d2:4d:90:ff:08:93:30:7c:d4:1e:5c:fb:b2:
                    61:fc:c6:69:71:79:c5:89:32:b2:86:a7:74:5d:b2:
                    10:10:51:fa:9f:de:ba:12:6f:30:77:b8:75:c0:44:
                    55:af:5b:3c:50:15:67:98:0f:fb:ba:40:b0:58:6f:
                    b3:89:46:f4:06:03:8f:2b:41:58:58:40:8c:b7:a8:
                    c3:4b:15:55:25:be:85:ea:7c:c0:28:93:92:29:4a:
                    ea:fd:07:e5:0f:b6:03:90:2f:ae:5f:15:3b:ea:f3:
                    45:54:2b:b6:39:89:b3:9c:4d:31:43:0d:86:aa:80:
                    98:51:2b:a9:4d:30:f4:0e:ce:c6:7e:b9:d7:b1:ae:
                    87:b1:7a:a3:08:9a:f8:d5:c9:18:41:d2:e7:50:db:
                    06:93:a2:e8:95:7f:7c:94:59:2f:a2:d6:94:3b:ad:
                    c6:bc:da:98:fa:ee:c2:84:25:40:86:35:e9:a7:1c:
                    e2:f7:93:03:87:4d:48:c8:ed:d1:02:c8:52:22:6e:
                    90:d1:45:0a:39:09:e7:f4:04:ea:a0:e7:07:85:68:
                    4b:88:3d:f4:25:55:e0:2b:49:a5:03:4b:d6:eb:bf:
                    bb:58:c8:90:35:37:04:8a:dd:60:ea:88:d8:ff:02:
                    14:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5D:BA:B9:1D:12:55:FA:BD:06:B2:C2:03:58:3B:6E:63:20:BE:65
            X509v3 Authority Key Identifier:
                keyid:DD:0B:47:2A:AE:89:61:BD:1F:E2:91:D1:86:50:CF:8B:B2:C4:F0:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/DD0B472AAE8961BD1FE291D18650CF8BB2C4F046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0B472AAE8961BD1FE291D18650CF8BB2C4F046.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/3139302e38392e34382e302f32322d3234203d3e20323730333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:e5:6f:c3:62:d8:55:6a:c0:a5:96:66:b0:dd:41:80:7c:78:
         f9:70:0d:3d:8b:14:e6:9d:36:f9:5d:1b:57:49:62:0a:10:5b:
         bf:62:ff:0f:18:7d:62:fc:1f:06:96:d0:18:1f:75:08:bf:20:
         db:89:f6:f6:07:00:fe:58:0c:60:9d:8b:6b:f7:54:0f:02:3b:
         7c:13:d0:eb:44:53:52:fc:b4:f6:5a:4d:9d:1c:94:8d:d8:9d:
         49:6b:a1:e0:57:4a:d9:c2:e6:9a:0c:45:fd:ec:d5:2c:d1:62:
         62:c1:36:d6:2f:21:cd:11:eb:bb:aa:36:8e:fe:6d:28:ba:ea:
         c0:b4:92:26:d1:ee:90:06:cf:9d:3d:c7:b2:36:50:b9:83:ca:
         fa:ee:ae:20:1e:96:2b:7c:9c:a0:20:bb:3c:c1:9b:f4:cf:3b:
         a7:da:70:67:5b:2f:d1:33:6c:f3:b4:5c:9f:af:ec:59:ef:bc:
         73:e3:45:39:4b:0c:f3:6f:0b:ea:ff:83:68:b4:b2:eb:61:43:
         57:27:40:62:b3:22:64:1a:5c:13:2d:59:3c:5c:cd:66:a9:f9:
         ef:49:f3:71:67:db:a2:a7:cd:3a:5c:e6:9a:cb:b5:08:20:32:
         ea:ca:d0:cd:60:bc:28:0e:39:4d:d6:50:e2:4b:02:7a:54:52:
         55:84:89:93
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXoYZYYQYyUM7fS6U4TkhPrQMDjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQwQjQ3MkFBRTg5NjFCRDFGRTI5MUQxODY1MENGOEJC
MkM0RjA0NjAeFw0yNDAyMDIxMTQ0MzNaFw0yNTAxMzExMTQ5MzNaMDMxMTAvBgNV
BAMTKEFCNURCQUI5MUQxMjU1RkFCRDA2QjJDMjAzNTgzQjZFNjMyMEJFNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0025WINTQhqajDn564U4y0k2Q
/wiTMHzUHlz7smH8xmlxecWJMrKGp3RdshAQUfqf3roSbzB3uHXARFWvWzxQFWeY
D/u6QLBYb7OJRvQGA48rQVhYQIy3qMNLFVUlvoXqfMAok5IpSur9B+UPtgOQL65f
FTvq80VUK7Y5ibOcTTFDDYaqgJhRK6lNMPQOzsZ+udexroexeqMImvjVyRhB0udQ
2waTouiVf3yUWS+i1pQ7rca82pj67sKEJUCGNemnHOL3kwOHTUjI7dECyFIibpDR
RQo5Cef0BOqg5weFaEuIPfQlVeArSaUDS9brv7tYyJA1NwSK3WDqiNj/AhSBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUq126uR0SVfq9BrLCA1g7bmMgvmUwHwYDVR0j
BBgwFoAU3QtHKq6JYb0f4pHRhlDPi7LE8EYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkdRY2pTYjNQeDZNMW1wM3pSbkhhaDl6TVFBYllNQ2FRVktpdHFqc290
YVEvMC9ERDBCNDcyQUFFODk2MUJEMUZFMjkxRDE4NjUwQ0Y4QkIyQzRGMDQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0REMEI0NzJBQUU4OTYxQkQx
RkUyOTFEMTg2NTBDRjhCQjJDNEYwNDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJHUWNqU2IzUHg2TTFtcDN6Um5IYWg5ek1RQWJZTUNhUVZLaXRxanNvdGFRLzAv
MzEzOTMwMmUzODM5MmUzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMw
MzMzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvlkwMA0GCSqGSIb3DQEBCwUAA4IBAQBb5W/DYthV
asCllmaw3UGAfHj5cA09ixTmnTb5XRtXSWIKEFu/Yv8PGH1i/B8GltAYH3UIvyDb
ifb2BwD+WAxgnYtr91QPAjt8E9DrRFNS/LT2Wk2dHJSN2J1Ja6HgV0rZwuaaDEX9
7NUs0WJiwTbWLyHNEeu7qjaO/m0ouurAtJIm0e6QBs+dPceyNlC5g8r67q4gHpYr
fJygILs8wZv0zzun2nBnWy/RM2zztFyfr+xZ77xz40U5Swzzbwvq/4NotLLrYUNX
J0BisyJkGlwTLVk8XM1mqfnvSfNxZ9uip806XOaay7UIIDLqytDNYLwoDjlN1lDi
SwJ6VFJVhImT
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org