Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/0/3139302e38332e36382e302f32322d3232203d3e20323730333738.roa
File:                     3139302e38332e36382e302f32322d3232203d3e20323730333738.roa (raw, json)
Hash identifier:          XpDYkrs2pDSttP2Fq/srczyZKo46esdzAcrsMMnr5uY=
Subject key identifier:   53:04:94:3C:41:AF:B8:27:8F:AC:6A:85:FF:86:BD:5B:6A:C7:08:12
Certificate issuer:       /CN=105A3729EB162CFF8B49C3D0D059AEBBAC57948D
Certificate serial:       025F018B8B05CC98E831F718FDDC6BA80CA0366F
Authority key identifier: 10:5A:37:29:EB:16:2C:FF:8B:49:C3:D0:D0:59:AE:BB:AC:57:94:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/105A3729EB162CFF8B49C3D0D059AEBBAC57948D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/0/3139302e38332e36382e302f32322d3232203d3e20323730333738.roa
Signing time:             Tue 05 Sep 2023 17:14:13 +0000
ROA not before:           Tue 05 Sep 2023 17:09:13 +0000
ROA not after:            Tue 03 Sep 2024 17:14:13 +0000
asID:                     270378
IP address blocks:        190.83.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5f:01:8b:8b:05:cc:98:e8:31:f7:18:fd:dc:6b:a8:0c:a0:36:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=105A3729EB162CFF8B49C3D0D059AEBBAC57948D
        Validity
            Not Before: Sep  5 17:09:13 2023 GMT
            Not After : Sep  3 17:14:13 2024 GMT
        Subject: CN=5304943C41AFB8278FAC6A85FF86BD5B6AC70812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:60:93:c4:8e:19:9b:e2:a7:d0:cb:e0:bd:
                    c8:01:1c:59:80:cb:d2:a1:c9:50:94:10:0a:6d:3b:
                    57:d3:ba:c9:0d:f9:b2:8d:8b:a1:b4:ae:59:45:5d:
                    06:9c:3e:0c:28:5f:01:c8:66:47:82:4f:86:e6:f8:
                    5e:0c:40:bd:1b:85:39:c1:d5:d8:86:8d:2b:17:17:
                    50:f4:92:74:c1:e7:b1:ba:88:07:81:d9:99:aa:a4:
                    d9:95:6b:be:51:41:8a:64:28:90:df:e1:07:16:a4:
                    1a:48:b7:59:f8:27:08:e1:21:d4:13:d8:41:9d:74:
                    11:80:da:9f:1f:ed:4f:ea:d1:88:90:64:12:7c:0e:
                    39:33:0b:55:cb:43:b6:ac:ac:92:1b:cd:74:47:c7:
                    12:21:da:cb:5a:03:99:9c:f4:0f:56:f7:da:7b:1b:
                    b7:7a:da:d3:9a:be:d7:99:f5:31:89:c8:a7:05:3b:
                    2e:17:b0:4d:a2:7d:26:3c:86:be:54:f7:66:c8:b0:
                    b6:87:a6:6b:3d:8a:54:9f:85:45:e7:64:2c:a2:0f:
                    86:88:71:87:7b:46:2e:90:35:b1:12:e2:52:17:d4:
                    ea:21:4a:c8:75:a6:10:89:d2:7d:20:aa:26:97:0e:
                    27:9d:ca:6b:12:ea:85:b5:ca:ce:60:0f:ea:d5:28:
                    00:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:04:94:3C:41:AF:B8:27:8F:AC:6A:85:FF:86:BD:5B:6A:C7:08:12
            X509v3 Authority Key Identifier:
                keyid:10:5A:37:29:EB:16:2C:FF:8B:49:C3:D0:D0:59:AE:BB:AC:57:94:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/0/105A3729EB162CFF8B49C3D0D059AEBBAC57948D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/105A3729EB162CFF8B49C3D0D059AEBBAC57948D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5BjE7p27d9eGDb2Ad9mRM5KGywFTLCFzYvauGnTaCPXU/0/3139302e38332e36382e302f32322d3232203d3e20323730333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:54:7e:41:68:48:20:0c:3d:90:06:a4:81:9b:47:b0:42:53:
         9e:71:31:d3:37:79:28:de:07:c8:31:e2:8b:d2:82:13:a1:5b:
         c0:07:70:6d:bf:ba:0f:84:02:8b:2f:d6:6c:46:46:32:8c:54:
         31:c3:cd:3a:a6:bd:e7:55:0b:44:a6:f4:6f:c7:2b:c8:c0:a5:
         bf:bf:f9:b1:ff:aa:d0:56:fd:64:de:e8:b2:ee:24:e2:3a:9e:
         bb:72:15:5b:e2:a7:0d:9f:90:5a:63:bf:5b:19:96:8e:bb:84:
         42:fe:b2:89:bb:45:3d:ea:c6:4c:5c:ef:72:ca:e8:06:f8:df:
         bc:b8:dc:86:52:e6:4f:7d:71:cd:08:8c:3c:e8:df:52:3f:4d:
         5e:f1:62:69:39:21:45:40:69:91:fb:28:2c:7f:c1:21:8e:20:
         64:73:8a:38:47:48:1a:68:66:77:38:fd:34:79:81:da:8d:d1:
         15:14:ed:94:9f:c0:97:2a:15:cf:0c:f8:8a:78:a2:53:95:59:
         19:bb:91:bb:02:21:07:c1:1c:bf:2c:79:c6:88:d4:6b:07:65:
         a9:63:f0:60:20:fb:9a:44:ab:f6:e2:af:fc:a1:22:47:95:46:
         6f:15:21:8b:06:26:2d:35:ab:89:89:00:42:f3:23:7e:94:25:
         f5:b1:c7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:51 2024 by rpki-client on console-ams.rpki-client.org