Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa
File:                     3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa (raw, json)
Hash identifier:          8n5itxVYlsLwVp6BaGxJbcHUFhLMihHksfBCRylBiZ0=
Subject key identifier:   DF:1C:57:A8:81:E2:E9:39:B3:D9:D4:20:89:DB:49:F9:0F:E5:40:30
Certificate issuer:       /CN=C82DE841AAD8FB0915EA593DD3965B4E66B83813
Certificate serial:       607916C4A3617FA89E2563BD31B7ADF5CEF9233B
Authority key identifier: C8:2D:E8:41:AA:D8:FB:09:15:EA:59:3D:D3:96:5B:4E:66:B8:38:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C82DE841AAD8FB0915EA593DD3965B4E66B83813.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa
Signing time:             Thu 18 Jan 2024 21:21:30 +0000
ROA not before:           Thu 18 Jan 2024 21:16:30 +0000
ROA not after:            Thu 16 Jan 2025 21:21:30 +0000
asID:                     271280
IP address blocks:        190.12.152.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:79:16:c4:a3:61:7f:a8:9e:25:63:bd:31:b7:ad:f5:ce:f9:23:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C82DE841AAD8FB0915EA593DD3965B4E66B83813
        Validity
            Not Before: Jan 18 21:16:30 2024 GMT
            Not After : Jan 16 21:21:30 2025 GMT
        Subject: CN=DF1C57A881E2E939B3D9D42089DB49F90FE54030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4a:dc:53:08:c5:b6:c6:35:fe:b2:3a:92:c4:
                    98:09:e4:7c:2f:39:da:42:23:44:fd:37:e7:b9:9b:
                    d0:11:f1:5b:3f:0e:7f:5a:3d:7e:65:44:4a:7d:b9:
                    f7:ee:05:59:b8:78:ea:f5:ee:3f:c4:b9:d5:ad:53:
                    c8:31:ba:51:69:85:33:3e:6b:72:74:d9:40:1c:88:
                    21:fd:32:5b:ad:33:a8:25:09:9a:24:f2:cc:0a:58:
                    2c:5c:1c:18:34:24:17:7f:0c:15:d6:71:bd:b7:ca:
                    c7:55:f4:79:18:a5:87:db:75:2a:6b:9a:61:42:6e:
                    21:9e:d2:9f:0e:82:ca:90:16:69:9a:26:66:22:44:
                    a4:40:a1:e4:f8:be:68:bd:1e:a3:4e:f6:96:31:11:
                    a2:f6:a6:6d:b6:80:5f:3f:95:26:11:73:a9:9d:d1:
                    53:1a:bc:44:c2:63:b2:df:27:75:5d:53:bc:3e:50:
                    9b:98:cf:36:83:81:47:a1:1d:62:ff:f5:36:62:35:
                    17:87:e4:35:43:d5:28:f7:0c:22:8c:36:3e:9a:36:
                    b0:59:a7:53:4b:5d:f1:49:1f:75:72:5a:d2:fb:6d:
                    1c:6c:05:8f:aa:c4:db:49:ec:37:33:2d:d9:73:e9:
                    17:bb:30:66:4a:4c:28:34:2e:54:6c:a9:4c:2b:d2:
                    d3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1C:57:A8:81:E2:E9:39:B3:D9:D4:20:89:DB:49:F9:0F:E5:40:30
            X509v3 Authority Key Identifier:
                keyid:C8:2D:E8:41:AA:D8:FB:09:15:EA:59:3D:D3:96:5B:4E:66:B8:38:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/C82DE841AAD8FB0915EA593DD3965B4E66B83813.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C82DE841AAD8FB0915EA593DD3965B4E66B83813.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:2a:bd:cd:df:42:a2:ad:f7:a7:e2:f0:ca:90:b9:d9:d4:6a:
         68:99:a0:d8:1b:75:b2:2d:30:79:96:7d:e9:7f:8a:01:cf:63:
         b3:8b:a5:87:bc:f7:3c:1d:d2:80:e8:a1:33:72:6d:92:e7:e3:
         61:85:62:7f:64:ae:54:b2:cc:14:c5:b0:99:64:a4:a0:b6:0b:
         4d:9e:20:98:91:6e:9a:3e:14:ec:bc:33:88:bc:72:17:77:7a:
         03:52:65:dd:94:19:83:74:bc:eb:a0:08:5a:08:ae:6d:f8:fd:
         90:e9:e3:58:cb:06:f1:19:0a:4e:65:06:51:df:5a:bf:22:4f:
         99:5e:2b:37:fc:e0:82:7d:ef:e4:09:59:96:bd:62:12:48:02:
         d0:ca:bd:f6:f7:87:4c:16:dc:93:24:cc:27:d6:e1:12:a4:f8:
         1a:a4:4b:75:f4:c1:71:2d:ce:76:5a:6e:43:0c:17:64:38:f4:
         4b:88:b3:4e:a8:d1:f1:86:9b:cf:e5:6f:d4:52:30:40:cc:d8:
         05:df:3a:cc:86:25:3c:26:30:e7:f9:49:d5:0f:fd:2d:26:7e:
         b5:46:9d:e2:3e:98:ad:87:56:80:9f:9e:ea:3e:c3:8d:63:48:
         d7:3c:e3:91:f0:c6:b9:04:8d:b8:68:a7:fc:09:a2:1d:fe:7b:
         d0:0a:b2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:32 2024 by rpki-client on console-ams.rpki-client.org