Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14HDtB3RDHx1Ka1BJGxjXx5Hbzfq79JaPoVs4oRBaxWr/0/3139302e38392e35392e302f32342d3234203d3e20323730333830.roa
File:                     3139302e38392e35392e302f32342d3234203d3e20323730333830.roa (raw, json)
Hash identifier:          Y8J9JwmYalhqdH4iLXRQPn459+TvQAJTHgOvMTZGbEs=
Subject key identifier:   38:4E:77:3A:83:C8:61:AF:A1:3A:C3:DC:D3:AF:BB:00:35:A3:F5:11
Certificate issuer:       /CN=8E8EAB76424F963D218A026D0B5A1ABF5A09F987
Certificate serial:       4636F0D2BFF9FE89C0AE988AAB2008D1F9693BBF
Authority key identifier: 8E:8E:AB:76:42:4F:96:3D:21:8A:02:6D:0B:5A:1A:BF:5A:09:F9:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E8EAB76424F963D218A026D0B5A1ABF5A09F987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14HDtB3RDHx1Ka1BJGxjXx5Hbzfq79JaPoVs4oRBaxWr/0/3139302e38392e35392e302f32342d3234203d3e20323730333830.roa
Signing time:             Tue 18 Jul 2023 20:20:07 +0000
ROA not before:           Tue 18 Jul 2023 20:15:07 +0000
ROA not after:            Tue 16 Jul 2024 20:20:07 +0000
asID:                     270380
IP address blocks:        190.89.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:36:f0:d2:bf:f9:fe:89:c0:ae:98:8a:ab:20:08:d1:f9:69:3b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E8EAB76424F963D218A026D0B5A1ABF5A09F987
        Validity
            Not Before: Jul 18 20:15:07 2023 GMT
            Not After : Jul 16 20:20:07 2024 GMT
        Subject: CN=384E773A83C861AFA13AC3DCD3AFBB0035A3F511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d6:88:f2:8a:fd:00:2e:37:13:55:07:0d:4d:
                    55:ee:97:08:0a:01:64:f0:aa:a9:90:8f:73:03:a1:
                    2f:96:2e:0e:6b:ed:d8:35:73:48:0f:84:71:51:7e:
                    ed:2d:b4:7c:72:2d:f9:28:1b:b3:57:5d:53:17:7a:
                    22:2e:e5:2d:b4:f8:1b:df:53:b4:bb:95:0d:cd:73:
                    4a:1c:cb:08:a5:89:23:7d:ae:af:94:e1:04:29:d3:
                    bf:40:ef:00:b3:d4:87:ea:5c:95:80:29:fc:43:56:
                    2f:0c:b9:99:62:5d:be:67:fd:82:d3:f8:31:61:cc:
                    31:90:51:ee:8f:59:2d:5a:ba:22:7a:e3:5c:32:2d:
                    e7:81:59:1f:3c:79:cc:bb:ca:53:5f:a8:9e:aa:59:
                    91:89:be:e5:56:1f:11:85:9d:4b:99:18:14:5f:99:
                    ef:9e:93:52:39:53:09:87:c3:8a:f2:14:dc:9b:70:
                    07:fe:fe:c1:65:b2:a5:90:5f:48:b0:94:95:fd:48:
                    0a:89:bb:2e:00:43:6c:73:47:ad:89:e5:70:bb:7f:
                    13:2c:bf:18:7d:62:71:c2:8b:50:b7:9d:a1:80:b0:
                    ce:05:c7:ec:cf:6c:81:b3:a1:34:5f:04:4a:8e:4f:
                    07:39:ee:d8:eb:a3:4e:87:a2:b2:71:c2:68:46:78:
                    2f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4E:77:3A:83:C8:61:AF:A1:3A:C3:DC:D3:AF:BB:00:35:A3:F5:11
            X509v3 Authority Key Identifier:
                keyid:8E:8E:AB:76:42:4F:96:3D:21:8A:02:6D:0B:5A:1A:BF:5A:09:F9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14HDtB3RDHx1Ka1BJGxjXx5Hbzfq79JaPoVs4oRBaxWr/0/8E8EAB76424F963D218A026D0B5A1ABF5A09F987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E8EAB76424F963D218A026D0B5A1ABF5A09F987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14HDtB3RDHx1Ka1BJGxjXx5Hbzfq79JaPoVs4oRBaxWr/0/3139302e38392e35392e302f32342d3234203d3e20323730333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:b7:6e:ef:29:9b:ba:1a:86:f7:6b:fb:33:5d:1d:1a:9b:00:
         89:ba:15:b3:e0:7f:31:56:53:89:7d:56:b4:df:90:cf:b0:f3:
         21:b2:f8:4c:27:14:e1:3c:23:e7:c9:d2:57:bd:51:39:7b:84:
         98:12:22:f9:f1:f0:45:44:1c:6e:79:6b:82:c8:aa:6f:a2:b3:
         9e:47:03:0c:84:f3:fe:44:a6:e5:3c:05:9a:13:73:87:77:4f:
         37:f3:d3:87:d0:c0:0b:d0:89:36:4f:e8:1e:ce:0e:b7:6d:8e:
         29:52:70:92:ed:38:4f:3a:82:55:f2:d3:d1:3a:18:be:03:35:
         18:84:11:a0:66:ec:0f:df:4e:83:56:ce:62:67:b7:e0:30:b5:
         6c:16:70:e3:c6:73:40:e5:b0:6a:02:67:73:42:5f:63:a6:08:
         3a:81:50:9f:64:42:8b:f5:cc:c3:77:2d:7d:af:cf:02:82:bc:
         f0:d4:ee:44:37:00:eb:61:47:ca:7f:c4:4c:57:c1:d8:ed:09:
         df:75:df:58:75:c3:3d:42:59:79:6f:ae:3c:7f:00:45:fd:87:
         ad:a6:4b:eb:b3:8f:18:84:ba:6e:76:ba:74:aa:5e:01:34:87:
         f5:9a:6d:ed:29:4e:5d:7c:2a:7c:78:bf:d0:76:ed:3d:2e:eb:
         09:59:99:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org