Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134392e302f32342d3332203d3e20323637343237.roa
File:                     3139302e38392e3134392e302f32342d3332203d3e20323637343237.roa (raw, json)
Hash identifier:          vjgDKdyPH2Xj9MhJrKajG8QWaL3AND1v+eSQPAg2GNI=
Subject key identifier:   8C:F5:BD:47:62:E9:14:7D:D0:C9:D6:FE:5D:A6:60:80:49:DD:C3:E6
Certificate issuer:       /CN=547777E5F0350F77534A3D644AB1FCEE0214E0D0
Certificate serial:       70A83042E22553832BC7A950610BBD2954259DC8
Authority key identifier: 54:77:77:E5:F0:35:0F:77:53:4A:3D:64:4A:B1:FC:EE:02:14:E0:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/547777E5F0350F77534A3D644AB1FCEE0214E0D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134392e302f32342d3332203d3e20323637343237.roa
Signing time:             Sat 08 Apr 2023 21:54:52 +0000
ROA not before:           Sat 08 Apr 2023 21:49:52 +0000
ROA not after:            Sat 06 Apr 2024 21:54:52 +0000
asID:                     267427
IP address blocks:        190.89.149.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a8:30:42:e2:25:53:83:2b:c7:a9:50:61:0b:bd:29:54:25:9d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547777E5F0350F77534A3D644AB1FCEE0214E0D0
        Validity
            Not Before: Apr  8 21:49:52 2023 GMT
            Not After : Apr  6 21:54:52 2024 GMT
        Subject: CN=8CF5BD4762E9147DD0C9D6FE5DA6608049DDC3E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:9a:39:99:b0:9d:b4:57:51:04:bd:1c:ed:
                    c8:91:33:51:be:d4:13:c3:b0:11:1a:d0:50:76:74:
                    03:6b:0c:08:32:b8:07:34:15:fc:1f:5d:4b:33:19:
                    93:99:71:3b:c4:ed:b7:53:82:cb:f0:d4:16:1e:d6:
                    be:9f:1b:91:af:e7:98:ac:f8:9f:15:37:3f:c7:72:
                    39:47:6c:e3:88:62:2b:3d:1a:a5:c7:68:5f:f7:9a:
                    6b:ed:36:7c:71:bf:ad:97:c0:ea:ef:53:63:99:68:
                    d1:f3:d3:cb:79:eb:9e:88:66:65:45:67:e7:34:85:
                    8d:9f:ad:21:a2:a2:e4:9a:df:84:fc:54:e3:af:8a:
                    3b:55:e0:b9:37:cf:cb:ed:40:c6:33:9c:1a:fb:47:
                    11:79:10:a1:ed:53:de:04:d7:1a:a2:94:e9:05:8f:
                    3c:78:92:b6:de:59:58:e6:10:a3:57:ce:6d:c5:8f:
                    c6:b5:0e:61:78:8a:54:05:73:80:31:68:98:7d:00:
                    d9:13:2e:12:ec:c0:19:bb:53:59:64:aa:8a:ee:c9:
                    d1:90:76:ee:f7:91:74:a1:e9:93:d6:c2:86:2e:dd:
                    3f:ec:14:bd:c2:45:a9:f3:03:af:25:00:86:2a:09:
                    12:05:68:f2:ec:88:2a:54:ee:85:4f:b0:2f:66:20:
                    c9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F5:BD:47:62:E9:14:7D:D0:C9:D6:FE:5D:A6:60:80:49:DD:C3:E6
            X509v3 Authority Key Identifier:
                keyid:54:77:77:E5:F0:35:0F:77:53:4A:3D:64:4A:B1:FC:EE:02:14:E0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/547777E5F0350F77534A3D644AB1FCEE0214E0D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/547777E5F0350F77534A3D644AB1FCEE0214E0D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134392e302f32342d3332203d3e20323637343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:e6:fc:55:af:a4:60:2c:05:47:f9:21:a8:53:5e:c6:41:dc:
         89:9b:05:f5:96:4b:fd:96:15:08:fa:11:0c:e6:24:0a:8d:ee:
         87:fd:1e:45:28:7a:63:00:03:5e:4c:51:9e:b7:aa:c1:af:6f:
         d0:dd:2f:6d:f4:5a:8b:de:c3:92:9f:bf:d6:d3:b5:36:a6:e0:
         d7:15:c6:54:af:4e:cd:0e:06:99:0c:bd:34:5e:73:ce:0c:1d:
         d7:8e:85:48:a5:31:2d:b6:b9:86:53:32:e5:f1:be:68:56:0b:
         13:e8:55:36:76:45:85:bb:31:ad:9a:e8:e7:51:a4:fb:62:44:
         0b:e8:1f:6b:20:71:7a:66:85:39:fc:16:a6:51:18:a5:c2:16:
         c5:06:88:75:ba:d4:e8:6f:78:d4:7f:46:7b:88:5a:84:2c:99:
         76:16:ae:28:c8:c0:10:e0:6d:b1:a9:6f:09:6b:9d:1c:f3:ea:
         57:36:3f:43:29:7e:9f:67:08:d8:d4:0d:c2:bf:37:60:20:e3:
         98:7a:c6:4e:19:92:c0:4d:89:10:3d:4c:60:1c:38:f4:d1:04:
         d9:7d:f5:0a:4b:6f:87:15:9c:03:91:c8:57:f8:64:13:80:78:
         f0:25:31:2a:4e:51:5d:10:4e:69:c1:78:84:3d:cc:bf:c6:87:
         55:ef:b2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org