Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vTjk6WecxVrYJYTGQjhK46ReiYien2FDPpQYMr68AGU/0/3139302e3131332e36302e302f32332d3234203d3e20323731333231.roa
File:                     3139302e3131332e36302e302f32332d3234203d3e20323731333231.roa (raw, json)
Hash identifier:          kR+7tqgpAHnXDqBfGuHLiqIYbgrLypgAIAl/3zv+WKE=
Subject key identifier:   DC:C5:15:D7:89:BF:C5:04:08:33:D1:D6:80:A0:72:EC:7B:37:64:0C
Certificate issuer:       /CN=EB3A64DF8C582A21481B7978AB002615ADCB5DFE
Certificate serial:       4018F4C64074A3632DA0F3CE25DE057096E6BC30
Authority key identifier: EB:3A:64:DF:8C:58:2A:21:48:1B:79:78:AB:00:26:15:AD:CB:5D:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB3A64DF8C582A21481B7978AB002615ADCB5DFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vTjk6WecxVrYJYTGQjhK46ReiYien2FDPpQYMr68AGU/0/3139302e3131332e36302e302f32332d3234203d3e20323731333231.roa
Signing time:             Fri 17 Nov 2023 19:15:05 +0000
ROA not before:           Fri 17 Nov 2023 19:10:05 +0000
ROA not after:            Fri 15 Nov 2024 19:15:05 +0000
asID:                     271321
IP address blocks:        190.113.60.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:18:f4:c6:40:74:a3:63:2d:a0:f3:ce:25:de:05:70:96:e6:bc:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB3A64DF8C582A21481B7978AB002615ADCB5DFE
        Validity
            Not Before: Nov 17 19:10:05 2023 GMT
            Not After : Nov 15 19:15:05 2024 GMT
        Subject: CN=DCC515D789BFC5040833D1D680A072EC7B37640C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3f:a0:1e:2d:39:77:b1:e4:85:86:36:d0:db:
                    c6:e9:a2:d2:6b:6b:e3:08:d5:c1:f3:12:8a:88:b3:
                    72:01:6b:8a:de:1e:36:99:af:84:85:96:fb:43:fd:
                    1f:c7:05:fb:34:6b:19:2e:c4:93:25:db:f0:de:ea:
                    70:e2:fa:18:6d:9d:dd:c2:fc:0c:f8:d7:5b:b7:8b:
                    3b:46:4d:69:bc:bb:67:3f:26:bf:9e:5f:e2:50:1b:
                    b6:c0:fd:42:57:59:b8:02:05:85:2a:ab:6a:dd:25:
                    46:c4:86:4e:7f:3a:36:42:66:96:32:78:93:5c:bc:
                    8f:98:1f:cd:3f:e5:69:64:d0:04:b8:9d:a2:de:3b:
                    18:f8:f3:b1:44:6c:4d:cb:63:51:17:aa:fa:48:d5:
                    dd:4d:d0:dc:82:ce:73:01:f2:88:2d:8a:d8:9f:91:
                    8a:ca:c0:35:91:fc:a7:3b:9a:18:37:c1:d9:9c:1a:
                    54:6f:46:19:9e:0d:2f:35:80:60:0e:f9:63:78:a0:
                    e4:7f:f4:5f:21:a1:08:ef:b8:2d:af:1e:62:b3:42:
                    31:58:32:51:16:ae:35:f9:4c:92:72:38:6e:f3:2e:
                    c1:a2:cf:af:c8:c1:31:92:61:73:9d:6c:93:ab:c2:
                    3d:15:ab:eb:d0:16:e4:7f:1c:de:83:ee:48:63:e1:
                    b7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C5:15:D7:89:BF:C5:04:08:33:D1:D6:80:A0:72:EC:7B:37:64:0C
            X509v3 Authority Key Identifier:
                keyid:EB:3A:64:DF:8C:58:2A:21:48:1B:79:78:AB:00:26:15:AD:CB:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vTjk6WecxVrYJYTGQjhK46ReiYien2FDPpQYMr68AGU/0/EB3A64DF8C582A21481B7978AB002615ADCB5DFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB3A64DF8C582A21481B7978AB002615ADCB5DFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vTjk6WecxVrYJYTGQjhK46ReiYien2FDPpQYMr68AGU/0/3139302e3131332e36302e302f32332d3234203d3e20323731333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:b6:c1:2c:3d:4f:20:c0:b7:bb:b2:1a:7a:fb:85:2e:68:c0:
         43:7c:d0:a6:48:b0:72:c2:6f:c9:16:14:84:d6:ee:ce:a3:95:
         f4:f2:a5:c2:0f:3e:04:6d:73:8f:47:8a:6e:36:f8:18:86:b8:
         b0:70:0a:a2:16:5c:77:df:94:9e:97:94:a4:0e:5c:6f:38:f3:
         7d:b4:b9:8d:ae:b9:26:84:5e:38:82:90:de:81:da:f6:19:05:
         45:e3:27:aa:66:b2:3c:fd:10:3b:0d:c9:6e:93:8e:d0:fc:d1:
         1d:cc:f5:1b:c8:df:f0:ce:40:e0:7c:ea:02:10:d5:1b:5f:be:
         c6:0c:41:5e:11:71:e8:a3:95:09:52:ed:03:93:d3:ff:85:c5:
         56:a0:8c:db:4a:8e:1b:37:d4:96:7f:b3:76:e1:bd:ef:f9:4c:
         5c:4c:86:08:0f:1a:a9:9f:e6:03:5c:2c:95:68:1a:49:c5:8f:
         b8:bc:a7:c0:c5:cd:75:4c:31:74:00:8a:59:91:5b:c1:7a:90:
         27:e0:08:85:a0:84:82:4f:cb:3c:96:8c:eb:30:9d:75:84:86:
         2d:25:08:4f:df:6b:09:3b:e9:41:42:c8:d0:58:de:be:99:f0:
         0c:11:28:88:6c:87:b8:7b:96:09:43:4c:37:72:a4:60:86:2c:
         1f:ed:29:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org