Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33Fre6hZevNStCbdmJPaKCxTSj1wiC2JyTuaYJJSRhcw/0/3139302e38392e342e302f32342d3234203d3e20323730333939.roa
File:                     3139302e38392e342e302f32342d3234203d3e20323730333939.roa (raw, json)
Hash identifier:          vcCoTcatfgUWjseaVyu1wT1JXn6oQmLgz/wg1sFmcas=
Subject key identifier:   DE:96:7A:C1:FD:36:04:67:39:21:49:8D:73:4E:5A:83:E8:5A:6A:65
Certificate issuer:       /CN=6E57A28381AAB3C721358BC8E30F90E5423A48C3
Certificate serial:       7F9863D2B3C5917D91E0B51E06172C9D50C1B11A
Authority key identifier: 6E:57:A2:83:81:AA:B3:C7:21:35:8B:C8:E3:0F:90:E5:42:3A:48:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E57A28381AAB3C721358BC8E30F90E5423A48C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33Fre6hZevNStCbdmJPaKCxTSj1wiC2JyTuaYJJSRhcw/0/3139302e38392e342e302f32342d3234203d3e20323730333939.roa
Signing time:             Wed 25 Jan 2023 17:35:43 +0000
ROA not before:           Wed 25 Jan 2023 17:30:43 +0000
ROA not after:            Wed 24 Jan 2024 17:35:43 +0000
asID:                     270399
IP address blocks:        190.89.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:98:63:d2:b3:c5:91:7d:91:e0:b5:1e:06:17:2c:9d:50:c1:b1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E57A28381AAB3C721358BC8E30F90E5423A48C3
        Validity
            Not Before: Jan 25 17:30:43 2023 GMT
            Not After : Jan 24 17:35:43 2024 GMT
        Subject: CN=DE967AC1FD3604673921498D734E5A83E85A6A65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:6a:3b:89:1c:d0:c8:30:88:66:46:55:c8:
                    a9:4e:8d:d8:33:5a:1b:a8:93:13:03:21:00:ac:04:
                    57:ff:95:70:b0:a1:67:19:0a:8c:d4:65:41:96:12:
                    55:33:ce:01:a8:32:4c:24:6a:6d:58:49:c9:41:d1:
                    da:b1:4e:d2:88:48:52:dc:d0:c2:a9:e8:a8:96:6a:
                    8e:9c:ab:ae:94:9c:d8:01:80:00:8b:89:69:53:e9:
                    c7:70:0a:44:94:00:f9:b7:46:c3:d7:72:13:4e:c8:
                    46:6c:6c:c2:3e:85:f4:01:d8:d4:96:c2:81:a6:73:
                    13:99:46:3e:22:2d:94:f2:98:74:ee:b7:1b:e1:ed:
                    01:fa:b0:5b:27:af:95:7f:8b:96:5e:df:03:18:0d:
                    69:dc:28:4f:e3:ba:c9:23:c7:e5:a9:55:13:de:6f:
                    16:85:48:d1:b6:e6:b6:14:29:6d:06:38:c6:92:59:
                    e8:84:1e:01:db:31:8e:74:97:c5:c1:c1:7b:29:1f:
                    ed:57:53:fc:7c:33:29:9e:7a:41:91:fa:dc:7b:d4:
                    df:82:36:2c:26:f0:ef:5b:2a:fe:6f:10:fa:96:f8:
                    0e:ab:05:f9:2f:ec:b2:8a:5e:12:05:ac:8a:c8:38:
                    83:f9:0a:d5:b5:da:da:c3:ec:c7:22:18:b7:7f:b6:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:96:7A:C1:FD:36:04:67:39:21:49:8D:73:4E:5A:83:E8:5A:6A:65
            X509v3 Authority Key Identifier:
                keyid:6E:57:A2:83:81:AA:B3:C7:21:35:8B:C8:E3:0F:90:E5:42:3A:48:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33Fre6hZevNStCbdmJPaKCxTSj1wiC2JyTuaYJJSRhcw/0/6E57A28381AAB3C721358BC8E30F90E5423A48C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E57A28381AAB3C721358BC8E30F90E5423A48C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33Fre6hZevNStCbdmJPaKCxTSj1wiC2JyTuaYJJSRhcw/0/3139302e38392e342e302f32342d3234203d3e20323730333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:eb:20:e6:e8:c3:6e:38:0b:bd:20:75:c8:73:6d:e3:f9:85:
         44:5e:45:72:38:9e:70:62:89:1b:b9:4b:a9:9f:7a:e4:b4:03:
         84:29:83:b9:7c:52:f7:2b:87:47:51:2f:f9:b5:6a:58:bb:6f:
         61:d1:d9:04:59:78:34:47:e6:c4:e8:c2:44:30:8a:a3:a0:43:
         d5:be:33:ae:41:94:d9:24:f0:91:50:54:62:c3:42:4b:2d:7d:
         2c:be:3a:ec:aa:2e:98:52:63:95:75:2f:cb:5a:97:0e:6b:67:
         02:1d:29:fe:1c:a3:05:e3:2c:c6:8e:9a:33:94:a4:f2:96:d3:
         24:a4:cb:aa:61:9a:cd:e8:31:6d:fa:ee:59:c5:29:f8:72:12:
         14:0c:6e:20:3a:8a:4d:e5:cd:80:4d:14:f4:69:91:40:89:fe:
         9b:eb:e5:87:56:6d:4e:94:03:48:2c:82:67:a0:a3:9a:71:ed:
         dc:24:69:d7:45:ed:c1:fd:76:37:87:d4:18:e3:b3:66:c7:61:
         07:21:0e:ce:6c:43:4d:57:b9:f6:30:58:79:33:37:49:13:6d:
         e2:66:ec:4a:44:ee:7a:07:1c:90:06:cd:f2:70:5b:d5:09:9f:
         e7:a8:31:63:27:ab:97:21:a2:29:7f:68:96:0b:32:ae:b8:99:
         1f:bd:03:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org