Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33Fre6hZevNStCbdmJPaKCxTSj1wiC2JyTuaYJJSRhcw/0/3139302e38392e352e302f32342d3234203d3e20323730333939.roa
File:                     3139302e38392e352e302f32342d3234203d3e20323730333939.roa (raw, json)
Hash identifier:          JCT+G75G/R+sT7kC317j+p23Cl4kUtboUqipTgWZ+ng=
Subject key identifier:   61:6C:A3:38:63:2A:8D:6C:61:D9:7F:FB:3C:60:EB:3B:DB:74:F2:45
Certificate issuer:       /CN=6E57A28381AAB3C721358BC8E30F90E5423A48C3
Certificate serial:       41332F557956DF15267D99655262A52F21166E56
Authority key identifier: 6E:57:A2:83:81:AA:B3:C7:21:35:8B:C8:E3:0F:90:E5:42:3A:48:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E57A28381AAB3C721358BC8E30F90E5423A48C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33Fre6hZevNStCbdmJPaKCxTSj1wiC2JyTuaYJJSRhcw/0/3139302e38392e352e302f32342d3234203d3e20323730333939.roa
Signing time:             Wed 25 Jan 2023 17:36:18 +0000
ROA not before:           Wed 25 Jan 2023 17:31:18 +0000
ROA not after:            Wed 24 Jan 2024 17:36:18 +0000
asID:                     270399
IP address blocks:        190.89.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:33:2f:55:79:56:df:15:26:7d:99:65:52:62:a5:2f:21:16:6e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E57A28381AAB3C721358BC8E30F90E5423A48C3
        Validity
            Not Before: Jan 25 17:31:18 2023 GMT
            Not After : Jan 24 17:36:18 2024 GMT
        Subject: CN=616CA338632A8D6C61D97FFB3C60EB3BDB74F245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ed:64:d7:06:55:c5:ec:0b:79:ac:5c:ac:88:
                    38:17:65:f7:00:6b:d0:92:80:a3:36:ad:50:c2:e4:
                    6e:9c:55:1f:e7:a9:97:d4:13:83:e2:1f:22:b3:77:
                    86:2d:cf:d4:de:93:91:cf:53:2a:93:dc:1c:60:a3:
                    05:00:43:a2:99:bd:89:a5:a9:85:42:cd:66:5a:80:
                    0e:3a:f5:5c:98:8e:84:cc:aa:53:48:6d:24:42:01:
                    ac:05:4e:6e:c6:0f:89:ca:2a:75:69:ae:cf:f2:fd:
                    32:73:bf:0d:d1:46:ed:9e:b5:3a:f1:b7:de:73:ff:
                    19:9b:de:0e:55:01:d8:30:7e:b0:d0:08:7e:0f:36:
                    e2:04:aa:c9:b6:92:87:cc:a0:b3:be:b9:d5:c6:86:
                    c1:df:4b:2f:d8:9c:09:57:16:37:7c:1a:18:36:ec:
                    5b:44:e3:52:05:4a:bc:e7:a9:e1:80:32:9d:dd:82:
                    b8:4d:b2:ed:e7:21:cb:b1:e2:4a:ad:1b:df:2e:f5:
                    00:d5:62:d0:f6:29:2a:7d:14:c0:cc:c9:e4:64:87:
                    c9:26:8b:36:12:1d:92:c5:07:02:16:5f:5a:d1:ea:
                    21:6b:51:fb:ce:df:0a:00:cb:df:bd:8f:c5:cb:54:
                    a2:ac:9e:ef:f0:3b:e2:43:d1:12:ec:4d:a2:57:4c:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6C:A3:38:63:2A:8D:6C:61:D9:7F:FB:3C:60:EB:3B:DB:74:F2:45
            X509v3 Authority Key Identifier:
                keyid:6E:57:A2:83:81:AA:B3:C7:21:35:8B:C8:E3:0F:90:E5:42:3A:48:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33Fre6hZevNStCbdmJPaKCxTSj1wiC2JyTuaYJJSRhcw/0/6E57A28381AAB3C721358BC8E30F90E5423A48C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E57A28381AAB3C721358BC8E30F90E5423A48C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33Fre6hZevNStCbdmJPaKCxTSj1wiC2JyTuaYJJSRhcw/0/3139302e38392e352e302f32342d3234203d3e20323730333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:d0:14:4a:6d:ff:d2:fe:0b:0d:fc:30:41:44:42:b5:ab:dd:
         5b:a4:c5:68:b5:88:60:d0:ff:a7:99:b2:92:bc:7c:82:80:99:
         42:2a:2c:e6:22:6a:f9:9c:d2:99:00:a5:6b:c8:05:58:67:60:
         82:84:b3:0e:e5:78:cc:96:a8:fb:3d:ce:88:7f:4b:3f:d0:cd:
         81:43:13:03:68:7e:e5:0a:c9:a3:25:d1:8f:bc:79:7c:e9:6f:
         84:8b:34:a5:1d:b2:b2:38:07:78:12:c6:22:58:1f:16:22:5b:
         dc:2e:95:c3:b5:f8:fa:8c:39:4d:3b:3c:41:67:e3:05:50:94:
         db:67:bb:7f:11:c3:af:f5:cb:5b:4e:0d:64:d6:83:1a:92:d0:
         88:36:34:80:83:41:17:09:56:50:0d:81:69:0f:ab:19:7e:e2:
         b6:d7:dd:d3:fd:e1:ef:8f:fb:45:74:8a:c9:54:5f:90:84:bc:
         5b:b6:5e:30:1c:93:18:26:1d:7a:88:05:97:91:62:4e:9f:f3:
         72:e7:e8:eb:34:2d:57:78:de:89:ac:c5:90:cb:b0:d4:7b:37:
         f5:85:94:68:a8:75:5d:d2:0e:d3:ae:45:1c:4f:3d:6a:d0:62:
         40:5f:65:79:99:92:14:f5:0a:dd:1d:6c:80:c9:ad:bf:0c:e1:
         fd:fa:32:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org