Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33Fre6hZevNStCbdmJPaKCxTSj1wiC2JyTuaYJJSRhcw/0/3139302e38392e362e302f32342d3234203d3e20323730333939.roa
File:                     3139302e38392e362e302f32342d3234203d3e20323730333939.roa (raw, json)
Hash identifier:          IE455PGLnYMH7C8M1kuwf5cl2bo19O/5fzxFB2vsr2E=
Subject key identifier:   42:6B:21:BD:D2:3B:65:55:B1:63:30:D6:E7:D0:DF:50:57:D8:79:AD
Certificate issuer:       /CN=6E57A28381AAB3C721358BC8E30F90E5423A48C3
Certificate serial:       4D8A6CA14D6860EA669574F43A044495CC6EE831
Authority key identifier: 6E:57:A2:83:81:AA:B3:C7:21:35:8B:C8:E3:0F:90:E5:42:3A:48:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E57A28381AAB3C721358BC8E30F90E5423A48C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33Fre6hZevNStCbdmJPaKCxTSj1wiC2JyTuaYJJSRhcw/0/3139302e38392e362e302f32342d3234203d3e20323730333939.roa
Signing time:             Wed 25 Jan 2023 17:36:33 +0000
ROA not before:           Wed 25 Jan 2023 17:31:33 +0000
ROA not after:            Wed 24 Jan 2024 17:36:33 +0000
asID:                     270399
IP address blocks:        190.89.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8a:6c:a1:4d:68:60:ea:66:95:74:f4:3a:04:44:95:cc:6e:e8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E57A28381AAB3C721358BC8E30F90E5423A48C3
        Validity
            Not Before: Jan 25 17:31:33 2023 GMT
            Not After : Jan 24 17:36:33 2024 GMT
        Subject: CN=426B21BDD23B6555B16330D6E7D0DF5057D879AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:43:c2:b7:f3:a3:29:cc:69:92:fb:ff:ef:
                    95:b8:83:58:04:62:b8:9f:ed:20:27:58:42:8d:2f:
                    19:ac:bb:f0:d2:e1:e4:15:ad:e1:cf:2c:d2:fa:01:
                    0e:8b:6b:e4:fb:fb:84:34:4f:db:8e:e5:23:37:34:
                    0c:c1:87:a4:dc:cf:68:55:1a:4d:91:ca:94:0b:7d:
                    12:87:32:6b:57:ed:8e:f9:a4:4f:6c:a5:e9:7f:b4:
                    e9:c5:ab:48:c1:4e:13:76:41:92:16:12:de:54:ac:
                    36:bf:e9:e0:ba:48:f7:0d:3c:58:c4:ee:8b:f5:67:
                    29:8d:c5:fe:64:3a:4a:ba:e8:d6:8d:d4:b0:b1:a0:
                    9d:08:e8:65:76:1d:81:b5:08:f9:b0:dd:cd:1f:b9:
                    56:d2:3c:1a:dc:ff:15:ae:2a:63:60:dd:c7:b7:38:
                    fb:03:1f:2d:2b:27:e5:1b:62:69:1b:df:e5:dc:78:
                    ad:c9:4e:e9:08:4b:b9:cc:54:15:92:9b:98:78:69:
                    d7:5b:cd:84:4f:d8:26:41:59:ef:65:ba:3b:49:d4:
                    60:6c:85:a0:f4:9e:74:f1:da:f6:d3:2e:b6:94:43:
                    d1:b9:84:e1:d5:fa:d5:a2:31:1b:6e:e8:19:74:2e:
                    1e:51:b2:37:2b:06:bb:94:d9:1d:ab:f1:53:5f:53:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6B:21:BD:D2:3B:65:55:B1:63:30:D6:E7:D0:DF:50:57:D8:79:AD
            X509v3 Authority Key Identifier:
                keyid:6E:57:A2:83:81:AA:B3:C7:21:35:8B:C8:E3:0F:90:E5:42:3A:48:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33Fre6hZevNStCbdmJPaKCxTSj1wiC2JyTuaYJJSRhcw/0/6E57A28381AAB3C721358BC8E30F90E5423A48C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E57A28381AAB3C721358BC8E30F90E5423A48C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33Fre6hZevNStCbdmJPaKCxTSj1wiC2JyTuaYJJSRhcw/0/3139302e38392e362e302f32342d3234203d3e20323730333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:8f:27:cc:b4:cd:92:7c:71:b3:19:41:8b:b1:b6:e0:17:78:
         2d:17:63:ad:c8:64:e6:31:01:96:3b:1e:bb:53:43:82:4a:be:
         4a:2e:db:65:af:e3:40:9c:97:1d:26:78:44:10:2d:b2:df:91:
         a7:5d:8e:21:25:0d:9a:57:3c:8a:df:1d:21:5a:bb:62:7e:eb:
         f5:21:ed:d4:a5:34:92:c4:cd:87:1a:ed:ae:f5:29:c4:17:51:
         31:30:eb:52:d2:b6:14:0d:0c:0a:2e:37:29:f4:1f:b8:72:dc:
         c5:7a:b8:82:cb:48:7b:f2:6c:f2:36:4d:ae:b8:7d:81:11:e3:
         50:2a:27:92:f9:c7:9b:c2:6a:bf:c3:c8:2a:0c:f4:c7:d7:e0:
         5a:c6:1a:fc:e8:03:5e:04:57:90:f9:32:16:9f:76:6d:d6:e1:
         5a:aa:8f:34:aa:e9:95:46:6b:ee:98:1b:ac:b9:3e:cb:7a:5e:
         38:13:f7:d3:12:e9:f9:0d:6f:22:50:4d:78:07:cb:c8:8f:22:
         e1:d7:d8:93:af:cf:b0:e1:51:35:31:ec:24:ee:e0:17:63:c6:
         f4:84:75:6a:54:39:01:d6:e3:38:f5:67:e1:16:f4:14:ec:20:
         1d:23:59:7a:17:18:f3:07:3c:41:b7:64:8e:78:ad:68:b9:36:
         8a:2a:bc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org