Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3139302e3130392e38302e302f32322d3234203d3e203532393133.roa
File:                     3139302e3130392e38302e302f32322d3234203d3e203532393133.roa (raw, json)
Hash identifier:          HnADEtD3d2+QYf5eGEdKom32v6HGaFnCwsmS22PZSdk=
Subject key identifier:   94:8F:0B:6E:15:2F:56:3C:28:C1:8A:CA:E0:73:11:CF:39:07:A3:5B
Certificate issuer:       /CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
Certificate serial:       7CB5C10C1BED1E6217D946EF2FB3B3234A0CDF54
Authority key identifier: E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3139302e3130392e38302e302f32322d3234203d3e203532393133.roa
Signing time:             Fri 22 Mar 2024 19:01:56 +0000
ROA not before:           Fri 22 Mar 2024 18:56:56 +0000
ROA not after:            Fri 21 Mar 2025 19:01:56 +0000
asID:                     52913
IP address blocks:        190.109.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b5:c1:0c:1b:ed:1e:62:17:d9:46:ef:2f:b3:b3:23:4a:0c:df:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
        Validity
            Not Before: Mar 22 18:56:56 2024 GMT
            Not After : Mar 21 19:01:56 2025 GMT
        Subject: CN=948F0B6E152F563C28C18ACAE07311CF3907A35B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1b:c1:dc:1e:7c:4c:b9:60:cf:07:7c:6b:ab:
                    b2:b3:63:52:72:db:af:b3:ae:6a:92:ff:9c:d6:cc:
                    a2:26:21:1c:59:c6:c6:2d:b4:3c:95:f5:70:46:6f:
                    75:65:74:25:16:4d:00:01:68:c5:81:a2:58:0d:92:
                    e9:b8:28:78:10:c8:5e:31:69:a8:9f:d1:0d:af:9b:
                    d5:f2:83:79:6a:e7:c5:e3:0e:e4:0b:2d:c9:a4:8e:
                    81:48:c4:46:52:c7:e9:22:63:24:e1:03:25:2c:e1:
                    ee:15:7c:33:de:a2:9d:fd:28:8f:cc:ae:a8:9e:0b:
                    43:ff:bb:c0:4e:d8:1a:ad:12:18:ba:70:fd:c6:8a:
                    05:75:0c:35:a2:3f:b3:80:88:21:34:8b:d1:2e:af:
                    19:11:3a:80:4d:99:b0:1a:ba:30:f8:e0:58:7c:4b:
                    5b:2e:17:97:45:37:de:88:92:df:95:1e:aa:ac:2a:
                    be:45:9a:c0:a7:97:2e:db:0c:a5:e3:d8:5b:01:0e:
                    86:41:d0:2b:fe:28:5c:6c:35:d0:c7:35:15:41:ca:
                    26:3e:a9:df:76:a5:08:84:b7:05:d9:e3:5f:88:d3:
                    04:01:f2:e1:c9:e6:b5:70:56:78:d1:7a:59:00:3b:
                    43:61:00:41:48:a0:80:2b:e2:db:c3:58:64:83:6b:
                    cc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8F:0B:6E:15:2F:56:3C:28:C1:8A:CA:E0:73:11:CF:39:07:A3:5B
            X509v3 Authority Key Identifier:
                keyid:E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3139302e3130392e38302e302f32322d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:52:1a:b6:10:12:18:af:d2:a0:86:09:0b:a4:95:59:af:df:
         c2:43:ab:25:ec:6d:8d:9a:a2:cc:71:54:28:8e:1c:98:97:87:
         67:f3:62:59:b7:b5:dc:62:5a:da:1f:90:0e:88:cf:10:6c:ae:
         fe:fe:5f:bc:3b:6a:f7:a6:ef:05:55:eb:e2:d9:b4:bd:c5:ea:
         04:62:3e:b0:ad:b2:13:cc:38:8e:3f:dd:67:d4:0e:a5:54:dc:
         4c:71:9a:81:20:23:2a:1e:24:b4:a8:28:61:9f:fe:85:c0:4b:
         b9:45:93:c9:07:23:24:b5:d9:c3:21:49:72:8b:a7:d1:ef:ca:
         b6:d6:84:cc:67:6a:6c:b9:ec:82:02:74:0b:cf:f6:c3:c7:90:
         3f:51:0d:17:cb:e1:cc:8c:51:df:4a:32:6f:95:c4:46:ee:f8:
         aa:4b:0b:de:79:64:23:ce:6e:fa:da:85:cd:82:f9:7b:a7:f9:
         ad:53:57:88:5b:86:6a:c4:8d:c3:b5:06:f9:26:61:25:ab:19:
         15:0e:2e:0e:f8:81:c8:31:bf:26:a7:20:c1:15:69:8a:c9:11:
         e2:fd:87:f3:1a:d7:f3:a7:f4:44:61:d5:dd:67:42:44:fb:ee:
         74:b9:97:7e:25:ab:6d:26:c0:70:b4:a9:39:95:58:93:91:91:
         12:43:47:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org