Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/3139302e3130372e3136302e302f32322d3234203d3e20323730343135.roa
File:                     3139302e3130372e3136302e302f32322d3234203d3e20323730343135.roa (raw, json)
Hash identifier:          +eS4IiX5syyLjI+lyfv8dwV7xH0+DILhUY8G1AmeSYw=
Subject key identifier:   1D:46:34:43:C1:EA:D3:B7:89:9A:B9:E9:1A:8C:B6:2D:18:80:27:17
Certificate issuer:       /CN=A03737EEF4C272E61B261E28FA26376D626ED6ED
Certificate serial:       55D2AC1D88A362130E2CD67FD8F76AF2E6E165F1
Authority key identifier: A0:37:37:EE:F4:C2:72:E6:1B:26:1E:28:FA:26:37:6D:62:6E:D6:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A03737EEF4C272E61B261E28FA26376D626ED6ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/3139302e3130372e3136302e302f32322d3234203d3e20323730343135.roa
Signing time:             Mon 19 Dec 2022 18:00:00 +0000
ROA not before:           Mon 19 Dec 2022 17:55:00 +0000
ROA not after:            Mon 18 Dec 2023 18:00:00 +0000
asID:                     270415
IP address blocks:        190.107.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d2:ac:1d:88:a3:62:13:0e:2c:d6:7f:d8:f7:6a:f2:e6:e1:65:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A03737EEF4C272E61B261E28FA26376D626ED6ED
        Validity
            Not Before: Dec 19 17:55:00 2022 GMT
            Not After : Dec 18 18:00:00 2023 GMT
        Subject: CN=1D463443C1EAD3B7899AB9E91A8CB62D18802717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:29:c1:e9:f5:7c:6c:33:9d:eb:4f:e5:b3:ce:
                    1b:e8:a9:f7:91:41:88:14:27:6e:e7:19:39:1c:c6:
                    8d:13:7f:67:c3:36:1d:0a:f4:6f:14:1a:b0:74:9b:
                    f7:9a:e3:1c:2f:dd:b5:32:3c:25:ce:10:d0:f0:98:
                    67:1d:45:25:30:07:4e:a4:a5:b8:fe:29:ec:49:b3:
                    c8:c2:a8:28:64:c5:5e:85:0f:af:23:74:9d:bb:dc:
                    5c:e1:1a:73:25:4b:86:e2:59:0f:d7:57:98:a8:39:
                    b4:cb:a0:0e:12:fb:09:28:33:cc:89:19:05:8a:dc:
                    33:dd:69:29:67:cd:63:28:db:40:06:8b:07:37:44:
                    2a:fc:2d:19:0d:ed:44:e9:02:1d:d4:3d:94:52:4b:
                    6c:fc:3f:88:02:d2:eb:2d:2d:f2:6f:f1:ee:b7:ab:
                    bb:06:50:60:df:d7:ed:b9:85:e1:0f:45:97:12:ae:
                    9f:45:1d:49:51:ff:de:58:75:9b:48:6e:56:4b:83:
                    78:1f:33:60:cc:03:f3:ff:ac:00:88:df:87:a1:b1:
                    eb:a7:10:4f:48:d9:c4:12:e7:9a:a1:2a:49:7a:e1:
                    fc:16:c5:82:59:a7:ca:6e:7c:20:99:2b:1a:1a:7d:
                    cf:79:66:c1:ce:80:0b:b9:b8:4d:21:4a:d4:77:37:
                    f7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:46:34:43:C1:EA:D3:B7:89:9A:B9:E9:1A:8C:B6:2D:18:80:27:17
            X509v3 Authority Key Identifier:
                keyid:A0:37:37:EE:F4:C2:72:E6:1B:26:1E:28:FA:26:37:6D:62:6E:D6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/A03737EEF4C272E61B261E28FA26376D626ED6ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A03737EEF4C272E61B261E28FA26376D626ED6ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/3139302e3130372e3136302e302f32322d3234203d3e20323730343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:42:51:92:94:a4:c5:e7:f8:07:a1:d1:fe:13:4a:58:e4:64:
         50:a3:ef:40:55:6a:2a:0f:21:7c:4a:3a:07:d1:12:33:7b:19:
         34:d0:08:f4:ec:57:d1:7f:23:1f:74:7d:84:5e:16:e8:93:74:
         c7:08:ff:1c:0c:da:01:c4:58:67:54:88:cc:fe:38:f3:aa:ba:
         31:a3:19:39:08:10:57:9c:de:26:37:fe:d0:b4:a9:98:69:1b:
         9c:9a:46:3d:0a:0a:11:24:87:88:d0:32:66:1b:7b:96:75:2b:
         d8:57:25:21:26:c0:34:21:b1:ed:5b:d8:0f:6a:73:eb:cb:e1:
         d5:b1:ec:63:8e:05:ad:4f:81:37:ff:4e:f6:bb:60:c0:44:6c:
         9f:76:51:5d:69:7b:9f:9b:b9:d6:bd:71:d2:d6:dd:3b:f5:11:
         1a:16:56:a6:9c:60:46:0e:42:83:6b:68:d2:c9:4c:d7:b7:38:
         10:40:1a:bd:3e:3f:29:bd:a2:e4:1e:84:3a:43:c9:a8:04:0d:
         bd:18:d6:83:8a:21:3a:3a:a7:c9:01:64:c6:22:ee:e1:1b:ea:
         a9:ee:b2:8b:07:06:6c:d8:af:25:b5:21:76:1a:87:3a:2d:b7:
         37:0b:ed:3d:1a:9c:44:76:4c:64:db:b9:c5:8b:72:17:03:bd:
         09:18:04:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org