Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/3139302e3130372e3136302e302f32322d3235203d3e20323730343135.roa
File:                     3139302e3130372e3136302e302f32322d3235203d3e20323730343135.roa (raw, json)
Hash identifier:          FHlr2Em96WargZogCerQywGu1eabXAPDSxowi1heJKQ=
Subject key identifier:   26:49:C4:1C:87:16:BA:A2:B9:4E:7C:22:B6:FA:EC:9E:B2:0A:29:0A
Certificate issuer:       /CN=286CCA5B5F517B947ADF353B48E4739F6ED397D5
Certificate serial:       132CDDFFC9177FB656AB62E568E6642C8130FB14
Authority key identifier: 28:6C:CA:5B:5F:51:7B:94:7A:DF:35:3B:48:E4:73:9F:6E:D3:97:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/286CCA5B5F517B947ADF353B48E4739F6ED397D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/3139302e3130372e3136302e302f32322d3235203d3e20323730343135.roa
Signing time:             Fri 23 Jun 2023 14:46:48 +0000
ROA not before:           Fri 23 Jun 2023 14:41:48 +0000
ROA not after:            Fri 21 Jun 2024 14:46:48 +0000
asID:                     270415
IP address blocks:        190.107.160.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2c:dd:ff:c9:17:7f:b6:56:ab:62:e5:68:e6:64:2c:81:30:fb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286CCA5B5F517B947ADF353B48E4739F6ED397D5
        Validity
            Not Before: Jun 23 14:41:48 2023 GMT
            Not After : Jun 21 14:46:48 2024 GMT
        Subject: CN=2649C41C8716BAA2B94E7C22B6FAEC9EB20A290A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:dc:c8:32:c0:d8:20:a9:78:cd:c0:88:df:2c:
                    b4:1e:e0:ce:19:e1:c2:36:3d:52:52:0d:24:1f:38:
                    0a:c5:ff:91:1c:c8:b1:8b:49:9d:32:81:b0:28:b8:
                    05:77:00:33:cf:e8:8a:1d:15:58:7d:29:d0:43:0f:
                    70:ec:37:79:88:1a:c4:4c:e6:20:45:09:10:a1:23:
                    1f:d7:7e:21:6c:80:af:d6:30:dd:cf:37:44:ac:7e:
                    9f:73:de:df:9e:84:e7:e4:51:07:47:33:33:d4:44:
                    a9:93:65:8c:86:bc:51:4c:22:64:ed:35:fe:68:df:
                    d6:e1:94:73:45:ce:6f:87:3e:bc:b2:90:d0:e1:6b:
                    d4:1f:f2:cc:b8:37:3d:fd:7c:c4:8e:e0:2c:df:4c:
                    1d:7a:18:1c:b4:9f:fb:1c:cd:41:8c:83:30:ec:c6:
                    91:04:48:6e:5d:ed:9d:c5:90:98:cf:7e:1a:6a:06:
                    3f:5f:fc:8a:e9:1b:c5:8d:c8:0c:c5:59:2d:21:7d:
                    b2:35:e4:af:f1:e9:64:8c:ca:a8:22:e1:d0:ac:35:
                    9f:b4:79:85:bd:8f:6b:83:3c:f9:72:05:6b:44:9d:
                    70:08:cc:a1:8f:2b:dd:54:61:46:b5:81:36:a3:cf:
                    ba:5f:75:1b:06:56:0a:a4:b0:13:8d:44:ea:98:42:
                    41:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:49:C4:1C:87:16:BA:A2:B9:4E:7C:22:B6:FA:EC:9E:B2:0A:29:0A
            X509v3 Authority Key Identifier:
                keyid:28:6C:CA:5B:5F:51:7B:94:7A:DF:35:3B:48:E4:73:9F:6E:D3:97:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/286CCA5B5F517B947ADF353B48E4739F6ED397D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/286CCA5B5F517B947ADF353B48E4739F6ED397D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/3139302e3130372e3136302e302f32322d3235203d3e20323730343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:1b:93:f3:1d:6b:50:0f:cc:66:ba:66:4a:10:28:21:d6:36:
         7c:05:0e:96:97:08:5a:f6:73:1a:42:89:08:6b:d4:2b:bf:9f:
         d8:5b:34:58:1c:71:91:48:1d:6b:a1:90:a6:38:37:2d:bc:9b:
         c8:28:d4:88:f9:9c:af:44:fd:9f:9f:31:0d:1b:0f:ba:a7:72:
         16:11:e4:40:58:a4:f4:47:fa:d1:44:38:ad:d7:0c:40:cf:47:
         59:a3:cc:9a:ef:38:8d:83:6f:eb:b6:31:b1:53:a9:7e:c6:eb:
         aa:b4:74:00:41:91:fe:d7:e2:e3:09:7f:92:75:8c:71:dc:ac:
         28:8e:67:97:4a:13:f2:54:95:ed:e1:a5:2f:9a:1b:5a:01:63:
         7e:b3:95:9e:c9:e0:cb:c6:ea:ea:3d:d8:80:06:ee:49:65:0f:
         9e:a5:8a:1c:c0:49:97:fd:93:3f:a0:3f:0b:94:bc:8c:13:c3:
         39:0c:d7:12:90:d8:67:dc:83:b3:5d:95:f5:5f:7f:66:6e:5e:
         80:f3:76:cb:49:54:14:bc:2c:10:50:e6:06:9d:8b:ee:64:50:
         2f:20:0c:40:dd:76:b6:c7:9e:97:49:87:52:60:85:d9:db:91:
         3c:de:cc:00:59:3d:08:2d:83:ed:2a:c9:3b:ca:4b:63:05:19:
         aa:c5:44:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org