Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e3130392e36342e302f32322d3332203d3e20323634323238.roa
File:                     3139302e3130392e36342e302f32322d3332203d3e20323634323238.roa (raw, json)
Hash identifier:          AJrwgjwhGbNlywWZ6hbETBeRiH0gIHUheT58fRWtGxU=
Subject key identifier:   62:81:4C:A4:3E:B4:F0:A9:BD:7D:F6:FC:03:F6:FC:B1:63:F1:DB:65
Certificate issuer:       /CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Certificate serial:       3698801C2E12F9FDEC3BCA62E546E8DAEF3AD38B
Authority key identifier: 4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e3130392e36342e302f32322d3332203d3e20323634323238.roa
Signing time:             Mon 27 Mar 2023 17:41:27 +0000
ROA not before:           Mon 27 Mar 2023 17:36:27 +0000
ROA not after:            Mon 25 Mar 2024 17:41:27 +0000
asID:                     264228
IP address blocks:        190.109.64.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:98:80:1c:2e:12:f9:fd:ec:3b:ca:62:e5:46:e8:da:ef:3a:d3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
        Validity
            Not Before: Mar 27 17:36:27 2023 GMT
            Not After : Mar 25 17:41:27 2024 GMT
        Subject: CN=62814CA43EB4F0A9BD7DF6FC03F6FCB163F1DB65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:18:8e:2b:38:48:09:d8:97:11:fb:0e:6a:
                    52:e2:4f:36:0f:23:7b:c2:04:11:35:03:eb:ea:82:
                    c0:c6:45:2c:fa:8f:f7:e3:33:88:8c:ed:2a:c9:54:
                    3a:c0:93:69:e2:75:1c:39:a4:58:1f:13:44:8c:ba:
                    c2:d2:33:02:b9:e0:89:66:a6:92:cd:10:bc:3a:db:
                    99:74:9e:3e:95:c6:32:36:3c:a1:46:9b:9d:58:f9:
                    0c:df:3b:08:94:64:c6:c7:9c:8d:43:fc:2e:24:98:
                    0d:a2:fd:3e:f7:13:d6:12:b1:13:0b:b8:d7:84:7e:
                    8c:9f:bc:91:48:01:32:3d:59:74:bb:33:27:1e:90:
                    f2:52:46:d8:dc:dc:c5:a2:ee:b1:25:14:07:9a:04:
                    34:e0:a8:be:fe:d6:4d:1a:3c:96:4c:5a:39:59:9a:
                    01:85:69:17:d3:d0:3c:6f:a4:7e:bb:86:71:a9:db:
                    3e:b1:66:ac:27:8a:38:36:8b:0c:45:fe:8c:d6:ea:
                    a6:93:d7:1b:a3:44:9c:fd:74:98:03:51:ec:59:a2:
                    9a:b4:6f:09:09:3d:51:5f:79:09:97:a8:41:42:20:
                    16:7b:4b:b7:33:3a:a3:a5:17:90:20:a0:67:40:29:
                    4c:a3:ac:9f:81:dd:cf:62:29:01:aa:2e:74:8f:21:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:81:4C:A4:3E:B4:F0:A9:BD:7D:F6:FC:03:F6:FC:B1:63:F1:DB:65
            X509v3 Authority Key Identifier:
                keyid:4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e3130392e36342e302f32322d3332203d3e20323634323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:68:0e:bd:a3:37:34:e8:fb:be:e5:4c:70:ff:9f:b8:18:1e:
         ba:c4:17:88:01:73:36:27:6e:2c:c2:c3:5a:bc:c8:06:9c:03:
         f6:8b:cb:8b:24:e6:dd:8a:c9:ae:2b:02:50:f3:a5:75:05:63:
         78:c8:8a:7e:39:3a:fa:8b:84:6e:fd:a3:dd:b5:d5:ba:11:97:
         28:2f:3a:22:bb:c6:58:2b:05:ce:bd:84:b6:91:bb:a9:ed:d4:
         74:32:8d:8b:c5:5c:a9:5d:d9:06:37:e4:69:32:cb:c6:3e:94:
         0d:b9:30:cd:5b:af:16:6d:12:92:55:2b:8c:c3:0a:92:11:49:
         da:d4:bc:90:b8:43:6f:03:39:5a:27:fa:9c:80:67:c4:b5:a3:
         71:0f:09:94:f1:b8:03:8b:99:6d:1a:c2:9c:31:b4:55:53:a6:
         ca:bc:0e:4e:30:ef:7e:43:94:e4:33:e9:8d:4c:a4:4d:d3:03:
         27:10:fc:e0:bd:0f:fa:cf:4b:2a:e6:8b:8f:48:e5:aa:22:79:
         8b:da:15:76:55:85:86:c1:7f:d1:cd:01:dd:9f:1a:a8:8e:48:
         05:f9:72:1b:aa:20:af:c3:c1:23:fd:92:20:58:d6:30:af:4f:
         e9:85:35:bc:8c:4a:c0:56:92:82:45:bb:2e:60:c6:58:53:43:
         9d:94:03:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org