Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32342d3234203d3e203238363536.roa
File:                     3139302e35322e37322e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          uiD1wMOWdzLddnphrp78pmhEH3BN6JbocjGQYOSpXYs=
Subject key identifier:   A6:4B:74:99:62:01:85:D1:3D:2B:09:21:73:5D:A5:87:3A:F7:94:32
Certificate issuer:       /CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Certificate serial:       6590AB61CD8C89EA74743106BA4A38C0609FCDBE
Authority key identifier: 4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32342d3234203d3e203238363536.roa
Signing time:             Mon 24 Apr 2023 12:50:49 +0000
ROA not before:           Mon 24 Apr 2023 12:45:49 +0000
ROA not after:            Mon 22 Apr 2024 12:50:49 +0000
asID:                     28656
IP address blocks:        190.52.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:90:ab:61:cd:8c:89:ea:74:74:31:06:ba:4a:38:c0:60:9f:cd:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
        Validity
            Not Before: Apr 24 12:45:49 2023 GMT
            Not After : Apr 22 12:50:49 2024 GMT
        Subject: CN=A64B7499620185D13D2B0921735DA5873AF79432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f7:d5:d7:46:c0:8a:f8:e4:50:49:00:f1:5a:
                    a7:b7:2f:bf:71:08:33:67:6c:50:8b:1a:36:7d:81:
                    e1:17:04:ce:31:4f:9d:0e:2f:08:bc:83:1b:60:fa:
                    37:97:74:07:30:79:f7:e7:38:d1:4c:45:e4:7b:dc:
                    ec:84:7e:5b:70:12:3e:ab:db:b0:30:11:03:59:4f:
                    ee:f7:45:59:e5:3a:dc:e7:05:18:00:09:d1:cb:5d:
                    de:38:07:df:87:20:db:18:05:50:2b:46:9a:d2:03:
                    18:85:16:0b:29:42:d0:32:7b:fa:eb:54:94:09:6e:
                    a9:bd:5c:de:ac:1c:95:4e:f9:fc:3e:2b:a0:73:da:
                    c6:0e:7f:8d:20:cd:2c:06:59:8a:aa:e5:a9:cf:23:
                    06:3d:cb:28:81:52:85:bf:52:79:02:3d:b8:f8:2b:
                    f8:4b:45:6c:d2:af:fe:b8:91:22:aa:a8:13:d6:fc:
                    cf:a5:ca:80:32:04:f3:09:fa:10:90:be:5d:11:e7:
                    dd:e3:51:d8:de:93:55:bd:40:90:60:b5:e9:cc:57:
                    19:59:1d:46:79:1a:61:2f:ef:14:65:a8:5b:7c:22:
                    de:ab:83:80:c1:bf:ad:65:a8:39:6b:c6:77:60:45:
                    a9:65:46:ab:9a:99:93:f4:b9:d7:7a:00:e8:d9:f0:
                    91:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4B:74:99:62:01:85:D1:3D:2B:09:21:73:5D:A5:87:3A:F7:94:32
            X509v3 Authority Key Identifier:
                keyid:4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:04:de:a0:14:e7:f7:3d:b2:0e:cb:b4:ad:a1:5b:ab:2f:
         9f:bb:c4:10:c0:be:35:eb:9b:d5:f7:c0:ce:a4:87:8e:d9:84:
         db:e6:9e:c8:d9:61:23:40:e1:c0:5a:54:3f:c0:fd:99:e8:c4:
         04:59:0d:31:85:db:c9:0e:49:f9:b3:a9:cf:3a:84:6b:92:a8:
         00:77:b3:0f:98:a4:f3:58:0d:ee:a5:e7:36:7a:01:2c:a7:5c:
         bc:68:4a:ed:a5:1e:a7:6e:f0:fb:71:3e:3b:b4:09:8a:b8:da:
         fc:ee:5f:40:9e:2d:e0:c7:7c:36:f3:51:b2:19:74:76:69:72:
         e8:f9:43:ec:47:fe:59:40:4b:1b:17:89:cf:56:b7:40:26:49:
         b3:cb:66:ec:9c:fa:b7:21:26:4c:ed:12:c1:50:3d:ea:67:0b:
         64:e6:3e:de:46:eb:8b:c4:6a:36:68:41:f3:fb:cb:83:f2:67:
         f0:3c:8c:b5:1a:49:82:c2:ce:14:47:b4:3d:72:c4:a4:50:34:
         ef:64:3b:5d:83:5b:46:a1:66:db:d2:dc:37:d3:a1:28:5d:d1:
         50:ab:80:59:58:1b:82:f2:5f:4b:4b:ec:51:de:1f:4f:5b:b8:
         8f:69:6d:ff:95:42:c2:36:2a:b1:ba:d2:99:39:51:4a:07:a2:
         54:69:09:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org