Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37342e302f32332d3233203d3e20323731323935.roa
File:                     3139302e35322e37342e302f32332d3233203d3e20323731323935.roa (raw, json)
Hash identifier:          WUa1096k3EvQUrDQVqAxBAkJTGXXNkRnw8qQ+4Sh+PE=
Subject key identifier:   71:BA:6C:29:F2:F0:E1:8B:6E:FD:E2:77:C8:87:40:FE:A2:61:27:43
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       4747374F37EE36001D3816BBAD9FC3CB827CAF95
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37342e302f32332d3233203d3e20323731323935.roa
Signing time:             Sun 19 Mar 2023 13:27:18 +0000
ROA not before:           Sun 19 Mar 2023 13:22:18 +0000
ROA not after:            Sun 17 Mar 2024 13:27:18 +0000
asID:                     271295
IP address blocks:        190.52.74.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:47:37:4f:37:ee:36:00:1d:38:16:bb:ad:9f:c3:cb:82:7c:af:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 19 13:22:18 2023 GMT
            Not After : Mar 17 13:27:18 2024 GMT
        Subject: CN=71BA6C29F2F0E18B6EFDE277C88740FEA2612743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:31:10:db:51:69:1d:df:e9:cf:e8:79:da:a1:
                    d6:cc:12:95:94:7f:b1:b2:7d:32:40:63:cd:14:a8:
                    29:46:51:9a:53:07:27:84:9b:48:87:1b:52:dd:22:
                    f7:b4:55:2b:19:98:dc:24:8a:c4:26:e1:c4:4a:3c:
                    35:79:1e:67:f4:f1:18:06:c0:54:97:40:d0:dc:13:
                    26:32:42:b1:18:c5:ba:49:91:f2:1e:b6:48:49:24:
                    85:6c:60:c1:a4:86:e9:4c:3f:df:af:9d:bf:fc:22:
                    9a:f6:bc:d5:62:e7:f8:0d:c1:e1:2e:28:08:3b:dd:
                    8b:2c:0f:ab:d5:2c:a0:d0:c0:23:5e:ae:e7:4b:93:
                    8a:72:6c:ed:fb:f3:66:7e:7f:60:f7:a4:81:b4:77:
                    58:8a:a4:70:70:d6:96:b2:dd:e2:8a:12:cd:a5:a5:
                    e0:05:99:be:96:04:8f:d2:13:9c:95:23:0f:e7:9f:
                    3a:1f:36:d8:11:fe:f0:5e:a3:da:ef:6a:34:3e:54:
                    c5:4b:34:cd:70:15:18:f6:7a:ec:ca:20:f7:3b:69:
                    72:81:e6:f2:e3:48:8c:b6:d0:18:e0:6b:c4:2c:f1:
                    70:c6:b6:cd:42:a4:7d:a3:52:ce:03:57:c0:02:b7:
                    4b:36:ac:ac:72:48:b8:c2:4c:d2:89:62:dc:ab:dc:
                    8a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BA:6C:29:F2:F0:E1:8B:6E:FD:E2:77:C8:87:40:FE:A2:61:27:43
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37342e302f32332d3233203d3e20323731323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:8d:4f:ff:b6:75:c6:ed:42:b1:93:91:95:4b:a9:e9:bf:80:
         7a:10:e1:eb:3b:29:73:97:3e:6d:a6:b7:2b:9a:b8:78:e7:47:
         92:3a:1b:de:a2:97:10:cf:30:de:71:cb:df:59:17:7b:cc:cf:
         25:ea:50:13:ad:f6:8c:c8:4e:66:b7:b5:92:07:2a:18:e0:d6:
         d3:40:5b:ba:ce:cb:73:24:c6:81:2d:6d:34:b8:1b:09:e2:8d:
         e3:ef:fa:1d:79:c8:df:f5:d8:b3:74:56:f8:e7:cc:fe:25:01:
         47:e2:f0:1d:de:ed:b0:e6:59:29:67:e2:24:a9:c8:4c:1f:1c:
         37:ea:6f:52:d7:d2:21:da:6b:9f:2e:ab:68:cc:cb:ba:ae:51:
         2c:b6:20:30:c3:2d:28:bd:63:5e:9e:0f:f3:52:c5:ec:cd:85:
         37:f8:fa:2b:fe:0a:66:4e:0a:79:2f:f5:05:28:9b:71:7c:da:
         f9:83:7d:86:f1:71:81:9c:10:7e:45:9c:11:aa:86:b3:56:9c:
         11:60:3c:2e:a1:8d:24:a2:3d:31:78:f4:bc:40:bc:65:ba:25:
         3e:d2:b8:0a:8d:af:fb:fe:09:eb:7d:60:6a:5d:ce:6e:4d:0e:
         de:43:72:06:dc:7e:c2:21:e3:10:eb:50:e8:ec:81:6d:74:83:
         96:9c:1f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org