Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37342e302f32342d3234203d3e203238363536.roa
File:                     3139302e35322e37342e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          +DJNNaA4DyNADAbLU1PDd+0OQLGD3++5L2WD70HZ/jI=
Subject key identifier:   DA:21:D7:92:26:1F:C3:E2:B8:29:5F:F3:81:76:E0:69:3A:69:95:FD
Certificate issuer:       /CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Certificate serial:       3FFC98E2A8074BBD541987B30530E31DA2D0089C
Authority key identifier: 4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37342e302f32342d3234203d3e203238363536.roa
Signing time:             Wed 19 Apr 2023 16:57:51 +0000
ROA not before:           Wed 19 Apr 2023 16:52:51 +0000
ROA not after:            Wed 17 Apr 2024 16:57:51 +0000
asID:                     28656
IP address blocks:        190.52.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:fc:98:e2:a8:07:4b:bd:54:19:87:b3:05:30:e3:1d:a2:d0:08:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
        Validity
            Not Before: Apr 19 16:52:51 2023 GMT
            Not After : Apr 17 16:57:51 2024 GMT
        Subject: CN=DA21D792261FC3E2B8295FF38176E0693A6995FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:7a:d5:28:b2:38:df:05:92:02:7a:ae:2a:
                    90:b3:bb:35:69:72:32:22:38:7b:25:f6:eb:f9:f0:
                    37:4e:51:7d:60:de:52:85:bb:fb:ba:14:5a:d4:82:
                    69:de:95:3e:f8:46:25:26:b1:38:76:d3:b8:1c:7d:
                    c5:05:5a:93:09:4c:a8:09:ca:06:51:87:80:8f:3e:
                    4d:ac:91:d2:42:9f:0f:f2:68:a9:c0:c8:a2:4d:9a:
                    64:87:71:1b:45:a0:1c:8e:ae:cf:fb:07:b7:cf:11:
                    92:58:60:ea:60:11:58:54:33:04:47:25:2f:33:ab:
                    23:04:25:33:99:52:62:04:2e:a0:3d:d5:7c:04:94:
                    66:ad:d4:ef:05:6c:c3:df:29:d4:42:68:f6:e5:cc:
                    5b:f1:f9:49:52:35:9c:d7:98:e4:bf:c1:8b:b5:83:
                    0d:d7:6b:28:c4:26:e3:19:f7:a5:13:0a:49:98:b6:
                    bd:08:6f:57:ac:38:ed:9d:4f:29:d0:02:bc:fb:1c:
                    2a:ca:1b:b9:fa:fb:a1:1a:f5:75:11:ad:14:2e:c1:
                    c9:5f:7f:81:89:f4:95:48:22:82:6a:37:99:14:96:
                    09:49:c1:57:6b:7f:55:af:38:1a:e3:ca:b0:a1:4b:
                    62:1f:ed:47:d5:02:34:3e:b0:a8:43:93:ac:28:89:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:21:D7:92:26:1F:C3:E2:B8:29:5F:F3:81:76:E0:69:3A:69:95:FD
            X509v3 Authority Key Identifier:
                keyid:4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37342e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:61:34:e6:d7:9c:a3:56:2a:30:2c:a5:24:a3:b7:b3:34:34:
         4f:eb:54:8a:4e:6e:5a:9f:37:69:4e:00:0b:c7:d4:1c:06:41:
         b5:fb:24:11:fe:76:eb:67:f1:67:bd:c6:af:f1:c1:19:e4:1f:
         6f:42:1c:45:8d:85:43:a2:81:ff:52:e2:59:3e:40:51:fc:08:
         8b:19:a9:c7:55:74:a4:e6:00:ff:7e:99:e0:f5:33:49:be:39:
         82:96:f3:a5:1c:33:b0:10:c1:97:d1:38:de:f7:49:d1:b1:87:
         64:68:d7:63:b5:2d:e4:fc:1c:92:9b:4e:0c:59:be:0c:1c:57:
         25:cd:39:7b:ae:1e:6e:39:8d:bb:4a:7f:52:e9:8a:5e:4c:8d:
         ec:c0:0e:bf:6f:8a:58:ae:ee:6f:74:70:87:7b:b1:dd:db:1a:
         86:e3:95:a8:50:47:57:ef:ad:b9:3b:d5:6c:2a:d2:fe:ab:5a:
         6e:56:aa:c5:a9:22:59:ef:25:0f:9e:7c:b4:4e:1f:8c:aa:8e:
         c0:44:30:01:99:5a:25:d9:31:4f:8f:86:74:c8:9e:ac:41:ed:
         00:8e:3c:f9:10:08:2b:5a:40:0c:17:b7:1d:b1:3c:6c:64:48:
         97:df:28:5a:d3:8c:aa:ff:61:fc:4d:ad:bd:5c:df:c8:a9:e5:
         94:e2:f9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org