Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37352e302f32342d3234203d3e20323731323935.roa
File:                     3139302e35322e37352e302f32342d3234203d3e20323731323935.roa (raw, json)
Hash identifier:          sBiRAya1bsYGlKvhQbfJNLUlwktBvpCn5JMURr1F9VE=
Subject key identifier:   11:00:41:52:37:10:57:6C:0A:CB:A4:B5:85:87:4F:F9:50:AC:AD:5D
Certificate issuer:       /CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Certificate serial:       148E39E1B534FF66F8216DD0CF08EDCDD5FAA3BB
Authority key identifier: 4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37352e302f32342d3234203d3e20323731323935.roa
Signing time:             Fri 31 Mar 2023 16:45:06 +0000
ROA not before:           Fri 31 Mar 2023 16:40:06 +0000
ROA not after:            Fri 29 Mar 2024 16:45:06 +0000
asID:                     271295
IP address blocks:        190.52.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8e:39:e1:b5:34:ff:66:f8:21:6d:d0:cf:08:ed:cd:d5:fa:a3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
        Validity
            Not Before: Mar 31 16:40:06 2023 GMT
            Not After : Mar 29 16:45:06 2024 GMT
        Subject: CN=110041523710576C0ACBA4B585874FF950ACAD5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:86:4e:d1:00:30:57:70:67:6b:ea:17:ed:ed:
                    57:ed:d8:99:c8:8f:ca:49:e4:f9:21:fc:9b:69:ea:
                    9d:d1:2a:fb:7c:06:ca:32:09:8f:b7:71:d5:95:6e:
                    3e:0d:1c:4b:a3:23:aa:ee:51:91:c0:74:6d:67:66:
                    49:88:50:fa:4a:34:4a:d6:08:d7:94:a0:59:e2:ab:
                    e6:c5:1b:6d:95:e7:1f:6f:fb:21:e6:7e:ce:52:8c:
                    21:e9:4e:2f:36:d9:46:c9:38:77:85:e3:37:14:9c:
                    0d:1c:55:b0:ea:ca:70:e2:60:18:3d:8d:09:a8:1b:
                    d0:ee:d5:aa:2e:5e:db:ab:4d:c2:68:3d:e1:b7:87:
                    1e:30:9d:1c:01:9f:35:92:23:0a:90:af:03:5a:9c:
                    6e:6f:ba:ff:e1:47:e5:66:08:23:e1:76:e4:82:b4:
                    10:ae:67:1d:d9:6c:67:bf:35:35:57:8a:46:db:83:
                    14:ea:48:24:94:4e:0b:e0:11:53:1c:73:d4:8a:e9:
                    79:73:4e:c6:a6:10:f2:0b:b2:0e:fd:d9:c4:30:6e:
                    77:d7:5e:2d:3b:7d:9a:09:a5:56:d5:ff:8d:b5:81:
                    7d:0d:24:8d:1e:6a:e8:7e:5d:7a:96:4f:db:48:b7:
                    db:21:17:a2:70:4c:27:33:a8:a6:bd:83:23:7a:5c:
                    41:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:00:41:52:37:10:57:6C:0A:CB:A4:B5:85:87:4F:F9:50:AC:AD:5D
            X509v3 Authority Key Identifier:
                keyid:4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37352e302f32342d3234203d3e20323731323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:e6:02:1f:4c:78:fb:d7:56:d6:f9:b6:11:fe:c5:e6:37:62:
         ab:c8:a4:33:77:57:eb:95:9c:de:45:16:df:12:15:a2:c0:b2:
         2f:de:6d:d3:bf:75:c4:15:d8:fc:1c:ed:1c:40:c5:8b:c1:f0:
         22:dc:63:3f:82:1e:21:03:8c:f4:cb:c0:ae:02:3c:4b:e7:69:
         ea:2a:ae:73:30:e5:e9:49:cc:45:dd:9c:42:80:93:a0:8f:00:
         e7:97:34:34:31:8f:09:0b:23:07:0b:ef:07:02:b5:cd:96:6e:
         8b:e6:cd:12:1c:84:64:b4:b6:c8:8d:75:5b:81:7a:6c:fc:3b:
         13:af:5a:f2:f8:bd:d1:24:28:af:be:46:a9:e1:3e:43:ce:ab:
         02:6b:90:ec:d5:87:72:1f:00:ec:b4:eb:95:05:80:62:37:fb:
         05:b1:26:1c:13:09:7b:62:88:24:09:85:65:4e:cb:b4:14:34:
         31:ce:25:fa:87:43:8b:02:33:a1:f0:68:a5:96:e6:75:45:99:
         d7:f5:da:c5:25:df:2b:5d:03:28:77:23:58:4a:93:bd:45:8c:
         86:31:8d:b4:6e:7d:e3:4f:18:1a:73:40:70:d3:52:0a:d8:88:
         ed:08:37:df:71:df:e7:cd:6e:4a:1f:5e:01:42:0d:36:09:01:
         86:b4:c9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org