Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0/3139302e392e3132302e302f32322d3234203d3e20323731353932.roa
File:                     3139302e392e3132302e302f32322d3234203d3e20323731353932.roa (raw, json)
Hash identifier:          /M7HIuAP3rl7zlUH1ZDiv7CYVI1xOob2axGip2JgLek=
Subject key identifier:   C5:BE:0A:82:63:C6:63:A5:DA:7F:80:A7:75:90:26:A1:20:29:1A:4D
Certificate issuer:       /CN=C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737
Certificate serial:       6CD7BAA4696C491EDB3053F416A7E179CC8C538B
Authority key identifier: C3:BD:38:EB:FA:0A:23:0A:ED:DD:BE:8D:AF:54:77:CD:71:A4:57:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0/3139302e392e3132302e302f32322d3234203d3e20323731353932.roa
Signing time:             Mon 19 Dec 2022 20:28:59 +0000
ROA not before:           Mon 19 Dec 2022 20:23:59 +0000
ROA not after:            Mon 18 Dec 2023 20:28:59 +0000
asID:                     271592
IP address blocks:        190.9.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d7:ba:a4:69:6c:49:1e:db:30:53:f4:16:a7:e1:79:cc:8c:53:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737
        Validity
            Not Before: Dec 19 20:23:59 2022 GMT
            Not After : Dec 18 20:28:59 2023 GMT
        Subject: CN=C5BE0A8263C663A5DA7F80A7759026A120291A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:b4:bd:60:e6:6a:95:3f:3a:69:25:f8:c1:
                    dc:18:1f:45:2e:15:e9:d4:f7:f9:3c:cc:eb:7d:3e:
                    6c:bb:26:c3:5a:5d:15:dd:08:20:11:b5:02:e9:f9:
                    7f:a3:02:0c:78:02:12:69:b8:e4:ab:c4:ee:4a:aa:
                    31:19:04:5e:94:54:67:62:d0:8c:77:ad:e7:ca:23:
                    7f:57:99:49:a2:56:7d:16:01:42:79:94:26:70:a1:
                    cb:5e:d2:ce:5e:43:fb:f5:73:a3:87:a7:6b:07:3c:
                    ac:90:92:d4:9e:ec:c0:2e:b2:e0:1a:fd:b2:ed:8f:
                    7c:9f:8d:1a:ba:df:a0:2c:50:18:ee:af:d2:37:ef:
                    68:54:74:f2:b0:ee:4e:11:8f:32:b3:ef:9d:0d:90:
                    0d:e7:34:7e:4f:e9:03:e9:c2:c5:aa:f2:79:28:1e:
                    d0:bd:61:77:ec:e5:86:a4:eb:ac:bf:b2:90:15:24:
                    3f:92:2c:9e:ec:7a:54:39:6f:62:50:26:fa:74:de:
                    86:f4:b1:de:d1:b0:39:5a:c6:f3:a0:99:4f:2c:c5:
                    96:4a:df:75:2e:8d:da:5b:83:ca:74:4a:2f:bb:88:
                    3f:d6:d1:aa:e0:e7:16:bc:d7:06:cb:9d:52:c8:0b:
                    c2:94:48:6b:0d:25:4e:21:cd:b5:37:56:0f:10:0f:
                    98:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BE:0A:82:63:C6:63:A5:DA:7F:80:A7:75:90:26:A1:20:29:1A:4D
            X509v3 Authority Key Identifier:
                keyid:C3:BD:38:EB:FA:0A:23:0A:ED:DD:BE:8D:AF:54:77:CD:71:A4:57:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0/C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0/3139302e392e3132302e302f32322d3234203d3e20323731353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:69:82:34:43:ac:0e:6b:17:47:1f:de:ca:77:76:81:01:df:
         ed:84:ab:af:be:b6:3c:01:d2:62:46:50:ba:ae:32:ea:1e:de:
         69:bf:a7:a2:8f:1c:d3:e4:c2:c7:ec:d0:cc:30:6e:d1:07:24:
         f1:3d:91:5d:5b:a3:bc:a4:4e:43:5d:11:2c:6a:b9:97:da:ea:
         9f:33:3f:68:e0:f4:c1:30:84:2d:a6:c4:f6:96:33:1b:10:31:
         f1:14:e6:19:be:22:02:95:33:fa:ed:88:99:53:3c:89:2f:e6:
         a0:ae:8a:4f:74:c5:f1:30:85:b3:a4:b3:d6:40:76:3b:99:2f:
         95:45:6e:1d:cc:6f:aa:6c:c1:62:fd:dd:05:df:06:93:71:01:
         17:82:52:0b:46:09:70:13:8a:64:6f:b1:0f:8e:b9:79:6c:98:
         f2:60:cb:51:a3:b1:77:71:21:b9:ab:4a:cd:4c:6d:38:10:c0:
         c6:7e:de:eb:1d:3c:b2:32:84:67:aa:83:53:eb:32:d3:f8:7a:
         bc:cd:b7:46:9f:c8:ee:72:c4:d0:8b:52:21:f4:4a:1e:0a:8d:
         10:ed:df:51:8b:0d:7f:6e:f6:85:2c:d7:37:61:7e:51:35:ee:
         c5:81:f1:2f:7f:e9:32:21:b5:e1:45:ed:d9:33:0e:4a:c7:88:
         65:6f:5b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org