Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/0/3139302e38392e37362e302f32342d3234203d3e20323730333539.roa
File:                     3139302e38392e37362e302f32342d3234203d3e20323730333539.roa (raw, json)
Hash identifier:          NBvujxeDl/nweTx4flsowBVSwPzisxz/tijzFY6NXo8=
Subject key identifier:   84:6B:A2:04:C4:F8:90:2C:D1:2A:4B:29:2A:01:4F:7A:53:C4:5F:FB
Certificate issuer:       /CN=5B6D5CBF989FF70925E7058EAB7DDA2816E16F5F
Certificate serial:       6A22867B8770BF0565A7FD50E6DA298420FC483B
Authority key identifier: 5B:6D:5C:BF:98:9F:F7:09:25:E7:05:8E:AB:7D:DA:28:16:E1:6F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B6D5CBF989FF70925E7058EAB7DDA2816E16F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/0/3139302e38392e37362e302f32342d3234203d3e20323730333539.roa
Signing time:             Fri 02 Dec 2022 01:50:13 +0000
ROA not before:           Fri 02 Dec 2022 01:45:13 +0000
ROA not after:            Fri 01 Dec 2023 01:50:13 +0000
asID:                     270359
IP address blocks:        190.89.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:22:86:7b:87:70:bf:05:65:a7:fd:50:e6:da:29:84:20:fc:48:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B6D5CBF989FF70925E7058EAB7DDA2816E16F5F
        Validity
            Not Before: Dec  2 01:45:13 2022 GMT
            Not After : Dec  1 01:50:13 2023 GMT
        Subject: CN=846BA204C4F8902CD12A4B292A014F7A53C45FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b2:20:29:e7:e8:49:57:a0:0c:91:25:be:a7:
                    65:01:a0:00:b0:07:2a:71:b1:46:e6:d0:9d:cc:64:
                    70:b9:01:51:2d:90:7c:fd:8f:7f:3e:db:37:5f:b6:
                    09:bf:14:f8:ed:35:9c:d6:06:17:a1:6e:e3:80:0d:
                    b5:42:ee:14:a3:6b:91:e3:ed:37:fd:b9:f1:60:c6:
                    98:d9:65:69:fd:d2:3f:62:02:fa:c7:57:19:c5:78:
                    cb:1e:8a:f3:ba:f0:8b:fd:ba:65:f9:15:52:2c:80:
                    80:1a:a9:f1:b6:db:ed:0b:4f:17:72:0f:c4:7e:8a:
                    bf:21:27:eb:98:92:7a:20:2f:c0:91:d5:b0:8c:dc:
                    cb:08:1f:5c:d6:dc:ab:54:95:6b:be:c1:2c:be:55:
                    07:69:a0:77:fe:5c:86:8c:71:27:27:7d:9f:b3:d8:
                    48:e4:6f:54:97:58:35:b3:9e:f9:94:74:75:df:42:
                    15:83:1a:91:9c:3e:d7:79:d1:89:7f:76:2d:bd:9f:
                    72:f4:9e:cb:47:cb:8e:dd:8b:d4:ca:10:c2:0a:49:
                    40:d7:eb:30:d0:2c:94:7e:73:62:8f:96:1b:93:6b:
                    0b:91:37:19:5e:05:cd:dc:a3:d4:1c:b0:02:18:09:
                    f0:e5:d5:89:99:8c:f2:ae:61:a0:0a:bb:77:c7:dc:
                    18:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6B:A2:04:C4:F8:90:2C:D1:2A:4B:29:2A:01:4F:7A:53:C4:5F:FB
            X509v3 Authority Key Identifier:
                keyid:5B:6D:5C:BF:98:9F:F7:09:25:E7:05:8E:AB:7D:DA:28:16:E1:6F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/0/5B6D5CBF989FF70925E7058EAB7DDA2816E16F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B6D5CBF989FF70925E7058EAB7DDA2816E16F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/0/3139302e38392e37362e302f32342d3234203d3e20323730333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:65:db:83:68:0e:b5:df:2e:64:4f:c5:1b:24:4a:3b:d8:4e:
         90:25:15:51:f6:1c:8b:1f:25:a9:eb:82:59:3e:2b:1f:f1:2f:
         9e:00:bd:dd:11:d5:21:b0:a8:93:f9:b5:fe:97:dc:9c:9c:20:
         c0:94:c6:f2:69:11:23:ed:b2:9e:ff:3a:6e:92:ee:37:a7:fa:
         41:28:97:cf:76:bc:bb:7a:28:5b:8a:6a:75:4e:55:9c:18:03:
         84:91:35:fa:c4:fb:49:78:66:d8:49:e7:21:26:f4:d0:06:c9:
         84:a2:cc:fd:6f:f8:a5:d9:f6:8a:95:7b:52:71:35:c9:fb:bf:
         84:8c:5d:da:40:c8:d6:1e:fa:8b:73:b8:e5:23:cb:7f:41:7a:
         b3:96:1f:b1:5c:ad:69:6a:05:67:41:53:81:d1:9b:ba:86:74:
         f9:dc:a8:89:98:3a:e7:8a:b3:d9:ea:57:66:9d:cc:f2:95:46:
         93:02:8b:a2:7b:fd:c1:fc:49:e2:d8:85:e1:08:a7:cf:a4:83:
         f6:61:d5:1a:6a:2e:f0:80:d2:75:87:64:c9:6b:8a:88:46:c0:
         2a:0e:85:0f:b4:58:aa:f2:b3:f0:bb:14:6d:9b:ef:17:0c:d4:
         ad:d9:f5:8f:28:ec:0e:7a:c6:05:60:e8:ef:d2:3e:e7:e0:c2:
         ea:ce:a7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org