Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3139302e372e3137362e302f32302d3230203d3e20323632353032.roa
File:                     3139302e372e3137362e302f32302d3230203d3e20323632353032.roa (raw, json)
Hash identifier:          QhjZ1/uNEGCj2MlJDuFfDMp7HCRJUtZSIW2juXLEaOU=
Subject key identifier:   E8:20:8D:12:9A:EC:77:E6:30:EF:34:1D:1D:F6:23:21:4F:3B:64:C1
Certificate issuer:       /CN=3E7012DDC83FD6C43059A6A0938BEE70E96E9606
Certificate serial:       0ED83F44A2F7312D5C0ECA8FC6C1260BC104FEF1
Authority key identifier: 3E:70:12:DD:C8:3F:D6:C4:30:59:A6:A0:93:8B:EE:70:E9:6E:96:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E7012DDC83FD6C43059A6A0938BEE70E96E9606.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3139302e372e3137362e302f32302d3230203d3e20323632353032.roa
Signing time:             Tue 19 Jul 2022 18:34:53 +0000
ROA not before:           Tue 19 Jul 2022 18:29:53 +0000
ROA not after:            Tue 18 Jul 2023 18:34:53 +0000
asID:                     262502
IP address blocks:        190.7.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d8:3f:44:a2:f7:31:2d:5c:0e:ca:8f:c6:c1:26:0b:c1:04:fe:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E7012DDC83FD6C43059A6A0938BEE70E96E9606
        Validity
            Not Before: Jul 19 18:29:53 2022 GMT
            Not After : Jul 18 18:34:53 2023 GMT
        Subject: CN=E8208D129AEC77E630EF341D1DF623214F3B64C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ad:df:46:a9:bf:4f:31:8a:3f:5d:c7:af:fe:
                    e3:2a:89:94:57:d0:2d:35:00:99:11:9c:92:d0:15:
                    dc:34:53:d1:f8:63:9b:51:da:37:5f:10:d8:25:a4:
                    c4:93:6a:64:97:24:3d:7e:94:3c:54:fe:0b:c0:d7:
                    be:13:b2:ca:33:b5:58:d7:21:6a:55:2d:50:7c:b6:
                    71:66:b3:cf:43:e8:9c:91:f1:17:72:61:41:1e:df:
                    70:fd:cb:d9:30:d2:b2:15:09:d3:43:c2:82:bd:9e:
                    68:c4:b2:e1:18:13:ab:c9:29:d4:b7:5e:07:47:db:
                    4f:37:f1:e1:e4:b5:65:63:ab:d2:92:e9:82:40:e0:
                    39:fb:d4:cf:b0:d8:e3:28:88:ef:1f:dd:a9:bc:3e:
                    50:32:28:43:c4:b1:0b:38:5d:23:62:55:2f:4c:c1:
                    85:4a:43:18:29:4e:a8:f4:38:45:20:28:8f:5c:ed:
                    0f:44:70:eb:ea:d9:01:a9:9c:0a:f0:4c:28:57:44:
                    41:46:b3:fc:91:0f:95:33:c4:b7:6e:77:ce:f9:de:
                    1b:22:9a:2e:1c:95:35:b7:1d:f0:08:05:61:b8:b8:
                    1a:76:2e:e9:d8:5a:f0:a6:3b:2f:40:61:be:69:77:
                    c7:c6:c1:7b:3a:59:43:d9:5d:57:c9:11:68:c9:ef:
                    a5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:20:8D:12:9A:EC:77:E6:30:EF:34:1D:1D:F6:23:21:4F:3B:64:C1
            X509v3 Authority Key Identifier:
                keyid:3E:70:12:DD:C8:3F:D6:C4:30:59:A6:A0:93:8B:EE:70:E9:6E:96:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3E7012DDC83FD6C43059A6A0938BEE70E96E9606.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E7012DDC83FD6C43059A6A0938BEE70E96E9606.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3139302e372e3137362e302f32302d3230203d3e20323632353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b9:63:61:45:a7:7b:10:84:46:ad:0c:3c:f3:38:65:87:1b:e2:
         bc:04:e5:bd:b1:0f:fc:f5:0c:d0:a4:3c:be:6a:b8:10:66:1a:
         70:f8:da:aa:fb:6c:4d:72:1d:f1:c8:0a:58:6a:2b:3a:71:1d:
         e6:68:bc:33:74:a1:bc:86:33:c1:04:fc:aa:bb:92:a5:57:32:
         15:de:d5:82:c5:9a:d7:87:c5:f2:b2:42:3f:e2:c4:f8:35:c3:
         d1:3c:2d:b4:6b:07:a9:f1:cc:94:99:eb:7c:bf:6e:81:8d:e1:
         18:4c:d9:74:bb:e6:4a:78:32:16:4a:de:57:30:a4:dc:68:a1:
         78:0a:16:a1:56:df:80:6b:cc:1d:03:8e:90:64:49:d2:18:e0:
         2f:9b:e5:fd:75:78:c0:c8:40:05:d2:e8:e5:84:1e:50:ed:79:
         40:fe:76:7c:40:ae:ad:5d:60:78:97:73:d3:2e:3e:39:0f:f8:
         03:94:1f:b2:37:de:19:ea:e0:29:36:e5:a4:c0:b0:17:85:b0:
         62:7d:e6:46:67:1c:2a:06:01:3a:e5:3e:17:fb:9e:a4:15:93:
         89:9b:5d:32:ac:36:de:fc:54:e6:6d:2e:a4:73:0f:68:a4:5f:
         64:f3:f5:91:e2:88:5c:02:b0:49:b4:4d:f5:5d:2d:42:1c:19:
         4e:50:c0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org