Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3139302e38392e3234342e302f32322d3232203d3e20323730343133.roa
File:                     3139302e38392e3234342e302f32322d3232203d3e20323730343133.roa (raw, json)
Hash identifier:          YXY7jX+yQ+b4AZAfUqlW6rg93rQQLwYlZn/ixYO0lBU=
Subject key identifier:   34:B5:71:02:0D:3A:FE:97:22:3B:AF:00:89:02:12:68:79:38:E8:68
Certificate issuer:       /CN=AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9
Certificate serial:       3D2FFAA705037EE68D73B6262F690F3150FCBA25
Authority key identifier: AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3139302e38392e3234342e302f32322d3232203d3e20323730343133.roa
Signing time:             Mon 25 Jul 2022 12:26:30 +0000
ROA not before:           Mon 25 Jul 2022 12:21:30 +0000
ROA not after:            Mon 24 Jul 2023 12:26:30 +0000
asID:                     270413
IP address blocks:        190.89.244.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2f:fa:a7:05:03:7e:e6:8d:73:b6:26:2f:69:0f:31:50:fc:ba:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9
        Validity
            Not Before: Jul 25 12:21:30 2022 GMT
            Not After : Jul 24 12:26:30 2023 GMT
        Subject: CN=34B571020D3AFE97223BAF00890212687938E868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a8:c4:98:1a:3f:42:2c:9d:b2:27:6f:69:02:
                    4e:0b:91:c1:83:59:84:bb:93:fb:6b:99:28:39:3f:
                    6e:c1:3a:98:e9:1c:e7:bd:4c:5d:a0:2b:ef:0d:97:
                    f1:48:95:6a:48:4d:aa:d7:a8:4f:71:5b:cd:68:69:
                    aa:a5:18:f1:b2:e4:4f:a5:29:51:0f:ff:6c:b5:bd:
                    c7:06:f2:47:fa:73:5c:06:84:8a:74:79:54:00:ab:
                    0f:81:ac:f8:f5:60:13:40:8e:9d:d1:1a:b7:ea:3b:
                    55:7b:cf:7a:9a:be:81:3b:63:53:de:3d:59:41:9d:
                    47:2b:bc:e8:38:de:de:7f:4f:8a:f3:75:17:71:b2:
                    67:81:8c:73:26:4f:9c:f4:6e:44:7f:c1:58:66:d0:
                    f3:c3:98:c5:54:65:10:7c:24:55:c1:ad:e6:d5:e2:
                    89:bf:88:a8:45:fa:80:00:2e:c2:e8:ae:2d:a5:17:
                    ce:ee:78:74:91:67:78:e0:b7:60:eb:fc:24:97:c0:
                    f2:ab:96:bb:ed:f2:9f:17:c2:4b:93:94:ff:11:eb:
                    b1:2a:d4:1f:23:29:f6:47:78:fa:af:40:36:cc:68:
                    8e:fe:1b:b7:52:cd:74:0e:bd:e2:f4:64:2f:83:37:
                    9c:d6:f8:f5:30:65:8e:a9:32:13:e1:c0:0e:2d:52:
                    92:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B5:71:02:0D:3A:FE:97:22:3B:AF:00:89:02:12:68:79:38:E8:68
            X509v3 Authority Key Identifier:
                keyid:AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3139302e38392e3234342e302f32322d3232203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:29:3a:3c:58:51:b7:c9:80:45:de:ac:a1:a2:ed:88:b8:a2:
         d6:76:a9:68:45:af:eb:c1:1a:d4:c5:ef:14:d8:89:6f:81:39:
         70:84:d8:3f:f0:e3:f3:b9:01:6b:9f:98:de:e2:b0:7c:f4:9a:
         25:3c:48:07:2c:ef:ef:d6:32:02:11:85:76:89:98:ab:3f:05:
         b8:cb:db:63:ed:4c:39:39:dd:2c:f2:6c:74:fc:1b:ca:ad:31:
         1d:1f:c2:bf:19:e9:42:23:95:53:34:f9:f6:af:ae:a1:bc:46:
         a4:37:92:f7:75:ab:04:b5:81:03:63:5f:32:64:91:ee:02:7d:
         79:c9:36:a0:43:5e:01:3e:e0:00:71:68:2f:3d:65:ed:57:9a:
         56:3f:95:de:b7:5f:64:16:a5:ca:b9:e7:bd:8b:39:e2:9a:40:
         44:70:cd:30:b6:a8:b0:d5:51:a1:17:fc:f9:52:c3:c0:5d:d4:
         5e:f0:03:7b:ff:49:04:6a:f5:bf:35:0e:6d:0a:7b:d4:c6:13:
         20:64:1b:d2:5b:48:4a:71:af:97:16:43:f8:4a:8b:f1:b9:a0:
         ee:a5:9f:3f:44:7b:d5:70:bc:ef:9f:d0:56:3b:01:46:d2:e7:
         c7:c3:b4:b4:21:f3:bd:d7:07:df:82:3b:a2:c4:de:23:87:cc:
         cf:2c:28:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org