Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/3139302e3138352e39362e302f32342d3234203d3e20323731333735.roa
File:                     3139302e3138352e39362e302f32342d3234203d3e20323731333735.roa (raw, json)
Hash identifier:          +0z4eU/jGTi15c+f1X4f4BKihHl0Sn4cbbJw76WNLYE=
Subject key identifier:   CA:B5:00:15:A5:E7:6F:82:39:83:AE:AE:88:54:C7:72:B9:31:77:48
Certificate issuer:       /CN=D55CC694898AC024276BD064EFD77BD52DCDB76D
Certificate serial:       5E5C988A46A6DF976B7F2AD32E3B8D8B6031C0E1
Authority key identifier: D5:5C:C6:94:89:8A:C0:24:27:6B:D0:64:EF:D7:7B:D5:2D:CD:B7:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/3139302e3138352e39362e302f32342d3234203d3e20323731333735.roa
Signing time:             Tue 29 Mar 2022 19:40:10 +0000
ROA not before:           Tue 29 Mar 2022 19:35:10 +0000
ROA not after:            Tue 28 Mar 2023 19:40:10 +0000
asID:                     271375
IP address blocks:        190.185.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5c:98:8a:46:a6:df:97:6b:7f:2a:d3:2e:3b:8d:8b:60:31:c0:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55CC694898AC024276BD064EFD77BD52DCDB76D
        Validity
            Not Before: Mar 29 19:35:10 2022 GMT
            Not After : Mar 28 19:40:10 2023 GMT
        Subject: CN=CAB50015A5E76F823983AEAE8854C772B9317748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:3c:c4:66:7e:7d:41:2a:e4:dc:15:aa:0d:
                    7a:df:d3:79:28:db:0a:cd:ab:59:ab:97:a7:2c:7c:
                    e7:64:9d:d5:7a:76:cc:73:02:ef:70:f7:8e:ea:89:
                    5b:c4:a5:fa:35:d8:5e:e2:2c:32:3f:21:7c:3f:43:
                    68:67:a3:2f:88:e4:c8:18:10:d2:35:e8:68:52:3f:
                    8f:ed:6e:55:31:79:d0:6e:47:b9:20:7e:a5:f7:fa:
                    8c:12:b2:c6:8b:87:1a:59:d9:11:dc:06:a1:2c:59:
                    17:62:a2:96:a5:f2:10:9d:6b:bc:ef:c2:85:db:93:
                    53:38:6c:e9:42:5a:87:39:ea:68:0f:57:5d:51:aa:
                    da:4e:3c:51:e1:7d:e2:e5:02:e6:c3:cd:b5:72:73:
                    ba:4e:79:54:4d:4c:87:24:c0:d3:79:43:db:e3:26:
                    8b:82:41:e7:82:af:04:c1:84:dc:b8:0f:57:8f:4e:
                    f1:d8:b0:3e:12:04:f2:d7:51:1e:94:85:3d:af:7f:
                    36:6c:d1:c4:6d:9b:e9:c3:aa:0d:26:f9:fb:9c:80:
                    ae:07:48:f6:7c:75:02:a4:30:d0:69:f1:98:19:74:
                    8e:21:f8:d0:1b:0a:02:bc:41:61:1e:ba:92:63:d0:
                    73:bc:3c:1e:48:e5:37:3b:3b:49:bf:0f:b9:57:75:
                    ee:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B5:00:15:A5:E7:6F:82:39:83:AE:AE:88:54:C7:72:B9:31:77:48
            X509v3 Authority Key Identifier:
                keyid:D5:5C:C6:94:89:8A:C0:24:27:6B:D0:64:EF:D7:7B:D5:2D:CD:B7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/3139302e3138352e39362e302f32342d3234203d3e20323731333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:de:97:aa:a2:a6:a4:0e:20:a0:a6:88:5e:13:67:d8:cb:ae:
         3e:78:3c:34:ea:32:02:78:df:9a:f7:de:52:94:36:6d:63:fa:
         66:6d:ba:14:72:52:2f:70:2e:81:f3:65:1f:35:a6:98:37:2f:
         bb:0a:40:60:b6:e4:b8:d1:9d:e2:98:a8:8d:5f:54:58:c3:9a:
         9a:8a:50:3b:15:58:fe:dc:54:e5:37:77:07:12:1e:29:07:d2:
         94:14:cb:f8:a9:ea:b9:15:cb:37:c4:8d:1c:4f:00:f2:7f:64:
         97:7b:98:5a:ad:be:a7:00:74:c6:a5:de:f9:69:7f:a0:15:42:
         89:84:3a:ea:16:bc:ed:6a:f4:ff:c3:96:0a:54:7d:2e:b9:03:
         2b:19:b7:9b:f8:a9:98:1a:73:bb:44:44:77:f7:a1:b6:7c:76:
         f5:26:f0:d0:8f:e2:4e:7a:76:a0:d6:a2:cb:b4:57:4d:ba:f5:
         e1:1a:3c:6c:98:26:b8:87:90:2c:ed:9e:bd:f5:8c:d5:aa:93:
         3f:8b:9c:80:22:c2:92:f7:15:08:79:df:2f:41:55:f5:e4:f3:
         d2:3a:13:b3:af:a2:d1:75:41:c4:02:87:93:26:cf:89:3a:e9:
         24:a3:de:80:23:37:54:b8:94:76:13:90:7d:17:f6:8b:3e:b7:
         c4:b5:ae:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org