Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/0/3139302e38392e3233332e302f32342d3234203d3e20323730333937.roa
File:                     3139302e38392e3233332e302f32342d3234203d3e20323730333937.roa (raw, json)
Hash identifier:          J6lZ6kCHI9nmaw4XDEJK72NINpwZd5CuM6O7X/AQsps=
Subject key identifier:   92:AF:3A:BE:55:5E:C4:20:53:F9:7A:3E:54:A7:39:56:5D:A3:73:AB
Certificate issuer:       /CN=DB9A811B04C94AAC6285BBAEA1CBC66DA04E8104
Certificate serial:       52C456D76146CCC968B85106A20BEC794043EDDC
Authority key identifier: DB:9A:81:1B:04:C9:4A:AC:62:85:BB:AE:A1:CB:C6:6D:A0:4E:81:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB9A811B04C94AAC6285BBAEA1CBC66DA04E8104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/0/3139302e38392e3233332e302f32342d3234203d3e20323730333937.roa
Signing time:             Thu 14 Mar 2024 23:44:46 +0000
ROA not before:           Thu 14 Mar 2024 23:39:46 +0000
ROA not after:            Thu 13 Mar 2025 23:44:46 +0000
asID:                     270397
IP address blocks:        190.89.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c4:56:d7:61:46:cc:c9:68:b8:51:06:a2:0b:ec:79:40:43:ed:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9A811B04C94AAC6285BBAEA1CBC66DA04E8104
        Validity
            Not Before: Mar 14 23:39:46 2024 GMT
            Not After : Mar 13 23:44:46 2025 GMT
        Subject: CN=92AF3ABE555EC42053F97A3E54A739565DA373AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5f:88:9e:38:d4:97:85:f8:41:a5:c2:5c:9b:
                    20:83:98:91:6d:91:c0:73:ae:1f:5b:d4:99:e7:2d:
                    2c:f6:f4:00:fe:4b:b1:72:fa:2a:79:37:87:cf:ba:
                    70:64:17:a2:52:d1:2c:5b:0c:2c:28:3c:46:36:6f:
                    1e:4a:9a:17:f3:3a:54:8d:b4:c3:ed:e1:9e:08:80:
                    d7:75:15:de:7a:ac:f4:74:b9:28:4e:50:cc:9e:d4:
                    ee:08:55:f9:e9:4e:b1:fc:69:ba:9a:b5:3c:15:79:
                    69:a1:1a:1e:86:59:28:f2:11:0b:cd:76:30:de:27:
                    74:37:2e:1b:a8:93:57:18:40:66:01:0e:59:8a:b5:
                    ce:a6:75:6c:84:2e:5f:7a:20:f2:78:15:5d:1c:9a:
                    48:ff:40:5b:b6:bf:e2:1a:33:01:54:43:45:de:a1:
                    44:d1:43:d1:1d:68:eb:4e:29:32:46:7f:3e:a5:ac:
                    03:9b:c4:d2:d2:54:7a:85:60:d1:30:b0:f4:9d:64:
                    20:5a:08:72:2f:d7:c2:27:0f:52:33:fe:eb:ef:42:
                    89:0d:fc:b6:4f:3d:3f:64:1e:2d:e6:51:20:c1:33:
                    d2:cf:e0:6d:53:f8:6f:ec:2e:82:cd:ac:47:a1:ad:
                    42:47:f3:c4:c7:18:7b:b4:32:d3:de:28:eb:33:b8:
                    cf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AF:3A:BE:55:5E:C4:20:53:F9:7A:3E:54:A7:39:56:5D:A3:73:AB
            X509v3 Authority Key Identifier:
                keyid:DB:9A:81:1B:04:C9:4A:AC:62:85:BB:AE:A1:CB:C6:6D:A0:4E:81:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/0/DB9A811B04C94AAC6285BBAEA1CBC66DA04E8104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB9A811B04C94AAC6285BBAEA1CBC66DA04E8104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/0/3139302e38392e3233332e302f32342d3234203d3e20323730333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:78:c5:36:8a:b3:2d:81:9d:12:fc:bf:b0:45:a9:27:a2:48:
         fb:90:fa:8f:e1:ed:04:d7:2b:c1:42:f0:3a:eb:33:bd:89:64:
         b1:ef:74:ac:28:1f:c8:76:c9:f7:1d:7e:cf:2e:80:c8:70:6d:
         e0:ff:e4:4a:e7:2b:12:47:e7:37:f8:5e:cf:ff:9f:a8:28:40:
         11:94:96:68:ed:6f:ec:19:e0:57:90:11:d5:f7:d8:8d:89:cf:
         cf:bb:37:26:cf:22:e2:54:76:11:73:f4:22:10:87:e1:f7:7d:
         1b:e3:14:a7:ef:00:e1:1c:db:93:c7:43:e2:77:91:b2:57:a3:
         8c:42:bd:f3:a0:06:11:10:43:fe:c2:af:33:ee:44:5b:cc:a0:
         e5:df:0d:fe:72:a2:0d:a9:c0:f4:5e:aa:77:d5:2f:1b:e5:30:
         0a:dc:98:f9:22:d8:df:cc:d8:e0:a2:1a:a6:96:fe:27:a5:4d:
         76:c0:ae:97:21:7f:58:a8:9a:d8:32:ab:99:24:37:8f:0f:56:
         0f:42:59:b4:e6:51:3d:18:0c:15:56:0c:9d:47:85:4c:b6:02:
         ba:73:94:18:03:39:31:84:89:b3:e5:70:31:43:8b:08:9f:1f:
         a6:8e:c1:69:d8:7a:d3:21:c3:16:b4:01:c9:87:23:12:aa:59:
         a2:f8:b7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org