Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/3139302e38392e36382e302f32322d3234203d3e203136393231.roa
File:                     3139302e38392e36382e302f32322d3234203d3e203136393231.roa (raw, json)
Hash identifier:          4GpFzhKyZyhfsgV/8O9jDRxTrM2PuJMoafsJIcB7BhM=
Subject key identifier:   8C:1B:DE:EA:21:5F:CF:89:E2:3B:0A:70:FF:C1:52:4A:90:B4:39:B5
Certificate issuer:       /CN=387CCE707D4ABBB8D7C22445560A235FC31B612A
Certificate serial:       4E4760DBB13CF5BB403CCF7097835E23219C0FEF
Authority key identifier: 38:7C:CE:70:7D:4A:BB:B8:D7:C2:24:45:56:0A:23:5F:C3:1B:61:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387CCE707D4ABBB8D7C22445560A235FC31B612A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/3139302e38392e36382e302f32322d3234203d3e203136393231.roa
Signing time:             Wed 17 May 2023 13:30:11 +0000
ROA not before:           Wed 17 May 2023 13:25:11 +0000
ROA not after:            Wed 15 May 2024 13:30:11 +0000
asID:                     16921
IP address blocks:        190.89.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:47:60:db:b1:3c:f5:bb:40:3c:cf:70:97:83:5e:23:21:9c:0f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387CCE707D4ABBB8D7C22445560A235FC31B612A
        Validity
            Not Before: May 17 13:25:11 2023 GMT
            Not After : May 15 13:30:11 2024 GMT
        Subject: CN=8C1BDEEA215FCF89E23B0A70FFC1524A90B439B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a4:ca:4c:40:fe:45:dd:89:87:39:94:63:bb:
                    93:63:9e:59:7a:60:00:3b:54:a1:9b:75:f8:1d:88:
                    6c:f4:7e:e0:d0:cc:fc:e7:f5:c6:1b:13:9b:8d:79:
                    8a:aa:9a:e9:6c:6d:e6:bb:94:c1:77:da:78:3b:6a:
                    f9:81:c0:29:67:93:3b:af:8b:17:bb:14:47:dc:f8:
                    8c:9e:62:3f:db:ba:3c:41:94:3d:bd:66:0a:86:0b:
                    75:dc:06:11:34:11:6c:d7:19:bd:23:02:fe:5b:16:
                    65:cd:70:d0:a6:c4:bf:68:0e:46:c7:40:28:6b:d8:
                    b9:62:33:c9:4a:24:48:5d:b5:11:fc:55:58:70:bf:
                    1c:df:a4:2e:23:81:ed:6c:9a:f9:07:20:1c:59:be:
                    79:4b:0f:27:e9:1b:86:83:8f:a8:50:e8:5d:51:d6:
                    89:09:47:ab:5f:30:5e:9c:f0:61:59:5d:65:e7:22:
                    f0:c6:cd:8d:6f:b1:50:c5:56:b6:fa:b6:85:e3:d1:
                    5d:6c:7d:96:56:03:10:1e:b0:4c:62:9d:0d:c7:6b:
                    9f:02:98:f4:08:4f:63:04:f3:de:36:a5:f1:6b:fa:
                    47:6a:cf:d3:82:17:e8:52:27:1c:34:30:7f:c3:6d:
                    8a:78:c6:d9:e6:e9:34:b6:7c:49:04:c6:07:f3:35:
                    62:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1B:DE:EA:21:5F:CF:89:E2:3B:0A:70:FF:C1:52:4A:90:B4:39:B5
            X509v3 Authority Key Identifier:
                keyid:38:7C:CE:70:7D:4A:BB:B8:D7:C2:24:45:56:0A:23:5F:C3:1B:61:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/387CCE707D4ABBB8D7C22445560A235FC31B612A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387CCE707D4ABBB8D7C22445560A235FC31B612A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/3139302e38392e36382e302f32322d3234203d3e203136393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:9e:3a:a9:c7:ad:5e:20:5d:67:67:c0:b3:1b:22:6c:97:fd:
         da:2a:af:f6:4a:73:03:97:6f:a2:48:03:85:72:41:8c:0c:80:
         f0:c3:4b:23:07:f0:eb:19:3c:07:7e:1d:56:6b:e0:fd:47:21:
         f4:51:b0:29:6e:be:f0:38:59:66:7e:e8:9f:02:e3:d2:81:56:
         0d:09:b7:0f:ac:48:93:21:56:fe:e4:69:eb:26:ef:03:05:98:
         07:f1:cf:29:51:a0:f6:42:b2:d7:8a:45:f1:be:4e:8f:8e:20:
         51:7b:ec:44:78:14:5e:4b:68:cb:bf:62:09:fa:da:aa:34:55:
         0b:72:05:22:14:6a:b0:c6:85:2f:ff:9a:62:c5:7b:c2:97:83:
         0c:7a:cb:8c:0e:37:cd:fd:c5:45:d7:4e:ee:a1:d9:fa:03:17:
         fa:4d:6e:22:12:71:04:1b:fa:86:88:e1:07:72:57:92:e1:89:
         18:75:46:fa:a8:1b:7d:2f:c5:99:41:79:f1:3e:f3:35:2c:58:
         ec:54:a1:09:c8:80:76:db:55:a1:22:02:71:2b:f3:54:5c:d3:
         4e:d0:9b:28:83:3a:65:f7:d0:34:6a:89:b2:b7:93:3b:44:eb:
         4f:2b:c3:78:6b:ef:60:9a:6d:6c:67:78:37:f6:21:80:39:b5:
         9f:69:80:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org