Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/3139302e38392e3139362e302f32332d3233203d3e20323730343039.roa
File:                     3139302e38392e3139362e302f32332d3233203d3e20323730343039.roa (raw, json)
Hash identifier:          080fwog9x7ngFJ/ZZe/21DsPYqg+rqjQ1wfcw9/9VG8=
Subject key identifier:   89:90:8C:EA:3A:64:1A:ED:C7:4E:B8:89:CA:37:92:C8:54:E3:A0:76
Certificate issuer:       /CN=925D7915C118C67C435168D22CBFB7B5EE13F53D
Certificate serial:       75E7B4CE03FAE3ADD7F23FE08C7EAC3C5C2F2693
Authority key identifier: 92:5D:79:15:C1:18:C6:7C:43:51:68:D2:2C:BF:B7:B5:EE:13:F5:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/925D7915C118C67C435168D22CBFB7B5EE13F53D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/3139302e38392e3139362e302f32332d3233203d3e20323730343039.roa
Signing time:             Mon 27 Mar 2023 02:44:29 +0000
ROA not before:           Mon 27 Mar 2023 02:39:29 +0000
ROA not after:            Mon 25 Mar 2024 02:44:29 +0000
asID:                     270409
IP address blocks:        190.89.196.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e7:b4:ce:03:fa:e3:ad:d7:f2:3f:e0:8c:7e:ac:3c:5c:2f:26:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925D7915C118C67C435168D22CBFB7B5EE13F53D
        Validity
            Not Before: Mar 27 02:39:29 2023 GMT
            Not After : Mar 25 02:44:29 2024 GMT
        Subject: CN=89908CEA3A641AEDC74EB889CA3792C854E3A076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:53:f2:65:e6:ec:8a:b8:1b:f9:39:71:51:
                    9b:58:86:16:9b:ce:9a:3b:6c:19:41:a4:50:2a:87:
                    35:8e:e0:b8:f1:43:73:45:95:03:ce:05:9c:29:11:
                    d8:a2:d2:80:e7:22:03:5b:8f:cb:55:1f:20:8b:48:
                    ce:71:93:38:e2:13:65:a0:14:20:c4:0b:5e:30:20:
                    30:13:1e:42:29:bc:d8:71:c9:78:7c:c9:c7:a9:1c:
                    0c:78:71:77:ab:1d:55:e9:f2:58:a4:4c:5f:37:cc:
                    66:01:cd:ef:4e:d3:68:3a:63:8a:44:4b:2d:79:4f:
                    19:ff:98:09:72:56:ad:c2:e8:67:ba:de:85:e2:9e:
                    fb:c8:fa:23:fc:01:47:d0:0e:6b:a6:f4:32:f9:ca:
                    54:01:36:09:ee:39:09:df:8f:77:a6:b5:af:1a:bc:
                    02:6f:ce:4b:8e:3a:89:b9:e0:cd:4b:a9:c0:60:29:
                    0b:77:32:6e:e1:ce:ac:53:26:29:b9:fa:34:3b:76:
                    a6:0e:0c:26:9a:f9:6a:2c:bc:cb:75:aa:0a:29:85:
                    67:30:04:51:49:7a:98:31:92:02:cf:6f:1d:cb:6b:
                    90:92:f6:fc:17:d0:6a:e5:f0:a3:31:81:f7:ac:72:
                    58:bf:a2:78:a8:a0:b9:78:3d:da:2f:38:16:1d:41:
                    5b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:90:8C:EA:3A:64:1A:ED:C7:4E:B8:89:CA:37:92:C8:54:E3:A0:76
            X509v3 Authority Key Identifier:
                keyid:92:5D:79:15:C1:18:C6:7C:43:51:68:D2:2C:BF:B7:B5:EE:13:F5:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/925D7915C118C67C435168D22CBFB7B5EE13F53D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/925D7915C118C67C435168D22CBFB7B5EE13F53D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/3139302e38392e3139362e302f32332d3233203d3e20323730343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:f9:32:32:76:77:09:9d:bd:3e:4c:cf:8b:dd:c3:64:f2:f6:
         87:14:43:0f:30:4d:6b:dd:0a:eb:da:31:69:1c:8b:85:33:41:
         65:e8:f2:06:f8:94:ed:8b:06:92:5d:85:6b:99:3f:2a:45:1c:
         bc:44:76:6e:e5:ab:36:22:1d:7f:43:be:7c:20:59:69:42:d7:
         a8:f9:b3:58:d6:c7:d4:bf:b4:41:64:09:a8:1f:ef:46:55:92:
         d1:de:e1:b9:a0:38:fc:49:36:87:f4:3a:fb:35:ac:8b:96:15:
         f3:e2:24:f9:94:d6:6d:92:c7:92:c8:86:06:3d:e4:11:3d:c0:
         b1:1f:43:ea:68:82:3a:5b:1b:80:90:68:fa:b6:c2:0f:68:07:
         57:d2:91:b7:b1:d9:98:ea:44:79:fa:91:a3:c5:43:e5:bd:65:
         2e:08:9c:8d:1f:dd:b7:c7:06:09:c3:5b:d8:11:9a:26:51:d3:
         8b:b0:39:e0:dc:9a:0a:94:0c:d6:1c:f7:3e:9a:d9:56:a8:f5:
         3f:21:a7:08:04:06:8f:14:0c:e8:be:5a:eb:cc:18:fe:9a:7e:
         66:fd:d5:34:cb:c2:7c:93:a4:56:2f:34:77:66:d1:0b:ab:a9:
         4e:76:76:d5:82:8b:cc:ef:5c:a8:2e:1c:f4:1d:97:df:14:b6:
         3e:84:2c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org