Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/1/3139302e3131312e3134302e302f32322d3234203d3e20323730343236.roa
File:                     3139302e3131312e3134302e302f32322d3234203d3e20323730343236.roa (raw, json)
Hash identifier:          O8WQdNX4IWQTuBH1/oGcXm42ASOEVEZhS1dZ1wSznTk=
Subject key identifier:   79:22:60:3B:E6:86:1B:73:81:B7:E9:72:79:13:E0:BE:3C:B1:62:E2
Certificate issuer:       /CN=7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA
Certificate serial:       32E896EB7968B33404119E659F015EF912E787
Authority key identifier: 7A:38:E6:F2:46:9C:B0:B2:FC:49:E5:85:F8:55:B6:4C:41:A4:C6:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/1/3139302e3131312e3134302e302f32322d3234203d3e20323730343236.roa
Signing time:             Thu 04 Apr 2024 04:07:34 +0000
ROA not before:           Thu 04 Apr 2024 04:02:34 +0000
ROA not after:            Thu 03 Apr 2025 04:07:34 +0000
asID:                     270426
IP address blocks:        190.111.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e8:96:eb:79:68:b3:34:04:11:9e:65:9f:01:5e:f9:12:e7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA
        Validity
            Not Before: Apr  4 04:02:34 2024 GMT
            Not After : Apr  3 04:07:34 2025 GMT
        Subject: CN=7922603BE6861B7381B7E9727913E0BE3CB162E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a9:02:eb:61:ac:2e:46:a2:f9:61:24:d4:6c:
                    00:0b:e4:c9:b5:27:c6:17:e8:2e:e6:45:e0:aa:c8:
                    a0:0f:02:ba:24:0a:28:8e:7e:76:25:d2:41:c9:22:
                    6e:7b:7f:87:f9:5b:77:58:16:92:d5:75:f5:d0:7f:
                    bb:b4:29:e9:99:e4:e2:0e:8a:cc:f2:fa:3b:36:ee:
                    19:88:8b:12:9d:9d:0f:46:26:6d:fb:0c:6e:9a:38:
                    98:2a:77:61:ed:8c:1d:ed:77:06:4e:43:8f:5c:de:
                    7f:f8:ee:6d:45:ba:51:3d:c3:e0:51:34:23:be:6a:
                    cf:12:b3:13:b0:9e:09:26:c2:4c:25:39:4a:c6:6e:
                    00:e5:10:de:e4:9d:de:3c:88:33:0e:93:5e:9d:19:
                    1a:7b:52:23:fe:15:01:76:0c:47:04:90:85:3f:4e:
                    30:10:8d:95:7f:51:02:4e:51:fc:69:78:0e:60:fc:
                    e1:85:96:f0:2a:7a:33:c9:61:bc:30:04:c2:f3:58:
                    5d:30:03:cd:27:5c:b2:92:88:37:f5:3e:cc:f9:fa:
                    c6:34:62:44:b1:bf:bc:2a:66:e3:c1:b4:ed:9b:66:
                    c1:ce:09:2f:01:e4:b1:d2:07:4f:29:f3:66:ff:2d:
                    16:28:34:39:fb:70:9a:ab:fa:4c:be:bc:9b:73:63:
                    13:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:22:60:3B:E6:86:1B:73:81:B7:E9:72:79:13:E0:BE:3C:B1:62:E2
            X509v3 Authority Key Identifier:
                keyid:7A:38:E6:F2:46:9C:B0:B2:FC:49:E5:85:F8:55:B6:4C:41:A4:C6:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/1/7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/1/3139302e3131312e3134302e302f32322d3234203d3e20323730343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:9c:d5:00:0b:04:55:55:04:10:2e:2d:fe:74:21:0f:85:4d:
         cb:17:20:95:7b:52:88:fe:af:be:20:75:90:20:e2:84:ab:0c:
         47:d0:e7:bc:66:a5:7d:43:4b:a9:bc:66:66:b3:2f:8c:8d:48:
         d6:17:cd:0b:d3:92:82:3a:60:22:b7:a1:84:28:68:de:da:94:
         d0:66:cd:e7:ef:9c:3d:e5:e3:54:4c:a5:65:90:80:d3:4a:87:
         07:64:16:0b:a8:70:6c:98:83:ad:0f:6d:fe:b0:6f:2c:f6:af:
         ad:b3:2d:2e:8e:d2:bf:04:be:2b:de:f8:d1:df:8b:25:12:c3:
         c6:27:e0:0a:64:bf:b6:b5:1b:cf:ed:f4:d6:0c:9e:59:4b:68:
         97:76:71:73:f8:d3:b4:b0:7d:2e:2b:a8:8f:bb:c1:2b:fa:29:
         96:1c:22:d5:5a:03:1f:f6:1c:a0:e0:b9:e2:53:41:2a:f2:55:
         41:6e:45:e3:d5:c9:ef:d9:0c:7d:bf:39:4c:bc:70:e7:b8:1a:
         3c:c6:16:81:64:68:a4:c2:e1:b4:23:df:14:7e:e6:6d:24:f7:
         32:c8:e1:66:ac:b3:d2:bc:7a:fb:76:d7:89:6b:9b:fb:4a:22:
         6c:bb:3a:1b:20:6d:7c:98:3b:4d:6d:e3:2c:0f:b1:c0:87:e8:
         ca:c6:8f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org