Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/3139302e3132332e3139362e302f32322d3234203d3e20323636323034.roa
File:                     3139302e3132332e3139362e302f32322d3234203d3e20323636323034.roa (raw, json)
Hash identifier:          HLCFfvhVc57t90g/mssw/azIgWNnqgDvEzAHN8X9ODo=
Subject key identifier:   41:40:A3:6F:36:E4:C4:6A:83:0C:DC:20:48:E7:DF:EE:94:E7:33:56
Certificate issuer:       /CN=8890A0FB92202F4913D5A8A72AFD9370D7C0FF9D
Certificate serial:       7CD4F6C4C4CE5FFCBDB587877B5CC9CD53B8054E
Authority key identifier: 88:90:A0:FB:92:20:2F:49:13:D5:A8:A7:2A:FD:93:70:D7:C0:FF:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8890A0FB92202F4913D5A8A72AFD9370D7C0FF9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/3139302e3132332e3139362e302f32322d3234203d3e20323636323034.roa
Signing time:             Tue 22 Aug 2023 15:25:44 +0000
ROA not before:           Tue 22 Aug 2023 15:20:44 +0000
ROA not after:            Tue 20 Aug 2024 15:25:44 +0000
asID:                     266204
IP address blocks:        190.123.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d4:f6:c4:c4:ce:5f:fc:bd:b5:87:87:7b:5c:c9:cd:53:b8:05:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8890A0FB92202F4913D5A8A72AFD9370D7C0FF9D
        Validity
            Not Before: Aug 22 15:20:44 2023 GMT
            Not After : Aug 20 15:25:44 2024 GMT
        Subject: CN=4140A36F36E4C46A830CDC2048E7DFEE94E73356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4c:c9:3f:b3:00:03:1d:9d:b0:d1:ba:22:89:
                    36:7d:4c:8f:cb:ed:b0:38:7c:48:28:6d:65:d6:58:
                    7c:54:d6:1e:5c:93:96:5d:2a:b8:63:66:46:4b:a9:
                    42:c7:71:8d:cf:97:4b:6e:b8:66:7b:9c:c7:f8:55:
                    7d:f9:29:c1:21:8a:49:4d:a3:04:21:b5:95:f4:25:
                    e4:49:31:84:a2:bb:b0:97:79:e2:13:db:5e:d9:6a:
                    dc:76:cf:98:d5:59:0a:0a:ef:0d:33:e5:1a:ba:25:
                    30:89:e1:4f:f6:5e:0f:99:15:5d:31:81:5f:09:ed:
                    5c:11:10:72:87:19:f3:84:da:5a:2f:08:2c:ad:c6:
                    bc:b6:6a:97:e1:08:37:8c:ae:65:38:6c:28:45:d6:
                    bf:b0:dd:55:83:f2:f4:f9:d8:4d:39:53:ba:d8:ce:
                    74:98:fb:d9:7c:7e:8b:bb:1d:13:0e:22:91:5e:7e:
                    d8:5d:8f:89:50:82:1f:e1:2b:39:28:65:16:c0:dd:
                    97:61:c2:7f:3c:f9:5b:6b:df:a9:e1:e8:7a:50:f8:
                    ca:00:69:bf:02:3a:43:d0:f9:f3:f5:af:ae:74:a7:
                    dc:0c:fc:80:b3:c8:71:c4:cb:2a:29:a1:01:f6:b8:
                    92:38:e7:27:40:87:5b:41:5c:32:c4:2d:0e:29:f0:
                    e4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:40:A3:6F:36:E4:C4:6A:83:0C:DC:20:48:E7:DF:EE:94:E7:33:56
            X509v3 Authority Key Identifier:
                keyid:88:90:A0:FB:92:20:2F:49:13:D5:A8:A7:2A:FD:93:70:D7:C0:FF:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/8890A0FB92202F4913D5A8A72AFD9370D7C0FF9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8890A0FB92202F4913D5A8A72AFD9370D7C0FF9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/3139302e3132332e3139362e302f32322d3234203d3e20323636323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:37:5a:b4:15:e9:8e:c9:14:b7:49:98:0a:24:25:2d:cb:d5:
         27:ef:31:65:e0:a4:d1:ef:6d:28:74:3d:1f:55:84:a6:7d:56:
         9c:15:52:d4:28:f3:7e:45:2b:f4:5d:be:2e:39:50:09:f9:ab:
         06:7a:43:0d:a3:ce:8e:16:67:aa:b0:d6:50:5f:41:4e:e3:35:
         ef:4b:b4:ae:8d:30:a2:a8:ae:06:11:46:01:16:38:12:d3:b4:
         77:cb:3b:9f:b6:fb:d3:08:5b:bf:80:ec:5f:02:74:46:bb:2e:
         56:33:b4:0c:f5:5a:67:8f:ab:a0:6d:09:c9:be:6d:db:61:ba:
         6e:ec:ce:7c:1d:ce:06:94:af:7b:a3:fd:d4:1e:d5:bd:59:08:
         45:ca:14:5d:3a:56:90:c3:6f:3e:2c:c5:59:23:77:1a:3e:1d:
         51:74:3d:75:79:36:55:cd:c7:c4:62:e1:31:c2:e2:e5:7a:24:
         ac:e9:a5:64:71:38:fa:af:06:06:73:58:d0:dc:58:5b:c2:a2:
         06:e7:4f:21:48:51:56:0b:16:47:9a:43:8b:5e:ba:01:05:56:
         ee:d9:2e:db:d0:bf:96:7b:3e:ec:0d:5c:4a:a9:17:6c:2f:eb:
         3b:5e:b7:fe:84:04:df:fc:21:81:97:96:50:31:f4:77:c1:85:
         19:a4:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org