Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/3139302e31352e3132372e302f32342d3234203d3e203631353638.roa
File:                     3139302e31352e3132372e302f32342d3234203d3e203631353638.roa (raw, json)
Hash identifier:          UWycx6a6u1gr9/E5tegulBvmZnMz5A2fbI1Pph0AD0E=
Subject key identifier:   4A:03:D4:11:18:2A:89:18:8D:6C:95:56:04:B9:23:1C:2A:38:12:0B
Certificate issuer:       /CN=B410EA8A900BE8EFBF0B269413585DCC9799F312
Certificate serial:       639682BE1E085E998BE75CF976636C37F83D45CA
Authority key identifier: B4:10:EA:8A:90:0B:E8:EF:BF:0B:26:94:13:58:5D:CC:97:99:F3:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/3139302e31352e3132372e302f32342d3234203d3e203631353638.roa
Signing time:             Wed 04 Jan 2023 16:41:03 +0000
ROA not before:           Wed 04 Jan 2023 16:36:03 +0000
ROA not after:            Wed 03 Jan 2024 16:41:03 +0000
asID:                     61568
IP address blocks:        190.15.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:96:82:be:1e:08:5e:99:8b:e7:5c:f9:76:63:6c:37:f8:3d:45:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B410EA8A900BE8EFBF0B269413585DCC9799F312
        Validity
            Not Before: Jan  4 16:36:03 2023 GMT
            Not After : Jan  3 16:41:03 2024 GMT
        Subject: CN=4A03D411182A89188D6C955604B9231C2A38120B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:99:94:18:1b:33:97:9b:28:14:e3:c5:63:46:
                    b8:07:d9:04:f7:b5:c7:6c:9c:7e:a9:20:e6:85:e2:
                    b8:ed:4a:e7:97:f8:b2:a2:6a:7d:8d:38:d7:19:80:
                    0b:41:73:a0:74:f0:66:a6:6a:5b:cc:70:c9:1e:e7:
                    52:09:74:c7:74:e0:cf:2b:74:69:6d:6a:a7:d3:c2:
                    fd:61:b1:b0:4d:0a:99:9b:14:94:ec:24:85:1a:56:
                    6f:17:64:15:75:a9:b1:80:c8:49:2e:44:a1:c1:61:
                    df:0a:13:74:f0:23:85:a6:e8:61:f9:df:13:69:54:
                    ff:fa:a1:3f:5c:d5:02:c8:ac:75:ad:2f:f1:0d:51:
                    9d:d4:e3:21:9d:c4:0d:1c:55:c8:4a:71:bb:4c:dc:
                    b1:d7:1d:43:64:ea:31:1b:e6:9c:b5:13:81:3f:8f:
                    0e:84:b4:18:05:2c:e6:da:98:26:55:53:b5:18:9a:
                    ef:2c:c1:d7:61:6e:5c:4c:94:f4:70:b6:e9:6e:11:
                    a0:7e:19:7a:5e:8d:20:67:71:7c:69:59:b4:f5:21:
                    10:0c:60:e1:da:cc:bb:6a:bb:e2:ab:18:38:83:58:
                    27:78:6f:06:ba:35:34:e5:84:44:a8:53:58:5e:bf:
                    f9:cc:13:2c:74:bd:48:9a:78:75:34:87:cd:63:75:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:03:D4:11:18:2A:89:18:8D:6C:95:56:04:B9:23:1C:2A:38:12:0B
            X509v3 Authority Key Identifier:
                keyid:B4:10:EA:8A:90:0B:E8:EF:BF:0B:26:94:13:58:5D:CC:97:99:F3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/3139302e31352e3132372e302f32342d3234203d3e203631353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:11:48:e6:68:37:97:46:07:a0:a2:68:82:74:c4:23:ed:1c:
         34:5a:d5:da:72:a0:b6:cc:b0:09:9e:95:94:a3:05:9f:f4:67:
         e4:2d:26:61:29:bd:a3:42:9f:bf:77:ac:4f:37:ba:d6:0f:d0:
         c3:f6:1a:71:1b:33:64:b8:38:d7:c8:9c:a1:3d:0c:1a:2d:83:
         f4:3b:a5:e0:5b:51:a8:49:4d:3a:59:e5:68:51:72:a3:c0:b3:
         c7:38:f4:6b:6a:e9:94:36:2f:69:98:e4:19:3b:03:2b:e7:4c:
         91:5b:b4:1d:b7:0b:28:59:fd:53:15:24:03:9c:7e:91:9a:ad:
         0d:f3:a5:89:92:4d:15:f1:4e:29:b7:3f:06:c4:57:aa:8f:64:
         ec:21:54:66:eb:7d:a9:fd:e5:e6:6b:f1:2f:7d:1b:dc:40:23:
         1d:ed:75:62:b6:60:bd:58:56:ef:35:b2:f8:74:76:ec:a5:32:
         06:e1:11:2a:d9:cd:55:ba:29:ae:7b:8a:27:1a:1a:c3:22:9d:
         37:4d:53:75:40:13:64:40:d4:a2:b5:12:d3:0b:2c:c8:c9:d1:
         86:83:6f:81:e0:85:e9:29:60:e3:41:81:21:bd:b9:49:b3:97:
         5f:e5:7a:5b:f7:60:fb:ad:55:ab:82:d5:81:bc:2f:ab:03:40:
         57:c4:34:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org