Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/3139302e31352e39362e302f31392d3332203d3e203631353638.roa
File:                     3139302e31352e39362e302f31392d3332203d3e203631353638.roa (raw, json)
Hash identifier:          r/vzZRXxhDVx+LrGKgoVLW4gvXg9deEbzWA89neR9MQ=
Subject key identifier:   17:DE:58:4F:37:7A:F7:57:B5:AF:1D:38:99:DD:79:20:3F:38:D0:F4
Certificate issuer:       /CN=B410EA8A900BE8EFBF0B269413585DCC9799F312
Certificate serial:       22A9AA1DC07649046F6F068BC7EC18C8A9B92B44
Authority key identifier: B4:10:EA:8A:90:0B:E8:EF:BF:0B:26:94:13:58:5D:CC:97:99:F3:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/3139302e31352e39362e302f31392d3332203d3e203631353638.roa
Signing time:             Fri 06 Jan 2023 12:51:13 +0000
ROA not before:           Fri 06 Jan 2023 12:46:13 +0000
ROA not after:            Fri 05 Jan 2024 12:51:13 +0000
asID:                     61568
IP address blocks:        190.15.96.0/19 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a9:aa:1d:c0:76:49:04:6f:6f:06:8b:c7:ec:18:c8:a9:b9:2b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B410EA8A900BE8EFBF0B269413585DCC9799F312
        Validity
            Not Before: Jan  6 12:46:13 2023 GMT
            Not After : Jan  5 12:51:13 2024 GMT
        Subject: CN=17DE584F377AF757B5AF1D3899DD79203F38D0F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b4:32:91:db:0b:c4:13:54:33:7c:0f:df:60:
                    13:29:ad:1e:b8:f8:7e:b2:d7:94:ac:e0:7f:ef:71:
                    68:ba:1c:02:a9:bd:68:a5:96:49:ed:60:cc:20:5d:
                    a5:3a:8f:29:d5:d3:05:0a:06:92:cb:fe:5a:bc:77:
                    47:68:5e:a0:1f:52:3c:63:25:b2:45:2c:14:a1:78:
                    ad:c7:4f:4f:97:8a:74:f1:d8:27:6b:cb:98:90:32:
                    e8:7b:1c:06:a1:e5:e9:9c:f4:40:f0:a3:0b:cb:d1:
                    ca:73:17:a3:27:8f:d0:5b:dc:48:f1:cb:9d:c4:a0:
                    52:7b:7c:a6:31:6e:91:b6:c2:55:42:c3:c4:12:3b:
                    ac:a3:49:c8:4f:5e:3d:fa:57:cd:0e:51:79:f9:12:
                    2c:c8:e5:1f:85:f9:78:1e:c2:59:67:bb:15:25:91:
                    63:94:82:3a:12:b0:d2:cc:c7:39:54:41:58:d8:28:
                    a4:57:a9:ee:c3:08:31:f1:81:dc:fe:2c:1d:31:83:
                    49:52:1d:02:98:3d:aa:ca:4d:ee:96:57:0b:46:f3:
                    16:26:86:14:2e:7f:76:b2:44:36:45:aa:7c:46:e3:
                    3a:e1:b9:d8:d7:fe:3f:4d:17:33:b3:62:dc:93:97:
                    e6:9c:82:ab:11:bb:3d:50:8c:0f:19:30:f6:b0:aa:
                    b5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DE:58:4F:37:7A:F7:57:B5:AF:1D:38:99:DD:79:20:3F:38:D0:F4
            X509v3 Authority Key Identifier:
                keyid:B4:10:EA:8A:90:0B:E8:EF:BF:0B:26:94:13:58:5D:CC:97:99:F3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/3139302e31352e39362e302f31392d3332203d3e203631353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         64:51:12:0b:c3:88:8f:f3:0b:51:e5:20:46:3e:c8:d6:30:ea:
         a4:de:01:59:2c:e4:20:c7:22:74:91:46:db:13:d4:85:24:6e:
         57:2b:73:51:1a:f5:4e:2e:b1:1d:1b:ad:93:3a:5e:01:51:87:
         ac:13:ea:90:b4:ba:42:08:79:32:e0:1f:df:f4:11:5f:01:12:
         94:f4:35:85:e4:8e:87:c3:df:ca:69:12:a7:51:4a:2e:a9:a9:
         63:07:bf:df:db:50:ff:f5:de:71:20:86:7c:83:4f:dd:e9:fa:
         61:b8:ee:46:16:3b:02:6b:76:7e:1e:c2:41:1b:ec:e0:e0:bf:
         af:92:e9:f0:b1:41:c1:c4:f6:89:49:7b:ca:e1:67:59:e2:22:
         f1:34:d7:e4:9c:f7:bc:bb:07:62:dd:0b:19:fb:81:a3:d4:39:
         43:d8:2c:e1:2b:2c:e3:05:db:98:eb:e2:80:07:f9:0f:fc:f1:
         43:f2:97:8d:be:34:01:06:ee:32:02:fa:ff:24:20:50:75:a0:
         70:77:09:b7:e1:ba:e0:df:06:12:8d:a4:fc:2b:da:9d:ff:ba:
         06:6d:5c:ea:bc:5c:7d:29:ae:f8:27:50:d3:05:1f:95:a9:a3:
         b4:be:2c:d8:17:7c:cf:0e:35:45:5a:c5:3a:7a:53:c5:86:f9:
         0a:3d:20:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org