Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vwSmnf2Yu5rZaxMjnkZvWAMp27VG96tTVL42CoaTn2n/0/3139302e3131352e39322e302f32322d3232203d3e20323730343438.roa
File:                     3139302e3131352e39322e302f32322d3232203d3e20323730343438.roa (raw, json)
Hash identifier:          TB4vTp5efEOn/IfVcFh67OwbI/OfoP4LpmGlhdUw4Gg=
Subject key identifier:   9E:08:90:FE:B8:B3:F1:18:86:C3:D6:61:AB:9B:A1:80:31:C6:EF:71
Certificate issuer:       /CN=731EFBD4618A2522F396BE07EB96839B852102F9
Certificate serial:       1BD27F637314DCBBE6FD08E2B56900DDAC197A6D
Authority key identifier: 73:1E:FB:D4:61:8A:25:22:F3:96:BE:07:EB:96:83:9B:85:21:02:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/731EFBD4618A2522F396BE07EB96839B852102F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vwSmnf2Yu5rZaxMjnkZvWAMp27VG96tTVL42CoaTn2n/0/3139302e3131352e39322e302f32322d3232203d3e20323730343438.roa
Signing time:             Thu 18 Jan 2024 14:43:19 +0000
ROA not before:           Thu 18 Jan 2024 14:38:19 +0000
ROA not after:            Thu 16 Jan 2025 14:43:19 +0000
asID:                     270448
IP address blocks:        190.115.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d2:7f:63:73:14:dc:bb:e6:fd:08:e2:b5:69:00:dd:ac:19:7a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731EFBD4618A2522F396BE07EB96839B852102F9
        Validity
            Not Before: Jan 18 14:38:19 2024 GMT
            Not After : Jan 16 14:43:19 2025 GMT
        Subject: CN=9E0890FEB8B3F11886C3D661AB9BA18031C6EF71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:04:2e:2a:00:ad:6b:a1:c7:12:50:22:dc:
                    0b:69:80:03:fd:f0:0c:25:e1:30:01:04:83:f0:5d:
                    8f:6f:ed:55:db:91:f1:7f:4a:c7:ff:cb:19:8f:05:
                    5f:81:97:6c:32:ff:3a:82:b3:7c:ee:72:b9:7c:b3:
                    1f:8f:b7:71:49:a5:ba:72:4e:9c:2d:75:01:af:c8:
                    c5:29:82:0b:7e:48:39:d6:c1:fa:6e:a6:b0:2b:2a:
                    b9:ac:b2:aa:11:8c:e0:6a:02:75:eb:96:56:92:47:
                    68:49:0f:15:e1:3d:fa:b2:20:cc:47:0b:03:d6:77:
                    a6:55:6f:68:46:0a:4f:9a:09:c7:df:c1:3a:7c:5a:
                    07:25:6d:3a:26:94:43:42:57:cd:a0:01:08:c4:f3:
                    ce:87:33:5f:55:ba:e4:d0:e3:14:01:1e:c6:20:f3:
                    e4:aa:05:08:9b:00:39:e3:5e:0b:d1:57:ce:98:54:
                    2f:49:9a:ab:fb:b6:58:0c:b8:41:1a:e4:66:7f:c8:
                    63:29:f4:cc:4b:b6:b1:a3:25:16:66:2f:cf:00:d9:
                    ea:e1:66:f5:dc:87:d2:32:0b:fc:50:e6:b6:3e:5a:
                    3e:0b:59:21:02:9c:04:b9:ad:4c:ce:a5:7a:67:79:
                    bb:84:f9:86:94:89:48:a2:e6:4d:27:98:c3:30:a2:
                    95:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:08:90:FE:B8:B3:F1:18:86:C3:D6:61:AB:9B:A1:80:31:C6:EF:71
            X509v3 Authority Key Identifier:
                keyid:73:1E:FB:D4:61:8A:25:22:F3:96:BE:07:EB:96:83:9B:85:21:02:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vwSmnf2Yu5rZaxMjnkZvWAMp27VG96tTVL42CoaTn2n/0/731EFBD4618A2522F396BE07EB96839B852102F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/731EFBD4618A2522F396BE07EB96839B852102F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vwSmnf2Yu5rZaxMjnkZvWAMp27VG96tTVL42CoaTn2n/0/3139302e3131352e39322e302f32322d3232203d3e20323730343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:56:a4:4f:7c:82:a7:08:4e:e2:a3:1e:7d:38:a7:39:2e:6e:
         33:90:83:59:25:d0:c2:49:d0:f7:ad:80:8c:f3:bd:a7:73:d1:
         f2:62:2a:cc:70:21:49:d3:44:47:30:ce:e7:2e:ae:59:fc:ee:
         41:f1:08:8e:fe:81:89:d7:d9:ad:e0:71:52:6f:01:26:3b:37:
         11:9b:c7:92:03:b9:a5:4b:9f:4f:0d:6c:60:df:e3:ce:13:c9:
         26:16:4c:32:35:17:f9:f6:b6:8b:72:40:d2:f9:11:41:fc:47:
         85:dd:71:d1:74:7d:0c:d7:ca:b9:d8:cd:5a:bb:59:3d:08:1c:
         8a:70:8e:e0:69:54:ea:61:ed:87:38:89:37:ca:07:4a:46:3a:
         7a:a0:63:55:5b:b4:9b:ca:0d:ce:64:50:d6:7d:89:97:85:4f:
         dc:bc:5e:4c:3f:db:91:2e:69:5d:f6:75:51:96:3d:85:aa:92:
         2f:ed:80:55:de:8e:d8:3e:c2:3f:39:f5:18:6d:f3:77:a2:ce:
         16:52:74:68:8a:69:a7:09:f4:d2:f7:50:10:ea:00:96:c1:01:
         bf:8a:e8:e5:ab:39:3f:45:27:5e:47:b2:e6:b2:e6:f7:5e:9d:
         d9:53:1d:21:b8:b7:96:7d:0a:04:52:e4:ef:25:fd:47:c8:e3:
         95:3a:dd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org