Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/1/3139302e3132342e3235322e302f32322d3234203d3e20323730343536.roa
File:                     3139302e3132342e3235322e302f32322d3234203d3e20323730343536.roa (raw, json)
Hash identifier:          QbFApv9uB66ixe2/1haodS7GJsXtaq/YbPKmWzmQNBo=
Subject key identifier:   41:6C:C6:30:7A:DA:67:FA:A7:50:FB:82:EE:5E:2E:6F:D7:7F:24:63
Certificate issuer:       /CN=FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4
Certificate serial:       79A4E090BC023E9AEA0F787BD427B9B4713E2504
Authority key identifier: FE:95:FB:96:0D:3B:ED:76:8A:7C:DF:B2:1C:EB:EF:56:32:FE:B7:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/1/3139302e3132342e3235322e302f32322d3234203d3e20323730343536.roa
Signing time:             Thu 04 Apr 2024 18:53:19 +0000
ROA not before:           Thu 04 Apr 2024 18:48:19 +0000
ROA not after:            Thu 03 Apr 2025 18:53:19 +0000
asID:                     270456
IP address blocks:        190.124.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a4:e0:90:bc:02:3e:9a:ea:0f:78:7b:d4:27:b9:b4:71:3e:25:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4
        Validity
            Not Before: Apr  4 18:48:19 2024 GMT
            Not After : Apr  3 18:53:19 2025 GMT
        Subject: CN=416CC6307ADA67FAA750FB82EE5E2E6FD77F2463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:e0:57:5e:7b:f7:07:7e:d0:a1:89:43:bd:
                    4a:70:83:7c:28:d9:93:f8:74:d4:94:80:f4:68:21:
                    a0:87:a3:6f:46:07:44:c6:48:24:07:2f:02:9b:77:
                    fa:bf:0c:d8:35:c5:64:ad:58:d1:b8:a3:01:79:c2:
                    5d:aa:5c:b2:5d:9a:88:1a:91:50:39:a9:12:fd:14:
                    03:f8:bd:2e:d7:91:ba:97:ba:60:31:12:87:85:2a:
                    e8:ec:ee:07:c0:ba:db:0e:38:0c:d0:68:e1:0b:f1:
                    f0:ed:d0:3e:c1:63:78:79:5f:42:e2:93:9d:0c:6b:
                    ab:95:1a:0c:7c:ba:1e:5a:f4:a7:02:c4:b6:29:f5:
                    16:88:34:2f:c0:65:e0:84:a6:98:4e:5b:63:7e:01:
                    ef:b5:0e:6d:5b:11:c2:82:3e:8a:8c:a4:4e:a3:86:
                    eb:e5:9b:46:05:25:1e:fc:d3:55:d5:6a:f7:16:98:
                    07:3a:0c:76:4b:08:fc:05:2b:2a:8d:97:cf:71:d1:
                    f0:80:50:92:54:75:9a:d7:3f:d7:40:b7:29:94:6a:
                    a2:78:32:93:30:6a:d0:c5:38:22:61:c6:21:13:3a:
                    74:af:3d:a1:3e:73:58:10:8c:a0:cc:32:1c:82:73:
                    88:fb:dd:82:a6:43:52:08:fc:34:4c:2b:54:59:e2:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6C:C6:30:7A:DA:67:FA:A7:50:FB:82:EE:5E:2E:6F:D7:7F:24:63
            X509v3 Authority Key Identifier:
                keyid:FE:95:FB:96:0D:3B:ED:76:8A:7C:DF:B2:1C:EB:EF:56:32:FE:B7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/1/FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/1/3139302e3132342e3235322e302f32322d3234203d3e20323730343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:19:4d:ae:bb:40:3f:45:77:7e:73:9d:d0:c0:ed:fa:04:ff:
         3a:93:88:43:1c:43:96:b2:fe:fe:b5:36:1d:2e:ea:61:71:2b:
         ce:4e:89:0a:ed:a0:62:d2:49:b9:6a:b7:f7:63:d2:d5:c6:33:
         3c:f1:03:c0:f6:c8:b4:3b:1e:58:ea:65:ba:f2:df:40:e8:27:
         1a:43:3d:88:14:9a:64:67:32:66:c1:3b:d7:88:a3:4d:b4:19:
         d5:f0:4a:b8:51:23:bc:3e:11:53:92:f2:46:28:9c:22:3f:f4:
         c2:e4:df:9b:fc:c9:97:22:41:13:6c:24:e6:50:a3:63:f4:aa:
         fe:2b:7b:56:ea:39:65:5b:1b:c5:5e:e2:f4:5f:29:5d:38:8c:
         63:ae:fa:27:70:b2:1b:17:c2:c9:98:8e:22:d7:23:66:0a:1f:
         46:9b:42:51:60:36:ec:d0:65:c3:f0:eb:30:08:57:11:08:33:
         f7:68:46:d3:83:10:a7:22:bc:cb:33:c9:0b:7d:c5:36:e1:4a:
         cf:e7:e3:f0:2e:bc:1d:89:5b:a2:11:9b:7f:43:1d:33:65:4d:
         c5:5a:2e:c3:1a:4a:5e:e8:a4:ee:22:12:7d:ed:1a:38:55:a4:
         e8:36:ce:96:a9:5f:7c:11:dd:d0:59:d8:71:dd:57:21:d6:36:
         42:ae:e6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org