Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/1/3139302e3131352e36342e302f32322d3234203d3e20323730343139.roa
File:                     3139302e3131352e36342e302f32322d3234203d3e20323730343139.roa (raw, json)
Hash identifier:          GJYFlYvY9HUWQL6M8a67IwE0JL67tST0PGbCM855b00=
Subject key identifier:   DB:B0:96:23:61:23:F2:B4:E1:3A:64:E3:C6:DC:D5:34:13:7A:37:91
Certificate issuer:       /CN=385279A7156D16CD0E0832BCE576D91211168351
Certificate serial:       0AE3D081D6DAF6FB4E62175141EED7CB832D8A20
Authority key identifier: 38:52:79:A7:15:6D:16:CD:0E:08:32:BC:E5:76:D9:12:11:16:83:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/385279A7156D16CD0E0832BCE576D91211168351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/1/3139302e3131352e36342e302f32322d3234203d3e20323730343139.roa
Signing time:             Thu 04 Apr 2024 18:44:51 +0000
ROA not before:           Thu 04 Apr 2024 18:39:51 +0000
ROA not after:            Thu 03 Apr 2025 18:44:51 +0000
asID:                     270419
IP address blocks:        190.115.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e3:d0:81:d6:da:f6:fb:4e:62:17:51:41:ee:d7:cb:83:2d:8a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385279A7156D16CD0E0832BCE576D91211168351
        Validity
            Not Before: Apr  4 18:39:51 2024 GMT
            Not After : Apr  3 18:44:51 2025 GMT
        Subject: CN=DBB096236123F2B4E13A64E3C6DCD534137A3791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:d7:e0:f7:c1:e0:bf:b8:b5:1e:0c:29:7f:
                    63:76:e0:26:5e:b7:e1:c0:9a:ba:20:61:c9:2a:c3:
                    52:d7:a7:b9:a8:ff:f9:4a:25:55:01:6c:10:24:5c:
                    12:2f:5c:c4:2d:a9:99:cc:a1:f0:21:6b:ed:d4:c9:
                    0a:dd:46:16:bc:33:4c:95:fb:89:31:41:49:53:5d:
                    b6:86:f7:1e:a4:4e:00:56:aa:05:b3:7b:58:0a:63:
                    12:f4:e4:aa:86:e4:7f:6f:02:74:25:af:84:19:47:
                    a8:97:72:8a:60:02:5b:09:3a:85:ce:64:9b:0f:14:
                    c5:26:fe:43:25:b3:b8:a8:8c:dd:5f:04:01:bc:83:
                    c7:fe:56:5d:c9:eb:e7:7f:0c:87:bb:27:14:27:55:
                    7a:2f:ed:b0:00:85:59:e8:4d:43:53:1e:71:ed:8d:
                    f8:66:ef:6f:9f:b5:e1:5f:15:c7:6d:5d:e0:17:3a:
                    a4:15:6b:6b:be:4c:13:40:5e:6f:18:e4:7a:e5:05:
                    9f:b6:4d:79:e0:f8:a1:2c:9f:94:f1:66:55:3e:75:
                    7f:92:15:5e:80:b8:64:06:a4:37:23:39:4b:8f:87:
                    7f:4b:8c:3f:af:f6:21:cd:5f:e2:b6:a8:e9:4f:fb:
                    8e:1f:39:5d:22:d8:f2:41:22:45:bd:1b:d8:25:02:
                    5a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B0:96:23:61:23:F2:B4:E1:3A:64:E3:C6:DC:D5:34:13:7A:37:91
            X509v3 Authority Key Identifier:
                keyid:38:52:79:A7:15:6D:16:CD:0E:08:32:BC:E5:76:D9:12:11:16:83:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/1/385279A7156D16CD0E0832BCE576D91211168351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/385279A7156D16CD0E0832BCE576D91211168351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/1/3139302e3131352e36342e302f32322d3234203d3e20323730343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:11:30:4a:2e:65:0b:38:ad:ef:a0:e2:8b:e4:eb:df:23:df:
         28:78:2d:02:a8:88:ae:55:e1:fc:38:80:71:6e:51:4a:bb:4c:
         7e:a5:09:a9:8b:59:6e:88:47:db:28:64:54:a7:f1:b6:dc:4d:
         a9:c7:a2:fa:99:1b:cd:b2:4a:80:12:e0:a3:f1:af:2f:a1:63:
         db:53:7a:dc:16:7d:da:9d:56:76:23:96:9d:38:a4:96:32:0c:
         60:91:47:8e:9b:34:e7:07:28:5c:11:2c:5f:89:25:f3:56:6b:
         1c:55:c9:34:d7:7d:63:e4:53:0f:a4:da:5f:92:94:27:2b:3d:
         61:c7:e6:bc:60:50:2e:30:c1:db:21:c4:d4:11:2b:4a:e6:ee:
         94:77:e9:f7:dd:11:3f:ed:c6:5c:35:16:28:b1:c3:af:00:6e:
         8f:21:41:67:3c:f4:78:42:6c:be:de:1e:97:fe:bb:50:91:28:
         16:fb:9a:44:d4:2d:71:22:68:0d:bf:7b:64:8d:89:41:78:9a:
         51:25:be:20:7c:4a:4d:f0:51:61:32:f3:cf:ad:e4:4a:f4:a0:
         3c:c1:f0:e8:56:09:6c:4d:75:4c:ee:01:68:ab:26:42:4d:14:
         13:75:bf:35:fb:c1:5a:91:a0:72:39:4d:55:98:87:6e:7e:5b:
         91:49:69:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org