Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3130382e302f32322d3232203d3e20323730343137.roa
File:                     3139302e3131312e3130382e302f32322d3232203d3e20323730343137.roa (raw, json)
Hash identifier:          N4HRcGN/xTW3KBHfJQ9GnUGDg0H0fypIdJ6hMR0BOe0=
Subject key identifier:   F6:CE:A5:B3:C0:38:71:2B:E2:8C:F9:A3:C5:60:68:BF:B8:B2:58:5C
Certificate issuer:       /CN=C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD
Certificate serial:       1AFBAFF165CFD84530674A6150F4485C4FC4E4C5
Authority key identifier: C2:D5:EA:1A:04:A1:54:20:BD:5D:50:11:F0:BE:F6:13:5F:B0:8E:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3130382e302f32322d3232203d3e20323730343137.roa
Signing time:             Wed 06 Mar 2024 20:50:46 +0000
ROA not before:           Wed 06 Mar 2024 20:45:46 +0000
ROA not after:            Wed 05 Mar 2025 20:50:46 +0000
asID:                     270417
IP address blocks:        190.111.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fb:af:f1:65:cf:d8:45:30:67:4a:61:50:f4:48:5c:4f:c4:e4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD
        Validity
            Not Before: Mar  6 20:45:46 2024 GMT
            Not After : Mar  5 20:50:46 2025 GMT
        Subject: CN=F6CEA5B3C038712BE28CF9A3C56068BFB8B2585C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7d:92:ad:b8:89:af:d3:11:8f:83:2e:2e:e8:
                    52:5a:4a:17:35:aa:8a:54:33:7a:11:d0:10:ce:d3:
                    74:f9:2f:c5:20:01:5d:3d:99:e4:b5:bf:7b:39:cc:
                    79:72:69:f1:33:a1:40:be:a8:97:7e:43:92:ea:33:
                    ff:4d:22:97:0e:00:44:2d:80:81:dc:1b:9d:69:87:
                    15:90:80:18:f8:50:0f:8b:0a:75:a9:88:08:21:5b:
                    3f:6f:65:46:e1:80:b9:8e:c2:8e:18:77:0c:e2:f1:
                    81:d6:fa:b9:ac:ad:c6:45:5e:20:95:54:d7:26:36:
                    84:bc:f6:d4:28:b0:ac:04:af:a1:21:dd:f7:c8:fc:
                    dd:f3:ab:d9:83:e6:34:77:bd:fa:f9:75:ee:86:e2:
                    af:0d:43:2d:63:a0:e7:c1:76:fc:e5:22:8c:18:dd:
                    b4:3f:ec:26:6c:5e:69:2d:90:72:ef:2c:50:41:ae:
                    80:4b:e3:06:97:89:e1:40:eb:8d:43:d1:19:33:e8:
                    5f:28:6f:55:7e:b5:70:cf:08:fa:a4:c1:f0:93:97:
                    39:c2:f4:66:cb:a6:5a:08:a8:69:4a:27:f4:dd:a6:
                    90:44:b5:0a:30:2a:87:ba:53:e8:80:a1:52:97:74:
                    35:79:59:25:8a:ed:03:15:63:53:82:7b:f4:4f:ff:
                    8e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CE:A5:B3:C0:38:71:2B:E2:8C:F9:A3:C5:60:68:BF:B8:B2:58:5C
            X509v3 Authority Key Identifier:
                keyid:C2:D5:EA:1A:04:A1:54:20:BD:5D:50:11:F0:BE:F6:13:5F:B0:8E:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2D5EA1A04A15420BD5D5011F0BEF6135FB08EFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3130382e302f32322d3232203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:e1:7c:ce:ed:85:4d:c4:1d:e2:83:b8:06:de:60:db:de:95:
         35:9b:cb:6b:39:a0:3d:f8:61:33:22:61:d3:93:ae:a2:c7:24:
         53:11:70:a7:f4:b6:2d:f3:0d:f2:fe:62:70:c6:57:5f:81:67:
         25:29:b8:1d:a6:ef:80:03:9b:81:f1:2e:96:58:98:af:86:3b:
         4c:11:1d:fe:2f:cc:15:bb:ad:8b:2a:21:39:97:3e:49:0d:93:
         f3:c7:72:c8:ab:fe:8e:8d:dc:43:05:5f:51:e5:95:ea:36:fe:
         77:b3:e1:be:a2:4e:00:79:8d:f0:10:17:28:06:08:a2:d7:05:
         e5:3b:d1:33:97:5b:10:d9:66:90:aa:94:59:86:d0:a6:2b:b4:
         81:eb:ca:7f:06:74:f9:42:5f:f8:b5:fe:58:87:38:87:11:b9:
         60:0b:d5:d2:f0:90:dc:35:eb:ec:b1:bb:b2:c8:08:7b:36:b6:
         63:40:72:e4:dc:66:50:3c:22:6b:4d:50:de:4a:12:73:00:55:
         c7:62:11:8c:45:79:5d:82:c9:88:96:85:40:2a:eb:8a:8c:40:
         d8:92:c9:00:12:5e:ca:b0:30:27:ef:f0:40:eb:b2:fd:37:f9:
         ca:db:63:c4:11:4d:cd:82:22:f5:14:88:bc:6c:71:c4:d3:b5:
         19:a0:f6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org