Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32332d3233203d3e20323639373132.roa
File:                     3139302e3131322e3135362e302f32332d3233203d3e20323639373132.roa (raw, json)
Hash identifier:          vgY036IEe2+MZd+YGRVrFfS6V/OWeJVRtszMYDOyqN8=
Subject key identifier:   89:31:7A:C7:20:D3:AF:F5:E6:89:F7:2B:F3:17:C8:BE:E8:FB:95:E4
Certificate issuer:       /CN=9F6CAAB00E7B77388E82F39831FB778453932941
Certificate serial:       6585572C824D3D687F842493C1448107A469AB2D
Authority key identifier: 9F:6C:AA:B0:0E:7B:77:38:8E:82:F3:98:31:FB:77:84:53:93:29:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F6CAAB00E7B77388E82F39831FB778453932941.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32332d3233203d3e20323639373132.roa
Signing time:             Mon 19 Feb 2024 18:20:30 +0000
ROA not before:           Mon 19 Feb 2024 18:15:30 +0000
ROA not after:            Mon 17 Feb 2025 18:20:30 +0000
asID:                     269712
IP address blocks:        190.112.156.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:85:57:2c:82:4d:3d:68:7f:84:24:93:c1:44:81:07:a4:69:ab:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F6CAAB00E7B77388E82F39831FB778453932941
        Validity
            Not Before: Feb 19 18:15:30 2024 GMT
            Not After : Feb 17 18:20:30 2025 GMT
        Subject: CN=89317AC720D3AFF5E689F72BF317C8BEE8FB95E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:17:99:a7:10:28:82:55:70:ef:4a:2e:5d:
                    c6:6e:a2:66:bd:48:75:50:2e:de:57:ac:50:da:1d:
                    ca:43:38:ad:eb:a4:8e:20:3b:ab:78:35:c3:13:1b:
                    b6:98:31:08:68:f4:58:20:96:d2:41:12:82:e8:a8:
                    91:c1:72:f0:05:dc:42:5b:2d:26:4a:12:47:d8:ec:
                    0c:8c:60:15:fb:2f:66:01:78:3d:1c:96:f1:3c:be:
                    36:da:a2:64:ac:91:5b:60:f6:80:e1:e5:b7:e0:f5:
                    3d:7a:64:80:b0:86:79:04:27:d7:75:df:39:74:a8:
                    b8:49:3c:45:17:0c:5d:64:d9:16:66:5f:32:a8:93:
                    c7:28:83:cf:64:a0:81:1b:71:e2:0b:55:f8:62:5e:
                    1c:f5:fc:52:73:a5:78:dd:9c:56:89:c0:74:d0:a5:
                    97:1f:d5:bf:57:9a:69:46:85:23:15:a5:86:2b:b8:
                    67:1c:05:ad:3d:53:14:be:f0:bd:b2:09:ab:0f:ab:
                    32:39:14:a4:ff:fa:a4:c8:c7:39:fe:37:f3:19:38:
                    92:91:f8:47:b8:49:da:50:54:d6:c3:fd:58:81:7f:
                    05:e6:b7:88:7f:10:d5:4f:24:28:28:d8:9c:a4:ef:
                    91:fc:a5:2e:b7:a1:5a:a5:02:27:dc:b5:a9:ee:af:
                    8f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:31:7A:C7:20:D3:AF:F5:E6:89:F7:2B:F3:17:C8:BE:E8:FB:95:E4
            X509v3 Authority Key Identifier:
                keyid:9F:6C:AA:B0:0E:7B:77:38:8E:82:F3:98:31:FB:77:84:53:93:29:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9F6CAAB00E7B77388E82F39831FB778453932941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F6CAAB00E7B77388E82F39831FB778453932941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32332d3233203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:3f:8f:35:01:ca:1e:a1:98:c4:4c:2e:55:ba:46:91:bd:e9:
         ca:f4:b3:15:7e:a7:cb:19:96:18:a8:1a:5f:3a:77:12:a4:7c:
         1f:14:f3:68:67:4d:7e:f7:d9:c5:f6:79:2f:80:e6:70:96:22:
         ae:40:21:2f:ee:cf:97:11:b0:63:b9:a4:69:05:27:51:fa:a8:
         b8:f3:59:d1:22:01:c8:27:28:73:0d:b6:d9:f7:2d:17:8d:d1:
         b0:d3:4c:68:19:70:72:ee:d6:94:61:a4:74:57:1d:3e:1c:ad:
         fe:47:2f:8c:b5:3d:bf:3a:2f:50:a2:94:db:e5:ac:2e:5b:da:
         d8:f0:5d:9c:89:f3:2a:56:e1:59:37:51:3e:e3:aa:9d:62:cc:
         2c:86:00:38:e5:69:f3:fd:64:a1:eb:f9:43:c6:83:e0:58:fc:
         72:55:c5:0e:ab:c1:f3:7b:b1:a1:0d:ae:1f:1f:94:a0:94:87:
         56:46:09:fd:be:1e:eb:a6:4c:88:3f:80:12:5b:e9:fe:87:2b:
         a5:d9:41:c1:56:79:46:8b:d4:ab:7a:73:c2:ae:e4:d2:e1:b6:
         00:68:f1:cd:73:01:da:99:84:28:1e:76:f0:4b:60:1d:41:d6:
         27:9f:1d:5c:48:4b:14:31:8b:7b:1c:a8:3f:4a:61:15:f9:8d:
         4b:1a:f6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org