Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa
File:                     3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa (raw, json)
Hash identifier:          O15kXq9KlQL6g0Ub+KuTeMgajCAJDHjtd8qrs+GGLgs=
Subject key identifier:   EC:B6:0D:18:A9:FB:AE:7D:11:7F:2D:4C:80:95:2A:8E:AD:36:B8:6A
Certificate issuer:       /CN=26D31A8C73C47EAB403D78A3D37CBA859CC99B69
Certificate serial:       57FE2A23119323CAD923196ED8FB9A824B192DB6
Authority key identifier: 26:D3:1A:8C:73:C4:7E:AB:40:3D:78:A3:D3:7C:BA:85:9C:C9:9B:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26D31A8C73C47EAB403D78A3D37CBA859CC99B69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa
Signing time:             Wed 03 Apr 2024 18:44:31 +0000
ROA not before:           Wed 03 Apr 2024 18:39:31 +0000
ROA not after:            Wed 02 Apr 2025 18:44:31 +0000
asID:                     269712
IP address blocks:        190.112.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:fe:2a:23:11:93:23:ca:d9:23:19:6e:d8:fb:9a:82:4b:19:2d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26D31A8C73C47EAB403D78A3D37CBA859CC99B69
        Validity
            Not Before: Apr  3 18:39:31 2024 GMT
            Not After : Apr  2 18:44:31 2025 GMT
        Subject: CN=ECB60D18A9FBAE7D117F2D4C80952A8EAD36B86A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:83:39:ed:82:4e:b7:f3:6d:69:bd:65:18:f1:
                    b2:d3:d5:48:05:23:7c:90:6a:47:84:fa:7a:ac:87:
                    29:e6:ec:dc:5d:89:3d:31:1e:fb:93:ec:d1:d7:47:
                    f4:f7:ff:1d:bf:3e:0f:38:4b:69:ca:42:c2:cd:7b:
                    77:c4:e1:fc:4c:e9:d2:c6:0f:66:d3:48:d5:5a:d9:
                    77:ad:bf:a8:56:b7:2b:86:50:02:94:70:b7:fa:4c:
                    81:3e:f7:c6:bd:38:5b:43:f8:58:7f:e5:f9:c4:95:
                    a3:5a:72:7b:6e:0a:c3:27:d6:4d:b6:ee:d2:4d:7f:
                    77:00:09:cb:34:61:f7:94:34:6d:e6:9a:ec:24:fe:
                    ab:b3:fb:5d:cc:d0:d1:dd:0f:4a:00:07:59:d9:8e:
                    ba:19:ff:e5:63:8a:0b:0c:66:b2:6c:40:d8:30:a2:
                    d0:92:ff:b9:fc:e6:eb:99:33:f9:c9:bc:fd:3d:2f:
                    60:f0:17:29:88:20:5e:b6:1b:ea:b9:13:b9:03:6a:
                    34:c4:4e:9d:ba:fa:b2:a7:b7:fb:c9:58:01:83:76:
                    13:bb:dc:71:8e:d1:cb:6e:41:1f:27:00:1c:80:a0:
                    c5:02:5a:cc:ec:84:52:e1:7a:72:41:3b:16:3f:9d:
                    b0:d7:7e:be:22:c5:28:4a:de:c5:09:cc:9d:f3:58:
                    ea:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B6:0D:18:A9:FB:AE:7D:11:7F:2D:4C:80:95:2A:8E:AD:36:B8:6A
            X509v3 Authority Key Identifier:
                keyid:26:D3:1A:8C:73:C4:7E:AB:40:3D:78:A3:D3:7C:BA:85:9C:C9:9B:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/26D31A8C73C47EAB403D78A3D37CBA859CC99B69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26D31A8C73C47EAB403D78A3D37CBA859CC99B69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:b6:07:2d:34:2f:7f:9b:15:d7:52:d6:b2:54:82:86:07:c7:
         bb:1d:9b:77:dc:b0:c2:b3:47:89:2b:96:32:d9:36:d6:a7:d2:
         b7:fe:c5:2c:1f:5c:6f:de:86:54:f6:f2:9f:c1:ef:3a:b5:ca:
         6c:ec:cb:48:d9:7d:1f:cd:6b:85:b3:76:a3:1d:b7:10:6d:2b:
         65:80:b4:44:2b:e0:f0:14:76:ef:25:2a:20:12:84:2f:3d:eb:
         b7:1b:73:13:6d:1d:26:35:9f:b3:fb:00:ee:38:f5:67:60:82:
         9d:4f:04:c2:24:06:44:ea:25:3a:44:bd:e7:bb:65:d2:67:89:
         fd:0f:25:b4:ff:50:ed:36:2d:08:8d:93:1e:9e:8e:35:aa:28:
         b3:9c:a6:85:54:78:c6:60:f6:d1:d5:9a:b6:77:79:86:ed:a0:
         5e:56:15:47:12:2a:ce:7d:32:4d:ea:9d:a6:df:92:99:9d:93:
         ef:34:e7:0f:56:8c:18:54:5a:4c:88:2c:96:25:ed:10:41:c4:
         52:1e:f2:ad:cf:9e:c3:af:dd:e5:d2:f3:00:51:4a:31:cd:41:
         19:b3:47:cd:f0:d2:9b:53:45:ac:8d:2c:d0:57:26:20:92:fc:
         e5:e9:e3:db:9f:14:20:66:17:da:8f:12:02:98:31:01:35:23:
         87:8c:45:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org