Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/3139302e3131322e3135382e302f32342d3234203d3e20323639373132.roa
File:                     3139302e3131322e3135382e302f32342d3234203d3e20323639373132.roa (raw, json)
Hash identifier:          OKA4N6dzfV2NyVk5gKy/K3VbnUqVdB13A6HyXc41o8c=
Subject key identifier:   1F:B5:D1:D0:A7:26:E9:EF:A9:78:EA:52:28:46:8F:E8:FB:4D:92:B0
Certificate issuer:       /CN=26D31A8C73C47EAB403D78A3D37CBA859CC99B69
Certificate serial:       7342FC6FF9CBB08EFC5577016BA47A0F9C0F7864
Authority key identifier: 26:D3:1A:8C:73:C4:7E:AB:40:3D:78:A3:D3:7C:BA:85:9C:C9:9B:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26D31A8C73C47EAB403D78A3D37CBA859CC99B69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/3139302e3131322e3135382e302f32342d3234203d3e20323639373132.roa
Signing time:             Wed 03 Apr 2024 18:44:30 +0000
ROA not before:           Wed 03 Apr 2024 18:39:30 +0000
ROA not after:            Wed 02 Apr 2025 18:44:30 +0000
asID:                     269712
IP address blocks:        190.112.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:42:fc:6f:f9:cb:b0:8e:fc:55:77:01:6b:a4:7a:0f:9c:0f:78:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26D31A8C73C47EAB403D78A3D37CBA859CC99B69
        Validity
            Not Before: Apr  3 18:39:30 2024 GMT
            Not After : Apr  2 18:44:30 2025 GMT
        Subject: CN=1FB5D1D0A726E9EFA978EA5228468FE8FB4D92B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:df:1d:f7:88:c8:6f:dd:1e:d3:1a:ad:16:f7:
                    b4:38:2b:2c:0e:12:0b:8f:c9:52:1d:45:b6:75:62:
                    19:3f:58:3b:e3:e9:05:f3:78:20:19:5e:f6:c4:47:
                    97:9b:60:e7:19:51:69:55:b5:19:7a:0e:e1:b6:02:
                    b3:3f:06:0e:30:bc:6e:dd:78:56:df:7f:fc:33:a0:
                    d8:4d:e3:8b:b2:c4:1d:18:d7:c7:fb:2e:42:85:89:
                    35:9c:6e:40:3f:d8:49:db:ee:b2:a6:54:80:1e:46:
                    9c:ea:79:fc:62:31:c4:80:7f:bf:fa:dc:7b:c2:07:
                    3b:e0:57:0b:bf:10:9e:98:a1:0c:a3:4e:23:18:6f:
                    3b:f6:09:3f:6d:ad:f0:c8:1f:ac:05:cf:3f:99:38:
                    bd:bc:7c:7b:37:92:46:df:5c:c6:2d:c4:11:60:4e:
                    e8:10:da:12:aa:b8:35:52:18:5f:77:95:d7:d2:59:
                    67:51:66:69:af:23:2b:c2:04:37:1b:2c:ea:1a:be:
                    48:08:c3:16:58:4f:a3:f5:a2:1c:c8:70:93:5d:66:
                    c2:0f:e9:7e:36:60:40:2e:89:fb:f1:dd:d9:18:fe:
                    43:46:2b:85:49:7c:aa:49:d9:3a:94:fa:1a:94:55:
                    02:3a:3b:3e:54:eb:72:66:e0:1c:6f:77:73:b1:ed:
                    99:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B5:D1:D0:A7:26:E9:EF:A9:78:EA:52:28:46:8F:E8:FB:4D:92:B0
            X509v3 Authority Key Identifier:
                keyid:26:D3:1A:8C:73:C4:7E:AB:40:3D:78:A3:D3:7C:BA:85:9C:C9:9B:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/26D31A8C73C47EAB403D78A3D37CBA859CC99B69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26D31A8C73C47EAB403D78A3D37CBA859CC99B69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/3139302e3131322e3135382e302f32342d3234203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:a5:a9:11:1e:4f:05:cf:80:ba:08:d5:79:9e:d9:46:31:6b:
         df:16:9c:ec:fc:b3:44:f4:fe:53:3f:fe:a6:4a:ca:a2:2a:a8:
         38:c5:e3:67:ae:25:d7:94:12:86:15:0c:f3:67:33:9f:06:72:
         f5:d2:e2:12:8c:6c:ab:a1:8e:b1:50:2e:b4:7f:23:aa:52:95:
         f1:a1:a3:ee:b2:79:34:ca:cc:0e:34:f0:45:ad:7d:6f:46:cd:
         69:fd:11:72:a0:95:4d:7c:0f:6c:2d:b9:44:c0:95:17:3c:5c:
         57:91:fd:e6:f3:07:d5:7f:be:d2:f8:82:8e:20:f0:b2:7a:b0:
         c6:0f:3a:69:e7:db:67:ac:90:84:42:f6:76:75:5d:2b:4f:b2:
         88:a0:a7:c8:ae:fe:37:67:0f:65:0b:08:c5:07:ef:86:20:75:
         6b:96:f0:1e:a3:e4:5b:3b:3c:4d:b7:78:c3:14:5f:92:8e:a0:
         c0:9f:b5:0d:89:0b:75:03:61:86:79:21:d2:34:35:ea:9d:2d:
         94:b5:6f:c2:12:27:51:d0:14:c3:66:c4:28:9c:87:dc:2c:f4:
         21:76:db:ad:fb:4e:a6:e9:71:0d:90:ff:57:ad:01:f6:4b:a0:
         3a:5d:d4:5b:14:e7:92:29:3b:9a:c1:35:e9:d0:40:7a:8e:83:
         a3:5f:86:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org