Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/3139302e392e38382e302f32322d3232203d3e20323731353739.roa
File:                     3139302e392e38382e302f32322d3232203d3e20323731353739.roa (raw, json)
Hash identifier:          y+F/hJ1hSire8ByFwXn/45QcDDaDDSnTuPS1PfkQnwg=
Subject key identifier:   96:28:50:4B:F3:D5:A0:E7:1A:A0:59:67:6F:48:9A:9E:42:06:D1:11
Certificate issuer:       /CN=19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF
Certificate serial:       40A08EF36C9C7D46474FB33C974EC99734D9D377
Authority key identifier: 19:A3:45:8C:9F:AA:FC:C0:A2:B5:BB:21:5E:21:AC:E7:1C:7E:F1:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/3139302e392e38382e302f32322d3232203d3e20323731353739.roa
Signing time:             Sun 09 Apr 2023 13:53:47 +0000
ROA not before:           Sun 09 Apr 2023 13:48:47 +0000
ROA not after:            Sun 07 Apr 2024 13:53:47 +0000
asID:                     271579
IP address blocks:        190.9.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a0:8e:f3:6c:9c:7d:46:47:4f:b3:3c:97:4e:c9:97:34:d9:d3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF
        Validity
            Not Before: Apr  9 13:48:47 2023 GMT
            Not After : Apr  7 13:53:47 2024 GMT
        Subject: CN=9628504BF3D5A0E71AA059676F489A9E4206D111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:19:89:3c:61:61:6a:b4:d9:9a:88:58:ee:
                    29:53:dd:ab:fe:b5:8e:bf:90:b4:ae:c8:26:34:58:
                    2e:38:1e:ba:ec:8d:71:db:4f:40:96:f7:ca:55:a3:
                    1b:55:71:d0:ad:a0:af:e9:fd:1c:91:9b:c6:02:40:
                    ac:d6:75:4e:f5:e3:83:26:48:cc:63:82:7f:fe:f0:
                    a8:1f:77:b7:a7:17:3f:2b:28:01:24:10:d4:4e:4b:
                    b7:1a:27:d8:5f:b1:1c:d9:b9:ad:d4:c6:94:9c:12:
                    f8:08:43:00:f7:24:53:4b:8a:50:a7:eb:80:33:73:
                    c5:f8:97:cb:51:4e:04:de:00:0f:b8:af:23:6c:40:
                    cd:1a:58:81:b1:38:6f:bd:ae:47:0b:b2:aa:8f:db:
                    1d:be:d1:bf:56:d9:fb:c9:5f:87:56:9f:46:6b:55:
                    f2:c5:20:63:65:65:3e:72:58:ae:11:d1:39:54:5d:
                    89:2e:77:b2:21:f9:99:c6:3a:b1:df:64:ed:95:85:
                    bf:9f:31:27:1b:26:cb:e3:8d:63:fd:7f:02:e6:40:
                    cd:0c:d4:b0:26:f0:63:22:64:24:fa:41:70:63:72:
                    0b:dd:1b:9b:a3:48:19:64:e0:97:df:93:b2:fe:78:
                    1a:3a:06:a1:f7:79:de:79:0c:a6:fb:89:e6:9a:fb:
                    3e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:28:50:4B:F3:D5:A0:E7:1A:A0:59:67:6F:48:9A:9E:42:06:D1:11
            X509v3 Authority Key Identifier:
                keyid:19:A3:45:8C:9F:AA:FC:C0:A2:B5:BB:21:5E:21:AC:E7:1C:7E:F1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/3139302e392e38382e302f32322d3232203d3e20323731353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:35:06:17:80:ec:02:e3:d4:7f:cf:47:5e:fe:42:8a:26:4e:
         5c:34:fb:76:32:66:82:d3:0a:47:f5:2f:95:13:6d:e3:09:30:
         77:e6:fc:cb:97:c2:e8:a8:1d:6e:84:55:22:e5:cf:fd:52:31:
         bf:dd:9b:a8:ac:42:74:dc:0d:e1:2e:a7:a4:c5:06:a8:d3:f6:
         2e:73:c6:50:28:85:be:00:98:76:55:1a:e5:fa:c4:73:ef:b6:
         a3:d4:78:d5:54:db:ce:01:0f:f4:fa:04:58:86:2a:0e:0c:31:
         84:0d:b5:54:32:4d:6c:20:e9:ca:d5:6f:7a:43:ee:03:1d:0d:
         6b:f4:93:e7:28:ac:8a:99:48:a8:ce:77:c7:86:b1:07:dd:ab:
         d5:a4:d7:ed:c5:a5:1d:40:08:84:c3:30:1a:cc:ad:60:a7:0b:
         ed:d1:06:82:2d:ed:29:72:b0:39:51:94:01:7d:6d:3f:66:43:
         dc:4a:57:d7:11:37:7b:0a:ab:0e:b7:5b:ca:5f:a9:bd:12:48:
         8c:08:52:55:c9:68:f4:6c:a5:68:1b:79:a5:2a:16:b1:03:38:
         9d:ad:fc:22:b2:5c:be:65:68:d9:bd:4e:b5:10:2d:43:56:51:
         ae:68:27:e6:14:2b:5f:7f:b6:6a:89:21:fb:9e:e9:33:43:9d:
         7c:72:9a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org