Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/3139302e392e38382e302f32322d3234203d3e20323731353739.roa
File:                     3139302e392e38382e302f32322d3234203d3e20323731353739.roa (raw, json)
Hash identifier:          bOJwFNb7Uj6+Nqe120+SAbf9EPaNRKiJyrB/Y1y4Hz0=
Subject key identifier:   6B:C9:D4:67:7F:60:41:45:88:A9:92:40:5C:02:38:C3:E6:57:6D:B3
Certificate issuer:       /CN=19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF
Certificate serial:       1F6CA33CC618BAA896563D8F8F76DC889E0927DE
Authority key identifier: 19:A3:45:8C:9F:AA:FC:C0:A2:B5:BB:21:5E:21:AC:E7:1C:7E:F1:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/3139302e392e38382e302f32322d3234203d3e20323731353739.roa
Signing time:             Sat 15 Apr 2023 02:06:14 +0000
ROA not before:           Sat 15 Apr 2023 02:01:14 +0000
ROA not after:            Sat 13 Apr 2024 02:06:14 +0000
asID:                     271579
IP address blocks:        190.9.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6c:a3:3c:c6:18:ba:a8:96:56:3d:8f:8f:76:dc:88:9e:09:27:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF
        Validity
            Not Before: Apr 15 02:01:14 2023 GMT
            Not After : Apr 13 02:06:14 2024 GMT
        Subject: CN=6BC9D4677F60414588A992405C0238C3E6576DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:5b:f1:dd:2d:14:35:a4:6f:36:2f:c5:15:
                    5a:b2:b1:8d:7b:55:64:98:70:99:07:fd:dc:5e:1d:
                    2e:b5:af:3d:3e:8b:ab:7e:96:67:33:15:8d:df:56:
                    26:11:fd:7a:28:e5:06:ca:62:67:ff:33:fd:57:c1:
                    fe:65:5a:45:8c:14:5c:e8:8a:0a:86:23:be:80:99:
                    1b:ba:89:f3:10:2a:02:ab:ed:23:ac:06:2e:e7:17:
                    31:97:09:d8:16:6d:9e:d0:96:26:3f:29:a2:f6:09:
                    dc:63:25:09:9e:63:18:b8:81:97:fb:16:57:24:77:
                    6c:0b:44:61:ea:45:49:1f:e2:0b:06:c9:df:4b:42:
                    a1:53:4f:fc:82:fb:00:6e:c3:f0:66:9d:b2:f5:d1:
                    c3:9b:a7:50:94:bc:c8:c1:06:8e:6b:09:d4:8a:e1:
                    ed:1e:fd:f1:5f:70:66:88:82:28:7c:6e:f7:4a:ae:
                    71:65:1f:88:cc:e2:6e:8a:a7:30:72:75:69:cb:4b:
                    60:87:53:f5:11:9b:ce:5f:6f:7b:97:07:83:2e:e6:
                    55:ef:1f:0b:39:ae:31:d6:32:51:8c:8a:07:be:77:
                    70:8f:03:a1:68:a2:7b:8c:6e:6e:5a:5d:98:fb:13:
                    b3:ae:31:f0:4e:3d:2e:05:61:d9:79:47:d6:3f:f8:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C9:D4:67:7F:60:41:45:88:A9:92:40:5C:02:38:C3:E6:57:6D:B3
            X509v3 Authority Key Identifier:
                keyid:19:A3:45:8C:9F:AA:FC:C0:A2:B5:BB:21:5E:21:AC:E7:1C:7E:F1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/3139302e392e38382e302f32322d3234203d3e20323731353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:65:de:7f:ef:41:41:c6:17:6e:4f:d6:71:cd:8b:21:24:d9:
         73:18:9c:72:92:ba:58:24:bd:23:c4:bd:1d:a6:78:25:32:e5:
         55:1a:88:7e:7c:b2:76:cb:d4:39:07:7f:7a:95:e4:b2:1f:24:
         6b:b6:e4:bf:c0:16:35:31:2f:43:b5:9d:6c:c4:a7:76:34:04:
         5d:1b:11:00:02:e4:16:24:09:55:16:5b:5f:66:ca:aa:81:75:
         84:a4:a1:fa:58:8f:9b:66:fe:28:8b:e8:eb:74:12:8b:e6:df:
         68:40:0b:76:a0:24:58:54:69:8d:f8:02:6a:5a:a8:0e:62:86:
         3c:d2:27:5a:26:6d:75:6a:9c:f1:df:2a:53:33:a2:07:9c:15:
         78:09:99:91:26:78:06:1f:25:d9:07:f2:59:3c:c2:fe:43:72:
         36:61:a2:6b:7d:a9:46:65:52:1b:9d:52:21:82:13:51:bf:b9:
         b3:2b:44:4d:74:6b:ac:d1:ed:c0:a8:6f:4c:08:bf:53:36:66:
         5b:77:12:3e:85:d2:1d:be:bf:85:e3:c8:0e:5c:05:02:e0:ed:
         17:73:6a:08:73:ea:a9:58:02:3b:9e:e9:17:7e:3e:44:d9:d5:
         69:5b:05:7c:56:6c:f5:bb:68:d7:36:d2:75:c8:36:1e:fe:72:
         ee:39:6b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org