Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/3139302e392e38382e302f32322d3332203d3e20323731353739.roa
File:                     3139302e392e38382e302f32322d3332203d3e20323731353739.roa (raw, json)
Hash identifier:          dp2+tuID4USdih9SSVYuc9a2O7CI+LiCDbNhgdmFqo8=
Subject key identifier:   DA:27:4D:C8:E0:15:CE:FF:A6:0A:A6:78:7B:99:93:62:EC:1B:FC:F1
Certificate issuer:       /CN=19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF
Certificate serial:       4A9DFD9AE7BC172D84197C4FDB819EED21ECD526
Authority key identifier: 19:A3:45:8C:9F:AA:FC:C0:A2:B5:BB:21:5E:21:AC:E7:1C:7E:F1:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/3139302e392e38382e302f32322d3332203d3e20323731353739.roa
Signing time:             Thu 11 Apr 2024 19:27:54 +0000
ROA not before:           Thu 11 Apr 2024 19:22:54 +0000
ROA not after:            Thu 10 Apr 2025 19:27:54 +0000
asID:                     271579
IP address blocks:        190.9.88.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9d:fd:9a:e7:bc:17:2d:84:19:7c:4f:db:81:9e:ed:21:ec:d5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF
        Validity
            Not Before: Apr 11 19:22:54 2024 GMT
            Not After : Apr 10 19:27:54 2025 GMT
        Subject: CN=DA274DC8E015CEFFA60AA6787B999362EC1BFCF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2d:ad:73:01:0f:ea:07:58:df:b9:c6:9d:07:
                    0d:0f:e0:bd:18:b7:e7:16:3b:d0:bd:e2:44:96:62:
                    3f:ba:b5:c1:23:40:df:07:46:63:fd:1f:f5:df:f5:
                    8c:9a:29:ea:93:a0:7e:82:7a:0d:62:01:c3:3e:41:
                    4f:a6:7a:97:d3:2b:79:33:cb:bf:e7:40:8a:f4:2b:
                    7e:8f:d3:ae:c6:d8:b2:95:8f:e0:05:f2:20:7e:d0:
                    3a:98:9c:7d:02:fb:f2:58:e3:1f:2a:42:4d:e2:0b:
                    97:60:0e:12:db:92:92:fb:f4:13:17:aa:0b:f9:81:
                    dd:db:3b:fe:99:93:bb:cd:6e:e8:c0:94:0a:2d:db:
                    94:40:e5:2f:94:7a:3f:36:2c:89:20:84:66:28:29:
                    96:5f:1f:c5:16:92:94:05:ef:5d:2f:29:cd:d3:d3:
                    c0:07:ef:3b:31:8d:27:f9:e8:37:0c:7d:32:40:55:
                    2b:37:1c:32:69:50:06:02:ea:91:fe:c7:23:19:b1:
                    c1:a4:6e:69:1a:d2:e4:32:b5:9e:e0:bf:71:4d:00:
                    36:57:af:d2:8d:52:08:ba:0c:9c:6a:5e:52:ed:2f:
                    d4:f0:5e:87:1a:84:78:9a:c9:c9:a4:03:55:9d:71:
                    73:ab:7e:2a:9a:cd:4e:30:0d:21:69:26:f1:6a:ff:
                    7c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:27:4D:C8:E0:15:CE:FF:A6:0A:A6:78:7B:99:93:62:EC:1B:FC:F1
            X509v3 Authority Key Identifier:
                keyid:19:A3:45:8C:9F:AA:FC:C0:A2:B5:BB:21:5E:21:AC:E7:1C:7E:F1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/3139302e392e38382e302f32322d3332203d3e20323731353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:b8:d7:06:ee:3d:37:62:ba:a0:5e:68:38:30:20:d8:e4:31:
         a6:aa:15:dc:8d:e7:cc:e0:72:3d:54:a9:95:ee:e9:41:8d:96:
         80:2b:0e:c5:d1:33:33:4b:a9:6a:d3:bf:31:ff:37:d8:03:23:
         a4:2f:89:00:e4:5d:fa:36:e3:34:9a:f0:b6:12:9f:6e:e9:f2:
         9e:90:6e:70:71:fa:d8:a7:fe:56:1d:ee:1a:99:cd:44:23:f5:
         3b:9d:7b:4b:8e:09:35:0c:98:fd:45:3c:71:fa:c2:e5:37:89:
         a0:6f:d8:a4:56:b6:5a:a8:5b:56:30:8d:3f:2b:e7:3c:0e:7c:
         1c:e0:32:68:cf:c0:26:b3:d6:66:d6:8b:2c:fa:e1:36:05:7d:
         8e:ae:d6:8d:5c:89:c7:c4:74:21:07:ba:b6:3d:87:60:ae:a6:
         ac:7f:da:a4:33:96:70:9c:66:65:d7:40:9c:18:7f:01:37:24:
         8d:8e:1e:a5:f0:07:77:bc:87:f2:63:ed:01:34:6e:df:be:78:
         5c:36:57:1c:26:1f:a6:b6:0a:ea:f7:c7:4d:cd:59:85:a3:05:
         0f:83:b1:be:75:7e:39:9a:ea:87:be:fe:2d:85:0b:4b:18:a7:
         3f:e8:4f:ab:27:c9:4d:ba:66:11:2d:27:01:28:97:8d:fa:14:
         80:13:76:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org