Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/3139302e3131312e3130302e302f32322d3234203d3e20323730343036.roa
File:                     3139302e3131312e3130302e302f32322d3234203d3e20323730343036.roa (raw, json)
Hash identifier:          YQUDyIe4Hr5J3jF7qgf1RtCUt0cNMlcHoVUcvNWY7HQ=
Subject key identifier:   33:C2:56:93:4C:73:D3:72:89:BC:92:35:0A:69:F0:54:D9:5F:3A:9F
Certificate issuer:       /CN=A4B20BCB541363E4949848F512D135DC5D796B8B
Certificate serial:       5F85CB42515B3FA6CC634D12FFCFCDB8F60050EC
Authority key identifier: A4:B2:0B:CB:54:13:63:E4:94:98:48:F5:12:D1:35:DC:5D:79:6B:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B20BCB541363E4949848F512D135DC5D796B8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/3139302e3131312e3130302e302f32322d3234203d3e20323730343036.roa
Signing time:             Fri 09 Feb 2024 13:12:10 +0000
ROA not before:           Fri 09 Feb 2024 13:07:10 +0000
ROA not after:            Fri 07 Feb 2025 13:12:10 +0000
asID:                     270406
IP address blocks:        190.111.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:85:cb:42:51:5b:3f:a6:cc:63:4d:12:ff:cf:cd:b8:f6:00:50:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B20BCB541363E4949848F512D135DC5D796B8B
        Validity
            Not Before: Feb  9 13:07:10 2024 GMT
            Not After : Feb  7 13:12:10 2025 GMT
        Subject: CN=33C256934C73D37289BC92350A69F054D95F3A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c1:ee:87:ff:3a:97:3a:08:02:4d:63:1d:f1:
                    59:d6:12:94:2b:ff:ca:99:36:76:09:a2:11:df:fa:
                    7d:66:31:8b:70:b4:ba:a6:ce:81:1a:ad:33:60:3d:
                    97:f7:47:e8:49:a1:f8:7f:18:8e:5f:f6:ca:e4:ec:
                    dc:79:92:8c:a3:b7:f6:a1:f9:48:60:2d:eb:53:08:
                    e2:ae:de:65:9f:ba:80:99:1d:99:86:1e:04:fd:be:
                    8e:2d:be:bf:ef:0e:b2:a7:ee:ca:cf:77:79:f2:20:
                    85:a8:38:e1:f1:42:7b:e8:a1:03:0d:6d:20:af:d0:
                    0a:77:bb:b2:c0:d0:94:c0:7f:d7:e2:36:6b:3e:4f:
                    2c:8a:d8:a7:bf:64:03:b5:3b:6f:a5:42:8e:ef:e3:
                    a8:f0:2f:46:ea:13:72:92:4b:04:d8:3f:48:80:6c:
                    5c:5e:5e:38:35:dc:02:1f:06:37:c4:c7:94:7d:6f:
                    68:73:93:a2:28:c3:fa:dc:fd:13:07:af:bc:fe:10:
                    ba:c8:a4:f6:e9:c8:01:73:c5:62:6c:95:48:d4:51:
                    35:19:f5:e9:85:9b:c3:3a:58:b7:a1:9e:e1:f2:b1:
                    04:b1:13:91:7b:2e:98:4f:14:a6:06:91:3f:8e:19:
                    15:c2:a2:51:bb:df:89:72:f1:47:7d:80:48:0f:5f:
                    05:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C2:56:93:4C:73:D3:72:89:BC:92:35:0A:69:F0:54:D9:5F:3A:9F
            X509v3 Authority Key Identifier:
                keyid:A4:B2:0B:CB:54:13:63:E4:94:98:48:F5:12:D1:35:DC:5D:79:6B:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/A4B20BCB541363E4949848F512D135DC5D796B8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B20BCB541363E4949848F512D135DC5D796B8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/3139302e3131312e3130302e302f32322d3234203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:a6:b5:17:d7:6d:33:7a:95:c9:8c:95:9a:94:e8:d6:04:15:
         b6:57:d1:e3:b0:11:b0:87:38:ca:ff:e4:cb:a9:ae:76:82:8d:
         f1:c9:ed:b1:ba:5a:f4:8f:9b:6c:9b:a0:54:cd:ea:74:af:eb:
         1e:f2:0f:31:ca:7b:f8:b2:5f:85:4b:8a:6c:eb:56:3a:fe:66:
         03:15:69:f7:69:0e:23:f3:7c:91:8d:3d:3e:5c:b1:6e:50:9e:
         82:a5:94:68:5b:42:d7:6c:3c:c8:f5:06:c3:e1:d7:24:e6:7c:
         16:89:fe:31:b2:fd:9a:5f:40:af:5d:a7:18:fe:fb:4f:38:a0:
         ee:c0:6f:09:80:dd:01:2a:c7:e5:f4:d4:9a:e3:6e:fc:59:79:
         36:82:50:b4:39:4a:b6:01:2a:8f:1e:fd:d1:b1:37:74:17:5c:
         19:19:8f:38:9b:36:20:44:b6:f2:15:55:18:d3:46:39:2f:b6:
         57:66:73:48:61:fc:0a:49:1e:56:0e:51:4e:f5:df:88:6f:ce:
         67:43:a2:b6:c8:5b:66:0c:3f:3b:d1:7f:25:3b:a4:47:99:f1:
         6a:22:37:39:90:bb:c7:f9:aa:79:ad:11:c9:e9:de:cb:d9:28:
         b2:86:09:2f:eb:6d:1f:a3:ff:ab:27:33:08:f3:ab:65:28:1f:
         67:f8:4d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org