Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/0/3139302e392e36342e302f32322d3234203d3e20323731353836.roa
File:                     3139302e392e36342e302f32322d3234203d3e20323731353836.roa (raw, json)
Hash identifier:          xMyLvUtaL+uv3D86+eJ7mIIN18cxpECQNrNeYEn7A58=
Subject key identifier:   D3:31:5B:36:31:CF:AA:8D:9E:1A:7C:E8:2B:E8:D6:CE:AE:20:A0:E9
Certificate issuer:       /CN=1BEBF5E8C4258C3CC7F1FD0674712DCDA8956057
Certificate serial:       23305C00A535C266EBCD0C352EFA86534A4CB94D
Authority key identifier: 1B:EB:F5:E8:C4:25:8C:3C:C7:F1:FD:06:74:71:2D:CD:A8:95:60:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BEBF5E8C4258C3CC7F1FD0674712DCDA8956057.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/0/3139302e392e36342e302f32322d3234203d3e20323731353836.roa
Signing time:             Fri 06 Oct 2023 05:00:00 +0000
ROA not before:           Fri 06 Oct 2023 04:55:00 +0000
ROA not after:            Fri 04 Oct 2024 05:00:00 +0000
asID:                     271586
IP address blocks:        190.9.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:30:5c:00:a5:35:c2:66:eb:cd:0c:35:2e:fa:86:53:4a:4c:b9:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BEBF5E8C4258C3CC7F1FD0674712DCDA8956057
        Validity
            Not Before: Oct  6 04:55:00 2023 GMT
            Not After : Oct  4 05:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2f:0a:0d:b7:02:bc:09:a9:e4:a1:1b:c4:c2:
                    04:ee:6c:23:1c:4e:ac:cf:c4:ea:00:94:d6:eb:ef:
                    e8:54:6e:15:75:6e:7b:ae:af:a2:f3:a1:82:06:ed:
                    ec:51:d9:1c:73:ae:99:46:f3:a5:95:0c:4e:5b:c6:
                    17:ed:63:50:2f:c3:75:98:f2:02:9d:60:7c:50:71:
                    39:00:77:a9:60:fc:35:5a:62:fe:74:35:6c:67:ac:
                    59:ba:f4:7c:c6:fb:d6:03:68:25:60:46:f9:e8:a0:
                    17:98:08:cb:34:2e:9d:a4:5a:9f:5c:0f:bf:db:8b:
                    3b:a0:a3:20:81:8f:c5:7b:7f:f2:83:25:5d:58:78:
                    a4:ec:d4:2d:15:66:9e:9b:90:9d:26:74:7c:9b:e1:
                    4b:eb:5e:65:c9:c4:c3:c6:2b:c9:0e:8b:af:55:1d:
                    39:2f:fd:83:8d:38:f9:5d:d7:ac:d7:e5:14:60:11:
                    54:43:b7:52:ec:b2:e0:e0:dd:6b:fc:46:ae:c4:1a:
                    0f:85:8a:50:55:9a:5d:c9:ec:0c:ee:66:09:3d:a4:
                    66:57:c5:3e:5b:ad:3f:a3:b0:6b:76:b8:05:9d:49:
                    83:67:e6:77:b4:c6:14:5f:cc:03:d0:19:9a:b0:66:
                    b5:04:f5:57:42:8e:cd:a8:bf:1a:7c:f7:74:f2:00:
                    35:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:31:5B:36:31:CF:AA:8D:9E:1A:7C:E8:2B:E8:D6:CE:AE:20:A0:E9
            X509v3 Authority Key Identifier:
                keyid:1B:EB:F5:E8:C4:25:8C:3C:C7:F1:FD:06:74:71:2D:CD:A8:95:60:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/0/1BEBF5E8C4258C3CC7F1FD0674712DCDA8956057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BEBF5E8C4258C3CC7F1FD0674712DCDA8956057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/0/3139302e392e36342e302f32322d3234203d3e20323731353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:83:e4:79:c0:69:41:42:ed:50:ba:4a:9c:02:85:96:cc:3d:
         7a:da:24:33:b9:7d:70:85:3b:44:bd:12:ee:47:a8:b5:19:b5:
         c0:d3:35:9b:05:2c:e0:9d:e7:07:36:17:f8:10:8f:4c:c4:ed:
         ae:50:72:9f:2f:f7:88:78:91:09:e7:dd:1b:a6:df:56:c1:ed:
         16:a4:bd:f9:e7:d6:b5:cb:fc:ac:65:14:e7:81:c7:53:c3:b3:
         af:0b:7d:b4:d2:22:79:51:4d:f6:db:61:6e:e2:1b:9d:1e:3e:
         44:5f:fe:24:4c:28:6d:b9:bb:b5:f0:32:90:d2:de:32:dc:7f:
         8b:a4:92:76:53:a4:2c:c1:be:38:7a:7f:c5:41:5f:2d:47:64:
         74:78:d2:27:e0:55:a0:30:f5:08:60:a7:39:b0:c9:00:f2:6a:
         c1:4b:dd:35:06:5f:7f:36:23:83:10:3d:74:53:6b:32:77:f5:
         f9:c9:fb:81:8a:bb:92:34:03:92:70:d5:a5:77:7e:be:cb:85:
         57:ec:e3:0e:e7:b7:48:95:15:96:65:5b:a0:33:d8:13:b1:98:
         3d:e0:42:fd:44:ef:8e:1a:3b:ac:91:0d:fa:ae:de:e7:93:62:
         97:ef:c9:dd:5d:7f:c1:69:e0:54:05:e1:12:a9:af:62:44:99:
         20:de:0d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org