Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37362e302f32332d3332203d3e203134383430.roa
File:                     3139302e35322e37362e302f32332d3332203d3e203134383430.roa (raw, json)
Hash identifier:          tmsWA9AJV43lCljbZo8qrVaUjdUVh8MhJhR066GeIm8=
Subject key identifier:   4B:E8:DA:53:B4:0F:9D:FA:40:23:9A:3B:F4:29:99:E3:39:39:9F:D2
Certificate issuer:       /CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
Certificate serial:       4DF119CDD1C9178B7B0371C1A7FAEE6E68D9442F
Authority key identifier: DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37362e302f32332d3332203d3e203134383430.roa
Signing time:             Tue 28 Feb 2023 13:46:34 +0000
ROA not before:           Tue 28 Feb 2023 13:41:34 +0000
ROA not after:            Tue 27 Feb 2024 13:46:34 +0000
asID:                     14840
IP address blocks:        190.52.76.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f1:19:cd:d1:c9:17:8b:7b:03:71:c1:a7:fa:ee:6e:68:d9:44:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
        Validity
            Not Before: Feb 28 13:41:34 2023 GMT
            Not After : Feb 27 13:46:34 2024 GMT
        Subject: CN=4BE8DA53B40F9DFA40239A3BF42999E339399FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:61:ac:63:21:28:23:89:37:f3:2f:3c:8f:e1:
                    e9:fa:3e:17:0e:9f:99:f4:ac:d3:04:b5:e8:4b:cb:
                    dc:7b:27:4a:c6:ac:81:58:6a:ce:07:8b:55:26:4f:
                    3d:fc:6a:5c:cb:3d:78:e2:a6:73:ac:46:d9:a5:47:
                    40:6d:bd:38:4c:c2:20:54:5b:58:28:8f:2c:07:db:
                    65:77:ce:a4:d4:b5:68:33:2d:65:b0:96:81:fc:bf:
                    48:bc:39:d2:09:02:87:2b:85:4d:6d:50:07:5a:37:
                    5b:c7:ab:38:e2:4a:5f:11:76:3e:4e:bf:f3:ec:93:
                    3b:f8:0e:eb:56:f0:3d:b1:a3:da:45:7b:cc:d1:79:
                    44:02:1b:1a:11:f1:12:a9:91:ad:f8:a1:37:ec:bc:
                    64:ab:b1:71:b9:f1:78:99:eb:7f:f0:b2:ae:66:b3:
                    be:53:4d:e5:f3:fc:21:f3:c0:42:1c:7a:65:aa:21:
                    6d:08:ca:e9:1b:35:c6:aa:eb:36:5f:b0:de:7b:5d:
                    ee:bf:81:0b:88:96:35:f9:25:38:ed:12:7d:59:6e:
                    d9:df:b3:47:01:bd:b9:53:c0:b6:21:b5:ba:7f:d2:
                    91:82:4d:5f:a0:e8:84:e9:0f:3f:ea:79:cf:f8:e4:
                    3f:5e:89:a6:3e:2c:19:1e:55:c9:6b:d2:06:d8:85:
                    b6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E8:DA:53:B4:0F:9D:FA:40:23:9A:3B:F4:29:99:E3:39:39:9F:D2
            X509v3 Authority Key Identifier:
                keyid:DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37362e302f32332d3332203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:29:33:bc:0f:cc:61:8f:71:2c:5f:e3:e7:6b:7f:0b:d7:14:
         f1:e6:1a:54:55:f8:90:b0:eb:e6:17:14:84:8c:af:07:c7:9b:
         24:03:df:ee:3a:dc:46:46:b2:a4:66:82:78:4c:05:64:a0:2f:
         fb:83:df:bc:38:90:6f:82:99:b3:e8:3f:ae:32:17:c5:05:b5:
         4e:84:27:62:27:e5:06:ce:e2:20:86:b3:40:ae:08:24:16:f7:
         08:29:88:f5:56:29:71:bd:91:1d:d5:ad:33:c0:88:5e:95:a3:
         3c:ab:5b:16:d5:88:c7:77:b5:0f:b7:ad:bb:75:73:24:d5:e8:
         9e:05:b1:96:6d:9c:58:28:60:f0:c8:d5:3c:3d:fe:c5:41:79:
         ee:30:b9:6a:e5:9e:f4:65:d1:c5:a7:36:64:8f:7a:ad:b7:2a:
         86:ad:04:3d:09:18:a6:6f:39:2d:50:29:e5:fc:a4:c3:8e:43:
         b1:48:15:bb:3a:f1:91:aa:0d:e7:9d:61:a1:0e:8b:dc:12:3e:
         98:ad:48:fe:05:02:ad:7f:ab:16:72:59:bd:de:b6:94:c8:4e:
         2b:20:42:71:47:e5:de:12:33:df:22:de:6f:d7:08:5c:51:55:
         da:7b:86:e0:d3:2e:97:d7:47:75:c3:ec:dd:57:9e:7e:d0:5f:
         3c:5f:db:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org