Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37362e302f32332d3332203d3e20323639333938.roa
File:                     3139302e35322e37362e302f32332d3332203d3e20323639333938.roa (raw, json)
Hash identifier:          XjA64kqCwFbCvPqmZkVJ52e7QjQcgGZy1sgaV0Ce62c=
Subject key identifier:   05:41:CA:E4:C7:27:99:34:64:77:4D:26:0D:0E:BE:1C:B2:2F:E1:20
Certificate issuer:       /CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
Certificate serial:       215B4D6BC426F8EC7F0D781B5F8B56E993B1317B
Authority key identifier: DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37362e302f32332d3332203d3e20323639333938.roa
Signing time:             Tue 28 Feb 2023 13:47:29 +0000
ROA not before:           Tue 28 Feb 2023 13:42:29 +0000
ROA not after:            Tue 27 Feb 2024 13:47:29 +0000
asID:                     269398
IP address blocks:        190.52.76.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5b:4d:6b:c4:26:f8:ec:7f:0d:78:1b:5f:8b:56:e9:93:b1:31:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
        Validity
            Not Before: Feb 28 13:42:29 2023 GMT
            Not After : Feb 27 13:47:29 2024 GMT
        Subject: CN=0541CAE4C727993464774D260D0EBE1CB22FE120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b5:c7:6c:5a:30:e5:3a:59:82:5c:13:b9:74:
                    f3:32:11:c4:52:5f:9e:d1:fb:a5:d7:d5:0e:f0:a0:
                    b0:7e:d6:aa:7a:6b:de:45:e8:69:02:06:9b:c7:8d:
                    ed:d4:44:0e:86:98:31:56:0f:36:02:45:aa:38:58:
                    f6:d4:d9:ba:f7:3f:dd:76:81:66:7d:2e:c1:f5:b9:
                    04:06:86:13:4c:6f:d0:a5:55:4d:29:78:d7:28:d3:
                    ff:08:9f:0c:43:ef:d0:d4:d7:4b:c7:4b:65:f9:3b:
                    9c:88:3b:3f:1e:c6:bb:e6:cb:4e:04:02:0a:12:d7:
                    2f:59:af:e5:3f:99:b2:f7:da:c8:21:03:28:8c:5e:
                    57:0f:af:b8:d2:8b:53:f0:2a:e0:d8:e5:37:34:f1:
                    d6:69:f0:b2:d4:04:57:1e:45:a8:5f:8c:7f:0f:65:
                    b8:18:83:1f:6e:cb:9c:83:45:68:23:96:ed:50:11:
                    4b:a6:dd:fc:e4:58:a1:94:5a:69:43:49:60:9a:1e:
                    8a:27:e3:cf:e4:88:5c:a7:c3:21:83:a0:f4:7b:e0:
                    dd:20:18:98:c9:e9:bf:96:22:02:7a:79:00:7d:b5:
                    88:c7:b6:0a:67:17:17:76:ca:ce:25:dd:4b:dc:6a:
                    0d:e3:47:92:d8:82:e0:85:60:40:fd:df:0a:26:9f:
                    1d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:41:CA:E4:C7:27:99:34:64:77:4D:26:0D:0E:BE:1C:B2:2F:E1:20
            X509v3 Authority Key Identifier:
                keyid:DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37362e302f32332d3332203d3e20323639333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:78:25:12:63:ff:5e:4a:4a:ea:b6:1d:c0:a4:fc:8c:6e:a5:
         90:08:f0:3f:c5:68:2c:d4:b7:75:ef:df:c6:35:88:10:0b:2f:
         7e:20:2e:4a:34:60:8d:bd:d0:bd:d1:0e:8b:a0:67:1c:11:19:
         a3:aa:2f:2b:a6:9c:63:4f:ee:4f:38:1f:9f:b8:66:db:6c:22:
         68:71:98:1f:2e:c6:96:9e:23:11:fe:02:85:84:71:15:1b:e9:
         0d:92:38:f5:85:82:b1:cd:33:3a:a2:31:19:ce:9a:94:55:f1:
         4d:8e:6d:4f:0f:67:fb:b3:72:fb:bb:a9:47:66:4e:57:3b:0e:
         3a:dd:56:55:76:7c:49:4c:1e:c8:06:00:38:9e:9c:ef:a8:fc:
         70:8b:cd:c8:de:fa:c9:6c:0e:5b:ab:a8:33:dd:22:17:26:17:
         47:e6:a4:af:54:20:4f:88:42:0e:0f:cb:8e:3a:c6:c2:0d:80:
         8f:5b:62:35:b3:50:a2:0d:07:bf:b4:30:25:c4:ba:df:f9:19:
         85:f2:7d:6e:e0:16:8f:18:ce:1c:3d:05:73:ec:70:6a:cd:a6:
         12:45:a5:8e:0b:b8:8b:f6:7f:4c:49:5a:b4:6d:27:1c:bf:3f:
         a0:26:e8:f6:22:a0:76:95:0f:de:42:63:08:0d:f2:a9:76:61:
         5f:f7:2c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org