Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37362e302f32342d3332203d3e20323731333533.roa
File:                     3139302e35322e37362e302f32342d3332203d3e20323731333533.roa (raw, json)
Hash identifier:          lLqetP5nER6DxptMtvfVvPFdi0KKpoeqO5w+FdRe6qA=
Subject key identifier:   DE:C6:38:CF:FD:EF:50:75:82:A4:F2:1C:F0:FC:6B:0B:BF:D9:90:27
Certificate issuer:       /CN=43A0CC77B7FDD53F8542952069B48C25D2B5F450
Certificate serial:       42FD75861E5862F805F41DB0AFBE87DF6264495E
Authority key identifier: 43:A0:CC:77:B7:FD:D5:3F:85:42:95:20:69:B4:8C:25:D2:B5:F4:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37362e302f32342d3332203d3e20323731333533.roa
Signing time:             Tue 02 May 2023 11:18:08 +0000
ROA not before:           Tue 02 May 2023 11:13:08 +0000
ROA not after:            Tue 30 Apr 2024 11:18:08 +0000
asID:                     271353
IP address blocks:        190.52.76.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:fd:75:86:1e:58:62:f8:05:f4:1d:b0:af:be:87:df:62:64:49:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A0CC77B7FDD53F8542952069B48C25D2B5F450
        Validity
            Not Before: May  2 11:13:08 2023 GMT
            Not After : Apr 30 11:18:08 2024 GMT
        Subject: CN=DEC638CFFDEF507582A4F21CF0FC6B0BBFD99027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fa:69:ee:af:dc:c4:d8:e2:f1:83:14:cd:91:
                    95:8d:8d:88:a5:2b:04:3b:4d:1d:1f:0a:c3:e5:3f:
                    59:5c:95:de:b8:98:74:88:00:93:2e:5b:fa:33:b1:
                    06:db:db:6d:ba:2a:36:f8:7f:a9:cb:54:9e:88:44:
                    ed:43:fc:4f:78:3b:d4:5b:77:6f:7e:f2:5e:7b:a2:
                    2e:21:a3:40:f7:35:38:fb:46:5a:03:02:b9:30:5a:
                    84:67:ef:8b:31:d4:a6:e5:1c:37:d7:21:5f:c5:0b:
                    a1:f1:b3:67:e7:a9:34:de:e4:ec:d0:e7:ca:86:55:
                    ed:2e:5f:56:f1:d0:48:87:0e:76:79:fb:97:7f:d4:
                    80:3c:94:35:cf:14:92:ae:d9:0f:2c:6a:bc:51:c1:
                    73:4f:f1:e6:32:f2:22:98:40:3c:97:c6:fb:cd:a6:
                    e5:b4:de:24:49:99:fb:61:e0:57:78:53:4f:f9:b0:
                    a1:02:15:aa:db:ff:c8:8b:c0:ee:a2:66:64:10:18:
                    68:48:c6:f2:30:3f:08:00:73:10:67:13:6d:63:56:
                    3a:de:4a:51:20:40:b8:83:ff:ff:87:03:9e:0c:d5:
                    36:7d:f0:76:03:50:07:06:6f:eb:eb:85:91:f0:11:
                    50:8f:64:f8:b7:77:78:7f:8f:d6:70:16:3c:06:aa:
                    b2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C6:38:CF:FD:EF:50:75:82:A4:F2:1C:F0:FC:6B:0B:BF:D9:90:27
            X509v3 Authority Key Identifier:
                keyid:43:A0:CC:77:B7:FD:D5:3F:85:42:95:20:69:B4:8C:25:D2:B5:F4:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37362e302f32342d3332203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:8d:14:91:12:2f:a7:cc:ca:6c:7c:9e:78:31:82:4a:d1:d8:
         2a:97:4b:6d:81:32:0e:d3:3f:e9:04:62:59:1c:a8:d4:21:ab:
         84:fb:77:67:40:77:9e:6d:8f:cd:8b:d4:93:08:5b:3a:45:2f:
         db:0e:1a:8f:ac:8d:63:8e:aa:28:2b:6c:81:e1:c5:dc:37:54:
         5d:f3:68:78:e9:54:6e:cc:90:77:6a:44:b3:e0:26:1b:0c:6e:
         b9:b0:05:8a:5c:3e:87:46:b7:e8:71:40:48:5e:3f:d4:1a:be:
         e3:1e:23:1d:23:b9:d0:f9:54:eb:9e:16:6f:de:9d:3b:e4:3b:
         bd:11:1e:16:94:7b:d8:66:64:87:36:8d:87:1d:07:f2:9f:62:
         3d:0c:6f:9b:fe:08:2a:c5:c8:73:e1:0b:fb:e7:77:c1:70:ec:
         4d:03:b3:7b:fe:b3:84:d4:d5:e7:bb:e8:a0:9a:a3:30:5f:06:
         18:1d:55:de:17:c8:93:cf:8d:20:83:93:1c:52:42:a4:8c:0c:
         1b:20:35:60:8b:84:e6:d6:4e:73:ca:76:5e:6d:5d:03:bc:05:
         0e:31:58:1a:8e:ab:80:97:8b:1a:2d:4e:23:75:4f:49:79:25:
         15:00:51:b6:04:dd:1d:ca:6f:de:c9:f9:ec:b9:b5:eb:c7:12:
         33:25:47:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org