Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37372e302f32342d3234203d3e20323731333533.roa
File:                     3139302e35322e37372e302f32342d3234203d3e20323731333533.roa (raw, json)
Hash identifier:          aBUjLX7M7rn4WLXxi1P4yoW5v0jq+1y9G7VaLg6KgE4=
Subject key identifier:   EA:90:15:FC:1F:5A:E4:66:62:02:0A:DA:F6:81:C8:69:A2:ED:FD:F5
Certificate issuer:       /CN=F5A7136C82E81D3EC065F636CE46776805FFAE48
Certificate serial:       1349174A15F4AA17AD4C7583761432FFB6CE7726
Authority key identifier: F5:A7:13:6C:82:E8:1D:3E:C0:65:F6:36:CE:46:77:68:05:FF:AE:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37372e302f32342d3234203d3e20323731333533.roa
Signing time:             Wed 25 Oct 2023 12:07:31 +0000
ROA not before:           Wed 25 Oct 2023 12:02:31 +0000
ROA not after:            Wed 23 Oct 2024 12:07:31 +0000
asID:                     271353
IP address blocks:        190.52.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:49:17:4a:15:f4:aa:17:ad:4c:75:83:76:14:32:ff:b6:ce:77:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A7136C82E81D3EC065F636CE46776805FFAE48
        Validity
            Not Before: Oct 25 12:02:31 2023 GMT
            Not After : Oct 23 12:07:31 2024 GMT
        Subject: CN=EA9015FC1F5AE46662020ADAF681C869A2EDFDF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:38:e0:b2:48:d9:b6:93:5f:c1:5a:30:6b:
                    9c:49:2e:05:ff:17:0e:0b:c2:b2:7d:54:12:a0:68:
                    e3:d1:e2:bb:9a:7b:4e:39:63:d0:65:4d:f2:c4:b1:
                    d1:0a:ed:ef:ea:9b:87:c9:89:5e:4d:d3:f3:c3:90:
                    f6:7e:d7:76:8d:84:8a:b1:08:92:93:13:c3:bc:b2:
                    1b:3e:e2:a4:d0:0c:f1:d0:72:32:ab:aa:aa:d5:bb:
                    82:d5:e3:fa:d0:ee:e5:40:f2:f6:b9:1e:63:68:d3:
                    a1:e5:14:2f:94:f8:6c:78:65:74:c0:20:f5:02:7f:
                    d1:ad:16:49:46:e8:0a:f8:2a:c8:aa:0f:66:15:f6:
                    6b:4e:aa:e2:18:e4:26:b0:49:0c:31:8c:dd:6b:7f:
                    c2:96:8b:a8:46:e2:a4:4a:3c:da:4d:43:d7:e1:fe:
                    03:9a:26:6d:fb:5f:bf:e1:2e:65:64:1f:a2:10:2a:
                    d1:4f:25:d0:91:a7:43:f1:1f:10:57:67:a7:c4:03:
                    f0:cc:f7:cb:9f:3d:1e:7b:cd:4d:64:eb:c4:39:31:
                    41:a3:73:93:b5:8e:87:47:fa:c4:d1:c9:b6:d8:cd:
                    2f:4c:bb:d8:fb:b4:c9:03:86:7e:29:db:ce:1f:bc:
                    68:22:f6:83:7c:ba:72:99:7b:9d:2d:5b:9f:22:52:
                    4e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:90:15:FC:1F:5A:E4:66:62:02:0A:DA:F6:81:C8:69:A2:ED:FD:F5
            X509v3 Authority Key Identifier:
                keyid:F5:A7:13:6C:82:E8:1D:3E:C0:65:F6:36:CE:46:77:68:05:FF:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37372e302f32342d3234203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:c9:f1:2b:65:7f:ba:9b:71:62:dc:47:79:18:5f:b3:c5:b6:
         5d:d9:3c:41:79:d1:f6:57:72:9f:81:0a:1f:4e:59:b0:e7:cd:
         e3:5b:4e:49:ab:a6:e1:84:4c:a9:6a:e8:39:21:f2:d4:86:db:
         1e:84:c6:21:20:ef:43:dc:45:db:30:ca:38:b3:32:93:20:34:
         5e:6b:bc:f8:99:39:b0:4d:65:6f:71:9b:01:9e:6b:54:1e:aa:
         db:4e:5e:65:07:b1:0c:e5:71:2a:c3:2e:fc:6c:5e:34:6b:b3:
         b0:11:5b:11:8c:3e:61:9d:1c:b2:bd:3b:a2:88:5b:4f:c5:28:
         66:29:6f:de:d8:36:f7:19:e4:5e:2f:13:79:d3:c6:89:f7:f1:
         d3:6d:7a:32:91:90:95:2c:c2:98:28:0c:fd:38:98:15:be:e0:
         da:16:b0:73:7b:ad:35:7d:70:41:10:7d:ca:64:75:32:c2:4e:
         a1:5b:87:ee:14:20:6c:a8:99:50:a2:24:12:57:4b:c5:7e:36:
         f6:e5:99:48:db:48:9c:e8:95:11:65:d1:5a:27:66:76:66:45:
         8a:ea:53:47:5f:2f:01:e5:63:52:d3:ff:3b:53:bb:2c:c8:0b:
         5c:ef:51:d3:01:70:4c:b9:ff:3a:56:98:4b:5a:8e:c2:79:8c:
         a0:31:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org