Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37382e302f32342d3234203d3e20323633393137.roa
File:                     3139302e35322e37382e302f32342d3234203d3e20323633393137.roa (raw, json)
Hash identifier:          digijuRqKpivzOcV21e8/aVWegLdDbFWGaG0cNEFmoA=
Subject key identifier:   B6:09:F9:94:68:DA:53:F6:CE:83:2E:E4:B3:D4:CC:18:29:9C:A9:08
Certificate issuer:       /CN=F5A7136C82E81D3EC065F636CE46776805FFAE48
Certificate serial:       3B3EB51F885C439654E624C4375D4581C0CAC6A2
Authority key identifier: F5:A7:13:6C:82:E8:1D:3E:C0:65:F6:36:CE:46:77:68:05:FF:AE:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37382e302f32342d3234203d3e20323633393137.roa
Signing time:             Wed 08 Nov 2023 23:50:20 +0000
ROA not before:           Wed 08 Nov 2023 23:45:20 +0000
ROA not after:            Wed 06 Nov 2024 23:50:20 +0000
asID:                     263917
IP address blocks:        190.52.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3e:b5:1f:88:5c:43:96:54:e6:24:c4:37:5d:45:81:c0:ca:c6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A7136C82E81D3EC065F636CE46776805FFAE48
        Validity
            Not Before: Nov  8 23:45:20 2023 GMT
            Not After : Nov  6 23:50:20 2024 GMT
        Subject: CN=B609F99468DA53F6CE832EE4B3D4CC18299CA908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:4c:da:54:29:94:5f:ed:5e:da:0b:2e:4d:
                    03:ef:51:56:6d:3f:4a:a6:db:d6:13:88:29:bd:ec:
                    a1:7b:db:cb:a9:99:f4:92:02:6f:a5:20:35:d0:4a:
                    86:c9:9e:10:dd:e9:e3:9d:01:b0:25:0f:25:e0:1b:
                    27:b8:b0:76:6f:87:36:e0:40:44:d8:f1:ec:df:c7:
                    cf:f8:b8:69:25:bf:ae:fd:d0:54:4d:3b:88:7d:04:
                    62:f0:48:33:78:c2:51:d2:26:9d:ce:e8:25:ff:22:
                    ce:47:55:ba:d9:07:5c:fb:83:e8:5b:67:f3:da:31:
                    75:84:3d:d3:1c:d3:c9:90:b3:29:a3:72:6e:91:79:
                    0d:aa:e9:fb:fc:f8:f4:64:cb:d9:a4:cc:aa:48:22:
                    89:17:ff:0a:04:06:6e:8f:28:00:04:b5:f1:fd:aa:
                    5d:ae:58:b1:ce:12:00:13:7e:48:67:d3:14:03:90:
                    8d:78:4c:9e:92:04:38:fb:f5:5d:d5:29:15:36:2b:
                    c8:e8:49:63:47:e6:ae:d6:59:bc:87:2e:48:f9:cc:
                    69:ea:6f:3c:b8:b6:c5:bb:c9:9f:d4:f6:30:f2:ef:
                    6e:fc:02:a5:97:51:68:9e:e6:be:1c:96:6d:85:57:
                    90:bd:7c:53:c3:41:9d:17:e1:10:d2:81:03:81:fc:
                    ae:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:09:F9:94:68:DA:53:F6:CE:83:2E:E4:B3:D4:CC:18:29:9C:A9:08
            X509v3 Authority Key Identifier:
                keyid:F5:A7:13:6C:82:E8:1D:3E:C0:65:F6:36:CE:46:77:68:05:FF:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37382e302f32342d3234203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:67:71:40:15:35:89:d4:90:1a:6f:16:1f:a4:c9:ae:5f:4b:
         bd:dd:8d:16:82:9c:b1:7e:6f:85:1e:23:ba:e2:5c:69:b7:93:
         bc:21:3e:bf:ed:2c:f4:e0:5d:9a:15:6f:f0:6e:30:7b:2a:1e:
         10:b4:77:39:aa:1e:70:a5:25:91:9b:af:ea:0c:f5:08:8e:49:
         cf:1d:35:e3:0e:87:d0:d4:9a:a6:97:d7:68:98:81:5f:94:10:
         16:c2:67:12:78:33:d3:e8:36:ef:dd:78:86:ec:ed:d6:a9:cd:
         2d:0a:84:96:e4:6a:81:16:e7:61:79:2d:b1:87:76:2f:82:31:
         e7:fc:c0:b4:b2:28:87:5d:01:29:31:83:8c:81:8a:5a:ca:70:
         ea:e7:1c:1d:68:a8:0a:9f:b4:5c:f4:e1:cf:a3:9a:cb:65:56:
         42:aa:7a:7a:12:56:d9:6d:98:d7:d6:88:49:d5:44:f1:47:2b:
         cb:d5:a6:9f:77:5a:c7:77:5b:6c:81:f1:b8:7c:3b:f1:41:c8:
         f3:b1:7b:f1:96:a4:46:ed:3b:62:bc:92:59:9a:ad:de:d6:72:
         ff:dd:7e:52:ba:80:76:56:e9:15:c3:82:df:20:ff:41:ce:de:
         f3:d1:c5:7f:9a:4b:18:66:98:d4:36:8d:38:00:6f:4d:76:d2:
         e5:2a:e5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org