Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37382e302f32342d3234203d3e20323731333533.roa
File:                     3139302e35322e37382e302f32342d3234203d3e20323731333533.roa (raw, json)
Hash identifier:          1T+8BAm/fngXjNc7IHaiynBLCNVtD9NqCuM9O3f5d9s=
Subject key identifier:   0B:C2:25:A1:4E:E2:32:FC:61:17:B7:C5:F4:F6:53:80:AD:19:07:A3
Certificate issuer:       /CN=F5A7136C82E81D3EC065F636CE46776805FFAE48
Certificate serial:       68A198F383BD8ADB4988DC077A4AD4FAE8E62B8D
Authority key identifier: F5:A7:13:6C:82:E8:1D:3E:C0:65:F6:36:CE:46:77:68:05:FF:AE:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37382e302f32342d3234203d3e20323731333533.roa
Signing time:             Wed 25 Oct 2023 12:07:32 +0000
ROA not before:           Wed 25 Oct 2023 12:02:32 +0000
ROA not after:            Wed 23 Oct 2024 12:07:32 +0000
asID:                     271353
IP address blocks:        190.52.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a1:98:f3:83:bd:8a:db:49:88:dc:07:7a:4a:d4:fa:e8:e6:2b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A7136C82E81D3EC065F636CE46776805FFAE48
        Validity
            Not Before: Oct 25 12:02:32 2023 GMT
            Not After : Oct 23 12:07:32 2024 GMT
        Subject: CN=0BC225A14EE232FC6117B7C5F4F65380AD1907A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3e:5b:38:e3:35:27:ae:be:d0:66:28:ac:51:
                    d7:f5:1c:d7:21:ca:88:d9:17:bc:8e:9f:34:04:0a:
                    ec:89:76:a1:38:ad:9b:f4:d8:c2:31:c5:98:9a:dd:
                    8c:1d:f4:cb:e7:ad:ba:f2:b0:ea:a8:0a:79:49:7a:
                    6e:ba:fe:26:02:1b:8e:93:a1:39:89:41:0b:27:96:
                    c6:29:af:b1:d6:95:5e:78:1f:07:83:df:7d:71:59:
                    39:b3:98:42:46:1a:08:63:05:06:b5:77:50:83:b0:
                    57:65:bc:b8:8a:45:b8:5a:f5:42:4a:f7:cb:c1:f9:
                    50:58:33:8d:77:ea:15:52:b8:41:ea:81:53:65:27:
                    a8:cd:59:f1:71:db:e5:f3:2c:4e:3a:b7:d3:07:26:
                    1a:3f:07:dd:1a:72:02:9f:d3:57:7a:94:08:f6:0f:
                    32:b4:e8:36:b0:04:cf:94:9f:c5:1c:49:39:b4:25:
                    40:ad:ce:30:dc:81:13:0c:bf:60:9c:c7:86:14:73:
                    87:5e:7f:19:09:2c:72:08:95:c5:c9:96:a2:a4:6c:
                    4d:e8:55:56:c8:d9:51:94:bd:22:0b:57:26:d9:a2:
                    56:b0:81:4e:da:af:69:2f:f3:3b:7c:18:7d:9b:84:
                    98:1a:9b:88:6b:0d:0a:01:f7:6f:cb:76:5b:00:c0:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C2:25:A1:4E:E2:32:FC:61:17:B7:C5:F4:F6:53:80:AD:19:07:A3
            X509v3 Authority Key Identifier:
                keyid:F5:A7:13:6C:82:E8:1D:3E:C0:65:F6:36:CE:46:77:68:05:FF:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37382e302f32342d3234203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:cf:ae:c7:80:68:4d:9f:1f:21:9a:a8:79:fb:df:bf:e5:d3:
         75:9f:89:39:47:b1:87:ac:b7:84:58:0a:84:6c:dd:be:1b:01:
         e8:55:f4:4b:d0:12:40:20:42:e2:1d:b0:ec:86:8a:9d:cb:4a:
         f7:11:f5:6c:b1:99:f7:98:4f:3f:b9:fe:d0:42:06:3f:d6:4b:
         5a:1a:8b:00:3d:51:94:d9:bf:5d:cf:67:90:8e:46:74:02:a8:
         38:6e:51:5b:94:9c:13:6a:13:58:de:61:04:d9:1f:73:e9:23:
         f8:63:c3:a7:0e:35:c5:8c:3c:93:2c:29:bd:ac:61:3b:c5:66:
         7a:f8:35:b6:25:67:1a:fb:8d:9b:c1:b0:0c:14:d4:8a:9e:91:
         9b:ed:b1:ef:16:01:b5:d5:b4:92:b9:8b:d2:01:42:6a:4f:ac:
         01:0f:d6:ee:c2:20:57:a6:e2:a3:8a:40:a0:d4:ec:3e:b7:80:
         01:b0:27:93:d0:04:36:dc:f8:fd:8a:38:76:d1:48:a4:6f:3d:
         e7:91:2f:46:b7:2f:83:8d:77:d7:98:7b:7b:de:ad:57:e0:28:
         8c:ad:11:63:86:d8:34:34:a6:04:f7:87:db:99:67:61:26:7f:
         6e:9f:18:f5:32:1c:1c:c0:a0:bf:71:02:29:78:49:0f:97:8a:
         cc:87:92:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org