Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37382e302f32342d3332203d3e20323731333533.roa
File:                     3139302e35322e37382e302f32342d3332203d3e20323731333533.roa (raw, json)
Hash identifier:          /AqtlaPVCyHMMtu6sUAsBHn7a2ORpKp81Y11UPHRVmc=
Subject key identifier:   22:6D:F8:58:C7:EC:8C:C3:5C:FB:AA:3C:EA:14:FC:F5:E6:EF:11:2F
Certificate issuer:       /CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
Certificate serial:       46EC1535679D1032A5D15F14F2E27C7A3FD4E25A
Authority key identifier: DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37382e302f32342d3332203d3e20323731333533.roa
Signing time:             Tue 28 Feb 2023 13:45:04 +0000
ROA not before:           Tue 28 Feb 2023 13:40:04 +0000
ROA not after:            Tue 27 Feb 2024 13:45:04 +0000
asID:                     271353
IP address blocks:        190.52.78.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ec:15:35:67:9d:10:32:a5:d1:5f:14:f2:e2:7c:7a:3f:d4:e2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
        Validity
            Not Before: Feb 28 13:40:04 2023 GMT
            Not After : Feb 27 13:45:04 2024 GMT
        Subject: CN=226DF858C7EC8CC35CFBAA3CEA14FCF5E6EF112F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:04:08:3c:df:3a:1a:3d:39:cc:3b:f1:a0:2c:
                    36:20:6c:ca:a3:ff:28:73:1b:2b:41:ab:eb:6e:c7:
                    d4:e7:02:e3:12:84:01:03:d1:26:38:d7:bd:1d:b9:
                    72:b2:15:07:84:04:01:15:85:49:74:b4:97:a6:d9:
                    d6:c7:bb:36:b4:60:3e:d5:32:4b:1f:1a:5a:08:96:
                    6b:5c:41:ec:b5:2a:e6:0c:bd:2e:99:b8:22:c0:75:
                    64:cf:7c:09:da:c6:eb:f1:69:b3:9c:48:c5:f9:a6:
                    77:20:03:8f:56:6c:a5:59:78:e0:73:2e:1b:c5:7d:
                    41:68:26:ee:d0:21:cd:1d:28:cb:1e:f3:66:32:c2:
                    a4:cf:ca:75:c5:0c:7d:ba:56:b1:9c:dd:d6:b4:83:
                    61:c8:c6:23:1d:31:2c:97:89:88:40:ab:79:7e:e7:
                    46:29:d3:60:84:93:95:26:9c:41:10:2b:31:97:a6:
                    7a:04:90:77:60:41:85:e5:49:4b:a1:c3:ee:57:42:
                    8c:6f:71:47:90:fd:0d:07:12:89:93:8d:44:cd:83:
                    7b:ce:f3:1f:b8:04:f3:9b:cd:c5:61:18:ce:e7:be:
                    d3:9d:cd:b9:dc:c2:94:61:53:ae:fe:b9:ec:8b:70:
                    1a:18:e1:f1:e1:2b:fc:20:1e:4a:41:3f:56:66:42:
                    f6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6D:F8:58:C7:EC:8C:C3:5C:FB:AA:3C:EA:14:FC:F5:E6:EF:11:2F
            X509v3 Authority Key Identifier:
                keyid:DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37382e302f32342d3332203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:e0:57:42:d6:11:99:c1:13:8e:6c:e9:b3:57:70:38:f9:6d:
         fc:52:f9:2a:93:03:13:d9:fe:09:1d:e7:cb:67:0e:74:b1:d9:
         09:81:97:d0:69:b4:87:12:92:b1:5c:81:45:3a:42:a4:88:52:
         21:42:89:ca:fa:b3:36:f0:f0:8c:a9:5d:30:2a:e8:ac:21:d4:
         55:74:e6:24:ed:70:ff:c4:16:a7:0d:a2:80:de:6b:1a:ac:ec:
         de:77:3e:31:f3:1c:9f:81:d7:47:23:85:f5:02:3b:4d:8a:43:
         fe:b8:72:1f:e0:e1:35:54:14:00:fd:1b:a2:22:43:ff:b4:4b:
         db:e3:68:7e:3b:d3:e4:14:19:72:33:c8:f0:0a:05:fa:a2:dd:
         5b:a9:2a:1d:bd:66:db:db:77:d4:d5:0c:9b:18:58:d1:52:ca:
         6a:5d:9d:c9:4f:2e:5b:a1:1b:e1:57:67:ff:08:b2:ea:04:b6:
         9e:11:22:b4:93:e9:95:90:2b:c7:84:b8:81:cf:f0:50:3b:ae:
         f5:b4:c7:82:90:bc:18:11:d9:66:03:bb:2e:37:aa:37:78:7a:
         c0:25:36:61:df:2e:62:2c:11:ad:63:81:64:f4:5e:f5:48:e3:
         7b:b5:03:4c:b4:43:a4:3b:f1:96:33:6c:c3:29:bf:5e:47:71:
         9d:97:56:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org