Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/3139302e38392e38302e302f32342d3234203d3e20323730333835.roa
File:                     3139302e38392e38302e302f32342d3234203d3e20323730333835.roa (raw, json)
Hash identifier:          U9xmTZ37rvBGGtaqoNJ8BrO9ZQeOc9H58VBcyNf+91Y=
Subject key identifier:   A2:A5:BF:3A:9B:E6:D4:F9:70:01:8A:01:CD:32:3C:CB:2D:E4:80:16
Certificate issuer:       /CN=4C34B346745A328244B786515F4AA0C97B8EFABE
Certificate serial:       1309732E412642A3B4AC0BAF95EFC4AA3E7F86F2
Authority key identifier: 4C:34:B3:46:74:5A:32:82:44:B7:86:51:5F:4A:A0:C9:7B:8E:FA:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C34B346745A328244B786515F4AA0C97B8EFABE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/3139302e38392e38302e302f32342d3234203d3e20323730333835.roa
Signing time:             Sun 02 Apr 2023 06:59:42 +0000
ROA not before:           Sun 02 Apr 2023 06:54:42 +0000
ROA not after:            Sun 31 Mar 2024 06:59:42 +0000
asID:                     270385
IP address blocks:        190.89.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:09:73:2e:41:26:42:a3:b4:ac:0b:af:95:ef:c4:aa:3e:7f:86:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C34B346745A328244B786515F4AA0C97B8EFABE
        Validity
            Not Before: Apr  2 06:54:42 2023 GMT
            Not After : Mar 31 06:59:42 2024 GMT
        Subject: CN=A2A5BF3A9BE6D4F970018A01CD323CCB2DE48016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:a4:25:ad:01:8a:36:72:11:b6:d6:8d:2f:
                    47:14:7c:8e:9e:6d:16:9c:55:96:26:ca:c6:c0:b0:
                    07:d3:9f:40:a3:56:28:8b:b2:79:05:4f:40:90:15:
                    ca:ed:a5:ec:4e:97:e0:b7:1d:16:c3:62:81:fa:31:
                    31:0c:e2:27:d7:57:9e:4a:45:36:9c:d3:e4:da:d7:
                    a4:fd:8d:b1:44:47:08:26:e4:b4:a0:95:8b:23:fe:
                    01:32:c7:c6:5b:d1:ec:5d:6a:90:0e:c6:9f:63:83:
                    ec:15:cf:27:f4:09:15:5c:c0:ea:ad:cd:f7:15:f9:
                    43:fd:27:04:41:ec:d7:0c:a7:f2:7d:89:1c:cc:2d:
                    1b:29:7f:d9:5b:76:77:b6:85:78:76:e6:ad:99:90:
                    6e:12:d2:c0:b2:4f:dc:ce:50:e1:53:22:21:20:64:
                    0e:d0:eb:81:2c:d9:67:c1:b0:64:c9:dc:b7:fc:23:
                    7c:93:18:6f:ad:4d:05:bb:73:73:11:7a:04:4e:e8:
                    b7:75:dd:19:9d:a8:28:3e:d8:f2:7d:0c:94:17:10:
                    e9:8a:32:02:e7:bd:8c:fb:7b:9e:62:82:51:b4:b6:
                    6c:27:96:dc:14:5e:6d:6f:db:a7:f6:91:49:cc:5c:
                    11:52:2b:1d:0f:b8:26:fb:da:ef:4e:3d:b7:7f:c8:
                    7c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A5:BF:3A:9B:E6:D4:F9:70:01:8A:01:CD:32:3C:CB:2D:E4:80:16
            X509v3 Authority Key Identifier:
                keyid:4C:34:B3:46:74:5A:32:82:44:B7:86:51:5F:4A:A0:C9:7B:8E:FA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/4C34B346745A328244B786515F4AA0C97B8EFABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C34B346745A328244B786515F4AA0C97B8EFABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/3139302e38392e38302e302f32342d3234203d3e20323730333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:f5:0b:01:a4:aa:75:17:03:1f:58:f3:80:a3:8e:69:c7:ab:
         14:db:14:ff:37:f7:80:8e:d0:7b:f6:d5:d7:b5:79:93:11:4b:
         7d:cd:61:9c:2a:97:db:59:1a:e0:d5:d4:eb:17:24:77:83:1c:
         81:99:5b:7f:c9:d7:00:4b:62:ac:2b:11:ee:c4:88:11:e8:20:
         02:c3:fc:64:65:94:37:b1:bc:d1:dc:35:9a:5e:90:1e:31:15:
         36:22:ff:bd:df:71:0e:ee:8c:91:9d:c2:72:24:1c:ca:7f:d5:
         ee:6c:c7:18:d8:9b:01:bb:af:8e:3f:91:f2:9a:89:dc:fa:fe:
         85:c3:fa:99:41:55:0e:db:f7:2f:63:67:94:d1:f1:d8:1f:d1:
         86:04:f8:a7:9a:89:48:5c:37:2a:54:f5:86:d7:45:44:1b:72:
         02:bc:1a:8f:79:e1:0e:f9:3b:7e:a9:e4:60:a1:c6:98:ca:d6:
         22:ba:41:52:30:2d:f7:a3:68:10:40:37:80:59:5c:0c:d9:a8:
         e1:e9:d1:c6:91:d7:83:a5:c7:29:aa:7f:86:44:c4:99:29:3b:
         2d:f8:fd:a7:fe:d5:53:e0:03:8d:d7:0c:7c:bc:ae:49:80:cf:
         83:7a:7b:72:ad:e9:42:f9:05:85:90:dd:a7:a0:7b:a2:64:92:
         de:b6:68:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org