Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/3139302e38392e38312e302f32342d3234203d3e20323730333835.roa
File:                     3139302e38392e38312e302f32342d3234203d3e20323730333835.roa (raw, json)
Hash identifier:          uh9rTXHe2pEDqFmkS+7H761NecV/xBsEcNvBhje6tqo=
Subject key identifier:   EB:81:BB:CA:48:18:44:4E:B9:A7:C0:D1:02:EF:E9:FC:08:2B:CD:73
Certificate issuer:       /CN=4C34B346745A328244B786515F4AA0C97B8EFABE
Certificate serial:       218771C78961EB0999CC8ED8D8F03B8779BBD8E9
Authority key identifier: 4C:34:B3:46:74:5A:32:82:44:B7:86:51:5F:4A:A0:C9:7B:8E:FA:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C34B346745A328244B786515F4AA0C97B8EFABE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/3139302e38392e38312e302f32342d3234203d3e20323730333835.roa
Signing time:             Sun 02 Apr 2023 06:59:49 +0000
ROA not before:           Sun 02 Apr 2023 06:54:49 +0000
ROA not after:            Sun 31 Mar 2024 06:59:49 +0000
asID:                     270385
IP address blocks:        190.89.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:87:71:c7:89:61:eb:09:99:cc:8e:d8:d8:f0:3b:87:79:bb:d8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C34B346745A328244B786515F4AA0C97B8EFABE
        Validity
            Not Before: Apr  2 06:54:49 2023 GMT
            Not After : Mar 31 06:59:49 2024 GMT
        Subject: CN=EB81BBCA4818444EB9A7C0D102EFE9FC082BCD73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a3:c1:1a:65:80:e6:a2:51:b8:49:a2:5f:a4:
                    42:88:9f:63:34:41:76:bb:86:27:03:8d:a9:1c:53:
                    96:a4:ed:ce:39:37:fb:c4:68:50:05:4f:71:49:e2:
                    e5:ef:8c:26:10:4e:6b:10:fc:96:1e:a6:1d:53:6e:
                    17:cd:19:e7:2c:1d:88:ae:15:e4:35:2a:50:49:c7:
                    a2:f6:b5:fb:d9:ae:5e:a9:0f:fb:78:15:7b:a4:bf:
                    cd:dc:c9:f7:bd:27:1d:9d:65:c9:42:a4:55:2d:fa:
                    bd:3d:b3:7d:f2:ab:2d:e7:e2:91:04:6e:67:ca:45:
                    d8:50:b9:69:47:44:04:a1:a7:33:e1:ed:dd:a9:64:
                    26:fb:d3:bb:35:de:2f:3d:7b:22:f6:5b:3d:e1:9b:
                    66:b2:71:a6:69:e3:6a:5d:17:f4:e9:65:49:ac:62:
                    e3:da:7c:15:99:56:14:0e:4f:87:f7:13:36:2f:4a:
                    5c:a6:20:06:39:c4:a0:65:20:c3:12:30:6f:e7:09:
                    7c:31:26:36:43:bf:74:1e:f2:29:ec:6e:83:66:2e:
                    a3:e4:7f:3a:46:f4:89:65:9f:37:0a:ac:2d:e3:16:
                    bd:d2:44:08:5f:83:00:66:79:5a:55:65:06:59:72:
                    f2:56:ff:95:6d:91:c7:c7:9f:22:18:95:27:90:80:
                    29:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:81:BB:CA:48:18:44:4E:B9:A7:C0:D1:02:EF:E9:FC:08:2B:CD:73
            X509v3 Authority Key Identifier:
                keyid:4C:34:B3:46:74:5A:32:82:44:B7:86:51:5F:4A:A0:C9:7B:8E:FA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/4C34B346745A328244B786515F4AA0C97B8EFABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C34B346745A328244B786515F4AA0C97B8EFABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/3139302e38392e38312e302f32342d3234203d3e20323730333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:60:e8:7c:ee:a9:73:6e:fe:4a:92:1a:01:1e:69:bb:63:63:
         8d:7c:43:a8:c9:b9:1c:f0:68:da:be:60:b8:9e:26:41:3a:cb:
         e2:74:7b:d3:23:24:06:18:8a:f5:dc:84:7f:5a:82:5d:ab:60:
         7f:23:31:47:02:d7:eb:c4:1f:39:11:43:f4:01:dd:90:9a:d8:
         56:b7:9d:dd:2e:ce:35:16:8c:8f:b1:d9:22:24:83:78:6e:dd:
         0c:c1:30:00:b3:39:37:7f:6d:1f:06:8f:e5:40:b0:32:92:f8:
         1f:65:5f:f0:f6:37:4c:23:c8:16:2a:4b:21:2b:eb:30:d3:52:
         3e:d8:01:07:28:04:d2:45:93:3d:ce:89:51:5b:32:d5:42:0f:
         68:27:f3:40:0c:fe:ba:f6:ef:4f:be:3f:5b:38:17:66:6c:a8:
         63:0e:dd:c6:74:50:cc:5b:ba:9f:b1:59:cb:4a:5e:dd:1e:bd:
         5f:4f:ff:63:4c:82:80:23:66:50:50:ea:5d:c5:ea:c6:31:8b:
         b8:78:25:6b:00:b2:47:14:9a:71:3a:54:a6:6c:84:17:41:40:
         cb:78:f8:10:6b:05:05:b3:fa:d5:50:6f:c4:9e:c1:f2:6f:29:
         0d:8d:d8:ac:70:71:50:e3:5d:59:fa:89:53:3f:d3:75:9d:26:
         c4:11:99:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org