Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/3139302e38392e38322e302f32332d3233203d3e20323730333835.roa
File:                     3139302e38392e38322e302f32332d3233203d3e20323730333835.roa (raw, json)
Hash identifier:          ubRNHO2DrYr9G2PuCMMBdC3qTlaWfo8LI0pEzssGEGM=
Subject key identifier:   AE:F4:BB:10:42:18:FF:E0:41:42:FB:4F:DD:B0:80:AF:ED:82:67:92
Certificate issuer:       /CN=4C34B346745A328244B786515F4AA0C97B8EFABE
Certificate serial:       6A037DEBDDEC83076A88846C455D54D782D5F424
Authority key identifier: 4C:34:B3:46:74:5A:32:82:44:B7:86:51:5F:4A:A0:C9:7B:8E:FA:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C34B346745A328244B786515F4AA0C97B8EFABE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/3139302e38392e38322e302f32332d3233203d3e20323730333835.roa
Signing time:             Sun 02 Apr 2023 06:59:52 +0000
ROA not before:           Sun 02 Apr 2023 06:54:52 +0000
ROA not after:            Sun 31 Mar 2024 06:59:52 +0000
asID:                     270385
IP address blocks:        190.89.82.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:03:7d:eb:dd:ec:83:07:6a:88:84:6c:45:5d:54:d7:82:d5:f4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C34B346745A328244B786515F4AA0C97B8EFABE
        Validity
            Not Before: Apr  2 06:54:52 2023 GMT
            Not After : Mar 31 06:59:52 2024 GMT
        Subject: CN=AEF4BB104218FFE04142FB4FDDB080AFED826792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:67:28:41:e2:a5:aa:93:cc:f3:ec:a2:d3:
                    35:05:6c:21:45:9e:71:94:ea:57:84:66:62:ec:0f:
                    58:86:26:ce:62:52:bf:c1:bf:76:df:27:82:90:11:
                    c3:0f:7d:93:95:03:ce:c5:8f:d5:ee:d5:09:24:88:
                    bf:cc:a7:29:30:63:fc:47:9e:72:76:4b:26:79:74:
                    ae:be:c9:4c:d7:e9:1a:de:d0:98:5b:ab:01:6d:0e:
                    f9:c1:cb:66:dc:0e:42:60:4d:bd:84:54:6a:ab:84:
                    79:39:ef:3c:9f:8f:d3:b5:3b:02:1d:d9:92:fb:10:
                    52:e7:da:76:c6:48:bb:bf:7c:61:d4:8e:0f:fa:8d:
                    84:b7:d6:f4:d3:f0:a9:8b:68:c8:d2:3d:db:5f:af:
                    a7:01:8c:20:a7:70:54:45:55:4d:46:0f:cc:65:ce:
                    4b:44:8a:f9:b1:8b:08:a0:1a:8b:80:a2:a7:0a:93:
                    41:89:71:14:84:c3:3d:61:c8:9e:cf:da:b5:d5:f1:
                    cd:0b:9b:e1:9b:80:a3:b2:d5:c4:c8:97:33:2f:e3:
                    64:8b:b5:71:4e:6d:f6:13:b5:6a:06:a9:6d:08:40:
                    72:7b:62:68:bb:b0:c3:00:27:b6:2f:35:52:23:cf:
                    f3:e3:19:53:c2:9a:a0:89:9c:8a:f3:b3:ba:ac:b5:
                    a3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F4:BB:10:42:18:FF:E0:41:42:FB:4F:DD:B0:80:AF:ED:82:67:92
            X509v3 Authority Key Identifier:
                keyid:4C:34:B3:46:74:5A:32:82:44:B7:86:51:5F:4A:A0:C9:7B:8E:FA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/4C34B346745A328244B786515F4AA0C97B8EFABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C34B346745A328244B786515F4AA0C97B8EFABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/3139302e38392e38322e302f32332d3233203d3e20323730333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:64:40:8f:d0:13:05:7e:88:56:51:fd:a2:21:17:68:d0:00:
         65:14:fd:7a:75:43:e4:45:a5:84:26:17:0e:b4:65:c3:b3:8a:
         28:f1:2b:ee:38:a2:0b:6e:cd:e3:0d:c2:70:e5:cc:38:f1:e5:
         d3:47:3f:d1:1f:08:88:e4:0a:bc:0e:d8:fc:95:64:37:0e:a8:
         37:e9:1f:81:17:6d:8c:99:5a:7e:ee:ad:12:96:9f:06:2f:91:
         79:3e:e6:d7:ff:c6:47:27:3b:4f:8c:a0:20:55:16:2b:e0:90:
         b3:10:d1:a7:7c:d5:0e:9b:39:58:59:3c:5b:a5:4a:6b:05:74:
         7e:77:be:70:72:7f:2b:95:50:00:95:12:a9:05:cb:58:06:d8:
         80:f3:5a:4f:88:4d:84:c4:dc:21:7b:87:21:8a:9a:7c:af:89:
         1e:06:00:96:cb:e9:ad:82:66:55:97:74:0f:23:97:d8:df:ab:
         33:f6:e9:07:b3:3e:34:21:c8:8f:fb:ae:c6:de:18:4c:54:2f:
         91:26:43:25:f3:24:22:b2:69:1f:ff:12:3d:ca:40:a6:89:f0:
         dd:32:4f:35:69:a2:07:95:7a:8a:c5:cc:36:37:bf:fb:e6:61:
         4e:63:bf:51:ef:f7:4a:63:ca:d5:17:39:94:26:c3:56:ee:e9:
         a9:e7:61:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org