Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/3139302e38392e38332e302f32342d3234203d3e20323730333835.roa
File:                     3139302e38392e38332e302f32342d3234203d3e20323730333835.roa (raw, json)
Hash identifier:          XcYrr+iN57ux4tjUomn10vBpJVF5kTx3yXsKNK2QupQ=
Subject key identifier:   C0:AD:F7:48:99:5C:5B:CE:B2:33:56:D3:16:35:1F:58:E5:CB:7C:C4
Certificate issuer:       /CN=4C34B346745A328244B786515F4AA0C97B8EFABE
Certificate serial:       379B38E40204F715C5DDA2CAC6C6502F379D919E
Authority key identifier: 4C:34:B3:46:74:5A:32:82:44:B7:86:51:5F:4A:A0:C9:7B:8E:FA:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C34B346745A328244B786515F4AA0C97B8EFABE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/3139302e38392e38332e302f32342d3234203d3e20323730333835.roa
Signing time:             Sun 02 Apr 2023 07:00:11 +0000
ROA not before:           Sun 02 Apr 2023 06:55:11 +0000
ROA not after:            Sun 31 Mar 2024 07:00:11 +0000
asID:                     270385
IP address blocks:        190.89.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9b:38:e4:02:04:f7:15:c5:dd:a2:ca:c6:c6:50:2f:37:9d:91:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C34B346745A328244B786515F4AA0C97B8EFABE
        Validity
            Not Before: Apr  2 06:55:11 2023 GMT
            Not After : Mar 31 07:00:11 2024 GMT
        Subject: CN=C0ADF748995C5BCEB23356D316351F58E5CB7CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:f1:b1:d6:c6:70:43:52:cf:ec:9d:00:44:
                    94:62:03:13:fd:ea:f4:69:af:47:5f:27:87:3c:1a:
                    4d:35:db:1e:08:d4:cf:71:ce:e1:14:dc:24:4d:04:
                    f3:4d:ef:6d:97:18:78:74:00:8a:39:71:e7:3f:aa:
                    06:25:c2:5f:22:cd:ef:9b:6a:79:e4:df:f6:56:b3:
                    b5:1b:73:bc:6d:de:69:a5:25:92:cb:48:42:b7:1c:
                    ad:a6:f2:19:d0:39:27:cf:09:51:79:a5:9e:75:22:
                    a6:05:1b:c4:fb:de:b2:02:15:15:f7:f1:9a:72:3c:
                    79:ee:7a:6e:82:73:cb:9c:3c:21:9f:b3:ce:0b:8a:
                    68:e8:ca:97:4c:f9:9e:84:12:f2:78:5a:68:22:cc:
                    6b:8b:97:fd:e5:1a:15:4b:3f:fd:c5:18:96:34:9b:
                    96:42:5f:40:f1:21:f2:8a:09:fe:40:e6:94:85:80:
                    7c:6c:c8:73:41:55:e3:ab:47:b3:6d:65:2b:9d:34:
                    0e:83:3b:f6:fd:ed:b9:12:27:cc:b8:82:1d:a5:b1:
                    51:7c:b4:54:fe:9e:1e:30:6b:08:e0:37:78:eb:d1:
                    7c:36:8d:33:a6:fe:99:ef:0f:1d:24:69:f5:02:ad:
                    20:fc:1d:74:4d:1b:76:65:4d:38:aa:57:69:ba:0d:
                    a6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AD:F7:48:99:5C:5B:CE:B2:33:56:D3:16:35:1F:58:E5:CB:7C:C4
            X509v3 Authority Key Identifier:
                keyid:4C:34:B3:46:74:5A:32:82:44:B7:86:51:5F:4A:A0:C9:7B:8E:FA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/4C34B346745A328244B786515F4AA0C97B8EFABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C34B346745A328244B786515F4AA0C97B8EFABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6yFDuhbiPjKALtzVh9faWmcN1vZUJmj816FX16UNJva/0/3139302e38392e38332e302f32342d3234203d3e20323730333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:77:7a:72:b5:6c:95:bd:15:b2:9f:80:ef:bf:de:df:87:c0:
         01:2c:ee:e0:e5:fa:47:55:53:47:1e:32:9d:67:21:f4:3d:ed:
         3b:04:1c:d4:68:b4:22:47:96:1d:24:cd:ea:81:ef:4f:57:86:
         fd:6a:93:cb:aa:b3:90:37:c7:ff:8a:b9:4d:90:8c:b4:3f:6f:
         39:56:72:19:3d:00:38:a3:09:88:56:59:e0:fc:c4:ee:f5:43:
         47:1f:9c:fc:ae:ab:db:53:85:c0:e1:54:59:53:cd:8c:d2:9a:
         86:a3:ea:62:27:f9:e2:c5:19:e4:12:62:84:16:c5:9c:12:54:
         0a:e5:c4:4b:f3:99:5e:3e:59:76:98:68:95:fb:47:62:cb:be:
         97:46:78:ec:f5:d6:85:84:dc:ca:4b:ed:d0:d8:af:88:df:d1:
         94:c4:65:99:6e:c1:67:90:42:8a:2d:40:11:a8:47:65:6c:e5:
         f5:ba:94:34:e7:eb:dd:30:77:2f:76:4b:38:99:09:2a:5a:3e:
         48:a8:18:bf:34:8f:b8:20:5c:31:88:96:1a:9e:a6:74:32:94:
         0b:a1:4d:b3:8f:43:45:27:e3:eb:50:52:d0:05:60:27:15:c3:
         38:07:8f:4c:c6:6c:e7:ea:a6:ee:32:e7:2d:e8:09:10:26:b5:
         52:d7:3d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org