Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/0/3139322e3134302e32302e302f32322d3234203d3e20323731333736.roa
File:                     3139322e3134302e32302e302f32322d3234203d3e20323731333736.roa (raw, json)
Hash identifier:          I4sHe8UwY1as0wvw7+V8zcHBxg3c37rBZ2Ol5h+YQy8=
Subject key identifier:   27:9B:8F:2B:4F:E3:0F:28:75:A2:6E:8C:6C:FF:D0:79:B3:44:AB:52
Certificate issuer:       /CN=A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5
Certificate serial:       3169E3EF515BFD7E10DBFA054C246FAB1FF18049
Authority key identifier: A3:EF:70:86:C3:F6:DD:56:AC:E7:C8:59:6F:89:BC:53:DA:07:5E:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/0/3139322e3134302e32302e302f32322d3234203d3e20323731333736.roa
Signing time:             Tue 03 Oct 2023 12:38:27 +0000
ROA not before:           Tue 03 Oct 2023 12:33:27 +0000
ROA not after:            Tue 01 Oct 2024 12:38:27 +0000
asID:                     271376
IP address blocks:        192.140.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:69:e3:ef:51:5b:fd:7e:10:db:fa:05:4c:24:6f:ab:1f:f1:80:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5
        Validity
            Not Before: Oct  3 12:33:27 2023 GMT
            Not After : Oct  1 12:38:27 2024 GMT
        Subject: CN=279B8F2B4FE30F2875A26E8C6CFFD079B344AB52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5d:1e:81:9e:0a:9e:7e:e2:2d:f7:e1:49:85:
                    c2:3a:1c:1d:18:6b:c0:e4:d3:59:f3:41:6b:9f:88:
                    39:bd:50:1d:c4:8c:a2:ce:5f:9f:76:00:c7:c0:5d:
                    6f:65:f7:5d:87:36:34:05:8b:7a:1c:79:cf:98:f0:
                    b1:94:7b:ae:de:94:71:30:56:64:7a:59:02:29:5f:
                    f4:06:ca:17:70:33:8e:c6:f6:f9:fe:87:07:35:c0:
                    b9:d1:20:ff:ac:93:5a:bc:8c:06:43:ee:51:9d:cf:
                    82:21:05:4f:23:06:ec:02:ea:8d:49:95:fc:27:bb:
                    72:cb:53:c9:ff:54:6d:b2:95:55:3d:72:47:ce:ce:
                    4d:37:9d:1c:48:ae:97:8f:dd:75:7e:e6:44:b6:1a:
                    cf:b6:08:dc:7d:e1:cc:5f:84:cd:a6:76:82:0b:a6:
                    f4:39:4b:29:61:d7:2b:16:6a:84:8f:23:98:f7:e3:
                    f7:37:29:d0:52:1b:bd:ca:52:61:70:48:94:1a:4c:
                    ed:11:3a:3f:6f:a5:ff:a0:57:35:a3:7d:8d:65:18:
                    1e:6e:3a:82:60:fe:53:50:bf:04:33:32:c5:c0:08:
                    59:25:0a:83:ad:40:8b:91:17:e9:80:82:ea:ed:ba:
                    9a:21:bb:96:1f:4f:75:dd:fe:7f:56:83:fc:f8:34:
                    8a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9B:8F:2B:4F:E3:0F:28:75:A2:6E:8C:6C:FF:D0:79:B3:44:AB:52
            X509v3 Authority Key Identifier:
                keyid:A3:EF:70:86:C3:F6:DD:56:AC:E7:C8:59:6F:89:BC:53:DA:07:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/0/A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/0/3139322e3134302e32302e302f32322d3234203d3e20323731333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:63:7c:ad:fa:01:c2:c7:9d:bd:e0:60:3a:65:aa:d5:99:d3:
         8d:47:dd:50:db:d1:47:76:2d:bf:fe:b5:17:70:55:39:97:ff:
         70:b5:98:c1:2d:c2:1c:c6:ff:df:c2:67:a8:e3:b6:3a:6c:59:
         04:f8:13:d4:4b:2d:77:26:b4:bd:cf:e0:3a:88:01:01:4e:71:
         20:fa:14:43:fc:fa:9f:a8:5d:39:22:82:d4:cc:88:c1:68:35:
         79:a3:9b:77:d4:f2:e8:ad:b2:b5:8a:a9:de:73:2a:d1:48:2d:
         c8:49:3d:8d:4b:13:50:95:92:90:59:44:8c:e6:96:ce:2a:d5:
         96:31:47:25:07:31:f3:43:6d:c8:99:65:c0:19:c5:8b:6d:5c:
         67:0e:e9:d4:54:d1:89:bb:f0:6b:e4:bc:20:ab:71:8d:1e:c0:
         2e:d9:f4:65:65:07:5f:c1:33:2b:95:bb:8d:a1:c4:d9:04:e8:
         6d:19:a7:f6:09:2c:a1:f1:e5:14:23:3c:14:f9:43:74:d8:e2:
         53:42:58:c8:42:f9:b9:e5:da:9d:b2:a4:b0:b2:25:d8:73:ab:
         85:c1:29:20:ec:17:7b:45:81:fb:58:40:cb:e5:eb:31:63:c3:
         9d:31:a5:e4:a3:55:6e:54:d8:c5:4e:26:31:24:ae:e9:be:c7:
         28:3b:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org