Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/3139302e3131312e3133312e302f32342d3234203d3e20323730333832.roa
File:                     3139302e3131312e3133312e302f32342d3234203d3e20323730333832.roa (raw, json)
Hash identifier:          kjzjFoP+uUxpnID5RZhLxJr9tTBJI0ybxfi8QsIK8ow=
Subject key identifier:   A5:DC:14:25:D1:56:26:E0:30:78:DE:37:5A:E6:99:99:FD:24:19:28
Certificate issuer:       /CN=85192C5FA856A20D36DBD2155B9F94D2C94DFA3F
Certificate serial:       47752637F94186D6BE7B5C5CB543B218F55A9A3C
Authority key identifier: 85:19:2C:5F:A8:56:A2:0D:36:DB:D2:15:5B:9F:94:D2:C9:4D:FA:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/3139302e3131312e3133312e302f32342d3234203d3e20323730333832.roa
Signing time:             Mon 18 Dec 2023 19:19:26 +0000
ROA not before:           Mon 18 Dec 2023 19:14:26 +0000
ROA not after:            Mon 16 Dec 2024 19:19:26 +0000
asID:                     270382
IP address blocks:        190.111.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:75:26:37:f9:41:86:d6:be:7b:5c:5c:b5:43:b2:18:f5:5a:9a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85192C5FA856A20D36DBD2155B9F94D2C94DFA3F
        Validity
            Not Before: Dec 18 19:14:26 2023 GMT
            Not After : Dec 16 19:19:26 2024 GMT
        Subject: CN=A5DC1425D15626E03078DE375AE69999FD241928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:ce:f0:a4:9e:29:11:b2:84:3c:9a:00:c2:
                    e6:65:0b:2b:83:d9:cb:a1:22:03:eb:7e:5e:7f:ac:
                    f2:ac:18:d1:26:70:e1:85:de:2a:05:e7:19:36:55:
                    6a:fc:26:7f:40:cc:2c:14:eb:5f:d0:2a:b5:79:6f:
                    a0:a2:6a:ac:40:78:48:c2:87:ff:1e:29:5b:8e:05:
                    2f:76:6c:40:f7:b0:77:91:25:45:51:9b:bd:82:8e:
                    19:db:d8:b9:c7:1c:c1:02:95:c8:63:8b:0f:9b:81:
                    d6:a6:9f:06:cc:5a:cc:20:b2:eb:43:e3:a4:f4:1a:
                    5b:68:d1:60:4c:6e:cc:5b:52:5e:b9:33:5e:08:0c:
                    60:81:c9:ca:43:0a:ea:bb:e6:fe:8a:5c:91:88:9a:
                    65:57:6d:fc:36:02:90:12:a8:3d:40:80:d7:75:8a:
                    6d:a6:76:75:55:f2:43:1e:82:52:1c:53:b2:df:c5:
                    fa:60:bd:96:38:48:2d:93:05:3a:8e:3b:b5:f1:86:
                    12:13:0b:e7:50:06:12:11:31:50:35:49:ee:6f:98:
                    f1:b9:9d:b3:1e:cb:b9:a6:d4:4a:a2:63:f7:03:68:
                    70:e6:64:1d:cf:66:7b:3f:fd:91:23:ae:fc:4d:a1:
                    8f:37:cc:97:54:8b:bb:66:53:59:18:05:c6:14:54:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DC:14:25:D1:56:26:E0:30:78:DE:37:5A:E6:99:99:FD:24:19:28
            X509v3 Authority Key Identifier:
                keyid:85:19:2C:5F:A8:56:A2:0D:36:DB:D2:15:5B:9F:94:D2:C9:4D:FA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/3139302e3131312e3133312e302f32342d3234203d3e20323730333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:a4:08:98:c2:f6:0a:0e:02:d1:77:94:e1:27:f1:93:41:16:
         48:bf:24:72:ef:ec:18:29:12:80:b5:ec:84:34:81:88:9d:3a:
         10:33:cd:0a:9b:18:8b:01:43:3e:6d:9d:20:5b:83:70:dd:ca:
         8a:7f:3f:04:88:0c:f3:e2:45:6d:36:2a:5a:84:bd:f1:57:0d:
         66:5d:35:60:34:87:85:a1:53:a4:de:69:fa:21:19:bd:c6:85:
         f2:81:1c:7c:59:72:7a:9d:04:18:25:b6:52:4b:cb:47:41:79:
         7e:50:8d:59:a5:28:18:e7:dc:cc:1c:da:56:26:a5:37:a4:4d:
         a3:7b:24:d8:b1:c9:33:12:6c:fa:38:2b:9a:be:2e:84:12:63:
         bf:e6:e2:28:29:1a:c2:97:f5:cd:58:0a:7c:1c:0f:61:38:68:
         60:00:e2:71:1b:1f:d5:f5:8b:04:ec:75:db:b8:6a:03:df:7d:
         52:05:90:d6:4d:1a:9b:f9:ca:a3:47:39:64:02:c8:71:0c:cb:
         a9:a0:64:0c:34:13:ff:eb:33:6c:c0:7e:ff:31:c0:da:b1:10:
         d5:6f:7f:b1:2f:b3:9f:b3:d7:57:a4:fc:82:62:53:ec:00:0f:
         55:30:2d:d6:7a:98:b7:be:c0:37:f6:6a:1b:f7:73:1b:15:bb:
         2b:7f:9d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org