Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/2/3139302e3131312e3132382e302f32332d3233203d3e20323730333832.roa
File:                     3139302e3131312e3132382e302f32332d3233203d3e20323730333832.roa (raw, json)
Hash identifier:          eX9ldyFLnY0MSZ9dBubQWJvV/dPW8UZY7oAmZdFytV4=
Subject key identifier:   70:4E:2C:83:36:45:25:6E:E8:8C:8E:CF:08:05:AE:EA:0E:EA:E1:9C
Certificate issuer:       /CN=1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE
Certificate serial:       3CA2D0522983D14E2021B597081936FC42B52B48
Authority key identifier: 1C:15:C3:9C:0C:AD:61:2E:A9:07:C3:6F:3F:AF:EC:6B:8A:78:CE:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/2/3139302e3131312e3132382e302f32332d3233203d3e20323730333832.roa
Signing time:             Wed 13 Sep 2023 21:36:40 +0000
ROA not before:           Wed 13 Sep 2023 21:31:40 +0000
ROA not after:            Wed 11 Sep 2024 21:36:40 +0000
asID:                     270382
IP address blocks:        190.111.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a2:d0:52:29:83:d1:4e:20:21:b5:97:08:19:36:fc:42:b5:2b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE
        Validity
            Not Before: Sep 13 21:31:40 2023 GMT
            Not After : Sep 11 21:36:40 2024 GMT
        Subject: CN=704E2C833645256EE88C8ECF0805AEEA0EEAE19C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:30:89:3d:81:84:df:85:9c:09:cb:6b:9c:7c:
                    15:26:b6:cc:5f:c6:1d:e3:4d:28:df:4f:be:e5:18:
                    eb:f1:e4:a8:a2:ab:42:10:8b:cc:53:de:14:52:d8:
                    e5:aa:bf:b9:9d:c4:52:2f:99:92:ef:88:0c:35:18:
                    4e:78:3e:c8:cd:89:bb:0e:76:2b:6f:5e:b6:a5:d7:
                    c3:8c:49:24:33:57:3e:a1:47:0e:03:d1:62:4f:58:
                    72:09:c4:5e:36:8e:e2:1d:39:55:bf:d4:c3:38:2e:
                    7f:1e:29:5d:56:0a:01:10:e9:4d:05:02:af:f4:4a:
                    85:a4:37:69:c8:b3:c6:3b:89:32:87:2f:92:08:08:
                    0c:3a:5a:fa:4a:9a:ba:92:f6:6d:38:85:aa:f8:e9:
                    eb:1a:a0:5e:e3:9a:ae:a8:d0:74:f7:8b:6d:ad:39:
                    05:82:99:4d:15:3d:81:44:1d:84:c1:96:13:4b:e5:
                    4a:27:94:2e:bc:f6:f6:b0:56:9b:b1:d2:6c:88:65:
                    c6:a6:41:2c:27:f9:3d:ce:e0:ac:cc:05:86:db:11:
                    a2:8b:d7:31:aa:8c:ed:42:25:87:6b:4a:af:2e:bf:
                    f8:22:ec:2e:5e:89:44:bc:30:1a:f2:d6:39:6c:bb:
                    51:4f:3b:13:50:a4:cc:24:35:f1:2f:51:ef:a8:e3:
                    d1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4E:2C:83:36:45:25:6E:E8:8C:8E:CF:08:05:AE:EA:0E:EA:E1:9C
            X509v3 Authority Key Identifier:
                keyid:1C:15:C3:9C:0C:AD:61:2E:A9:07:C3:6F:3F:AF:EC:6B:8A:78:CE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/2/1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/2/3139302e3131312e3132382e302f32332d3233203d3e20323730333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:4a:73:90:35:bd:2a:15:9e:29:ec:bc:aa:d1:21:e4:fe:07:
         35:43:4f:f1:77:9a:dd:4c:51:ff:c2:81:90:de:be:f8:9b:92:
         f1:ef:e0:6b:0c:8b:b4:fd:86:59:79:04:f9:b0:76:a0:0f:2c:
         11:d1:4a:64:e4:a0:e7:08:16:67:a6:d8:ed:d5:a8:96:f4:46:
         d4:4f:f1:0a:f0:b9:aa:ea:75:5f:92:e1:72:46:3d:4a:bc:08:
         94:37:24:9b:66:0c:54:9e:a1:27:38:c0:8f:96:6a:89:8c:01:
         33:b5:09:b5:ec:80:8f:a4:ec:1d:90:73:22:f7:78:60:42:e7:
         3b:65:5b:ad:a0:78:11:e5:f3:72:a0:cb:97:90:a3:09:de:79:
         51:e9:03:40:b0:07:6f:a8:55:78:b3:7b:02:d9:c4:31:8f:93:
         8c:9c:74:0c:c0:4e:4c:48:11:38:a8:73:59:1f:35:8a:84:58:
         bd:ed:cd:b8:f3:a6:75:0e:37:70:21:9e:d0:cd:f5:9a:59:54:
         e7:ed:99:be:65:71:de:1b:d3:fc:a3:61:54:3f:6f:ea:74:a0:
         99:0b:8e:a5:46:36:fb:aa:81:89:69:2e:08:22:e3:55:b2:da:
         85:03:53:0f:2d:61:13:c6:79:9a:e9:12:d3:c1:4d:1d:38:43:
         34:ca:8b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org