Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/2/3139302e3131312e3132382e302f32342d3234203d3e20323730333832.roa
File:                     3139302e3131312e3132382e302f32342d3234203d3e20323730333832.roa (raw, json)
Hash identifier:          lazO3rZCEaiZX1L7bASy84YRIwO1lRFWKDBkFpMBvSw=
Subject key identifier:   C7:BF:02:09:E2:AD:57:00:71:9A:F1:F8:30:3E:33:53:57:F1:E9:EE
Certificate issuer:       /CN=1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE
Certificate serial:       583E16441023DD5CCA20E8D2410E1B469B98ACF8
Authority key identifier: 1C:15:C3:9C:0C:AD:61:2E:A9:07:C3:6F:3F:AF:EC:6B:8A:78:CE:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/2/3139302e3131312e3132382e302f32342d3234203d3e20323730333832.roa
Signing time:             Wed 13 Sep 2023 21:36:40 +0000
ROA not before:           Wed 13 Sep 2023 21:31:40 +0000
ROA not after:            Wed 11 Sep 2024 21:36:40 +0000
asID:                     270382
IP address blocks:        190.111.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3e:16:44:10:23:dd:5c:ca:20:e8:d2:41:0e:1b:46:9b:98:ac:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE
        Validity
            Not Before: Sep 13 21:31:40 2023 GMT
            Not After : Sep 11 21:36:40 2024 GMT
        Subject: CN=C7BF0209E2AD5700719AF1F8303E335357F1E9EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:84:e6:f4:84:3f:54:55:93:81:00:bf:12:d9:
                    a4:62:7d:1b:19:3c:a0:fb:18:dc:66:91:6a:79:e9:
                    36:e7:20:86:ca:23:2c:d9:7e:c7:bf:39:00:90:cd:
                    89:5c:ac:7d:a9:24:63:68:d4:e7:b0:1a:25:49:e3:
                    66:f4:0b:b0:11:3b:a3:5e:40:11:5d:8e:5f:57:4c:
                    9c:22:13:8c:1e:b2:dd:2d:c1:89:50:01:50:3f:56:
                    60:4f:43:a2:d7:a5:30:84:f9:60:c8:6f:18:0e:81:
                    87:c9:85:d7:30:df:75:cb:fe:b9:c5:8c:0d:5f:dd:
                    16:80:74:5d:e8:c8:de:09:b7:43:38:a7:84:c0:c9:
                    2a:76:08:a4:28:36:64:49:c5:d0:90:fe:f3:14:b6:
                    39:7f:c2:7d:41:16:28:28:9e:a7:54:bf:3d:ce:41:
                    f3:b8:ee:7d:99:27:82:9e:e4:ec:d0:86:b5:ed:b7:
                    cd:9e:d2:0e:79:78:5b:ce:6e:37:f9:de:a2:c5:50:
                    43:c3:72:2c:77:85:bc:e4:c9:b0:ca:46:31:d7:e6:
                    d8:5b:2a:2e:67:09:ed:7e:0d:86:65:a4:eb:d6:3e:
                    1c:0b:a4:6d:2b:6e:02:4e:68:ab:66:1c:d6:98:aa:
                    d7:7c:21:1b:1d:19:d5:9f:87:e6:79:ce:a3:0b:c3:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BF:02:09:E2:AD:57:00:71:9A:F1:F8:30:3E:33:53:57:F1:E9:EE
            X509v3 Authority Key Identifier:
                keyid:1C:15:C3:9C:0C:AD:61:2E:A9:07:C3:6F:3F:AF:EC:6B:8A:78:CE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/2/1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/2/3139302e3131312e3132382e302f32342d3234203d3e20323730333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:7e:64:05:72:38:b6:13:36:11:f2:56:33:3d:de:fe:a3:ed:
         d5:23:7d:e8:bb:5a:11:35:dc:4a:53:a5:c5:9f:62:0d:24:23:
         38:a2:2a:1d:8f:f0:8a:22:62:79:86:88:cd:57:32:a6:b1:d9:
         2c:5a:c3:24:69:dc:9e:ce:bc:62:a6:73:77:47:1a:5f:dd:98:
         d6:d7:52:5d:7a:b2:e3:ff:ed:fb:0d:ba:36:3a:6c:c2:1f:e1:
         44:d8:d9:7d:18:ab:95:e8:ed:c2:a4:14:e3:80:5e:bd:46:93:
         6a:d4:4d:d5:12:1a:d5:9c:cf:96:aa:f9:10:25:12:6b:e6:88:
         e9:71:40:86:95:38:a4:0a:06:5e:94:e5:9b:89:68:a2:e1:87:
         89:cf:d6:f1:e8:a0:0b:12:bc:94:41:57:24:19:07:ec:5e:06:
         5a:bf:95:10:e2:b1:ef:e2:51:59:58:70:cc:a2:64:22:92:51:
         f9:c5:73:b9:0d:87:6a:36:b8:84:e1:41:05:f9:7a:cd:be:10:
         6c:f0:58:94:cd:9a:89:ef:8c:7f:52:b1:7e:87:9c:68:28:29:
         e9:de:44:22:94:4c:dd:ff:a2:b2:0a:71:e0:92:5e:69:82:b3:
         85:b7:0a:7c:c5:3d:84:3d:30:54:46:e7:61:f8:fd:3b:25:d3:
         84:c3:7d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org