Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138392e39312e36342e302f31392d3234203d3e203137323232.roa
File:                     3138392e39312e36342e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          rz/Uqc35kmEeXHgGFQS9iWDRkae00bTBwKABlmQ7ktY=
Subject key identifier:   62:B9:A1:63:DB:16:15:75:D9:1C:BA:C7:73:91:D7:B1:0B:40:CC:BD
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       5D3D22BC45EF2C49F83BC33C5D9CBBE5F60394F7
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138392e39312e36342e302f31392d3234203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:40 +0000
ROA not before:           Mon 25 Mar 2024 22:50:40 +0000
ROA not after:            Mon 24 Mar 2025 22:55:40 +0000
asID:                     17222
IP address blocks:        189.91.64.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3d:22:bc:45:ef:2c:49:f8:3b:c3:3c:5d:9c:bb:e5:f6:03:94:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:40 2024 GMT
            Not After : Mar 24 22:55:40 2025 GMT
        Subject: CN=62B9A163DB161575D91CBAC77391D7B10B40CCBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:fb:f8:cd:42:ba:9c:33:d1:19:bc:31:fc:
                    c1:8b:71:a0:61:2a:14:93:11:fa:4f:0b:e3:91:f0:
                    24:07:15:ea:92:7b:5d:1b:35:c3:b4:64:a8:e0:58:
                    e1:18:63:d6:76:ec:f8:2e:97:79:06:fc:51:c7:6c:
                    d1:0f:92:7c:a3:59:bd:2e:d8:a4:ed:82:a7:b1:bb:
                    e3:27:aa:0a:78:7a:60:b0:07:92:a8:4a:f1:65:63:
                    06:77:3f:75:32:a9:b8:4f:80:aa:db:ee:77:ea:54:
                    f4:63:33:bf:45:2e:3a:71:d0:fa:cc:aa:31:29:35:
                    ba:06:22:5a:fd:ff:b9:47:7d:e2:21:d3:35:16:26:
                    93:90:15:a6:1c:eb:97:e3:32:8b:e6:94:35:6b:87:
                    b8:02:26:d0:3c:ec:c4:fe:eb:a2:d6:46:1b:56:2a:
                    23:d6:2e:24:b6:2a:e8:e9:39:50:c5:47:9e:ea:ff:
                    c7:43:de:21:ab:e7:8b:07:44:2b:43:92:b4:47:20:
                    b7:ff:44:24:a0:b1:73:91:8b:4d:b5:d5:c4:cc:29:
                    e6:93:22:5f:1c:21:32:2d:69:f2:a2:05:87:8f:4c:
                    93:62:3d:fe:06:4a:90:0a:41:78:79:b8:73:c6:83:
                    2c:1f:2e:80:8e:84:8c:3f:41:82:48:fb:56:80:51:
                    3e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B9:A1:63:DB:16:15:75:D9:1C:BA:C7:73:91:D7:B1:0B:40:CC:BD
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138392e39312e36342e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c4:5a:37:23:92:14:1d:cc:6c:7d:f4:43:ff:0b:5f:6c:2d:e4:
         50:fb:3e:43:7b:3c:20:22:db:c6:79:74:68:ea:80:d5:29:40:
         bb:df:49:8c:59:48:38:0c:c7:93:4e:ad:8e:4e:a4:87:eb:0d:
         7e:cc:5e:05:46:30:f3:55:1e:e9:8e:68:43:d7:9f:67:1f:4d:
         4d:65:0b:c5:23:10:c2:50:8d:97:e4:64:78:e7:f7:ad:d1:bd:
         4b:68:1a:79:da:12:4e:51:c0:ab:aa:5c:54:06:df:33:5c:35:
         b1:ec:ef:ff:c7:c8:55:3e:71:ce:dc:b7:d7:af:29:82:0d:2f:
         fa:3c:cb:6c:21:69:3b:6a:88:b6:c9:54:a4:b2:a6:7b:7b:21:
         07:b7:ff:3d:03:95:91:94:7b:cc:8d:9f:bf:d5:06:4f:e6:5b:
         2e:75:34:a8:44:c5:3f:01:42:aa:2a:3e:e2:f4:4d:03:79:10:
         02:93:8a:ef:dc:cf:3c:3c:b2:af:b9:41:c4:f7:cc:90:77:e7:
         35:a8:36:2c:64:4e:86:dd:f8:b1:e6:09:57:37:f5:e4:09:bb:
         36:ba:12:52:41:3b:30:4d:b9:61:35:b1:3b:0e:ec:5c:53:cb:
         6b:6b:9d:bd:0e:48:7b:a5:06:b7:2d:60:06:6c:b5:72:b0:87:
         b1:83:71:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-ams.rpki-client.org