Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EzzJLcgwgTCH9dH9xgXxM9VnYwkTyKm1c47ArD4zq9Zj/0/3139302e3131322e3134302e302f32322d3232203d3e20323639373038.roa
File:                     3139302e3131322e3134302e302f32322d3232203d3e20323639373038.roa (raw, json)
Hash identifier:          9uhPa2a19qsgnVS0za6mympSgSvo+f/R0LLVIs6psDQ=
Subject key identifier:   08:1F:AF:85:F9:B3:18:A6:75:AD:2F:66:2E:BA:53:96:FD:85:A4:DB
Certificate issuer:       /CN=E29025BB26941D7B88CD2D70E46FA334C3B83086
Certificate serial:       77127C10764FB31D30F9626BAB40A7392F10CA8D
Authority key identifier: E2:90:25:BB:26:94:1D:7B:88:CD:2D:70:E4:6F:A3:34:C3:B8:30:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E29025BB26941D7B88CD2D70E46FA334C3B83086.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EzzJLcgwgTCH9dH9xgXxM9VnYwkTyKm1c47ArD4zq9Zj/0/3139302e3131322e3134302e302f32322d3232203d3e20323639373038.roa
Signing time:             Wed 01 Sep 2021 18:39:11 +0000
ROA not before:           Wed 01 Sep 2021 18:34:11 +0000
ROA not after:            Wed 31 Aug 2022 18:39:11 +0000
asID:                     269708
IP address blocks:        190.112.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:12:7c:10:76:4f:b3:1d:30:f9:62:6b:ab:40:a7:39:2f:10:ca:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E29025BB26941D7B88CD2D70E46FA334C3B83086
        Validity
            Not Before: Sep  1 18:34:11 2021 GMT
            Not After : Aug 31 18:39:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:11:4c:f8:16:ed:85:26:5b:8e:7a:4f:3e:
                    c4:d7:92:e1:1b:1e:b9:55:96:95:90:5c:2e:2b:7d:
                    2c:af:d3:db:63:5a:90:50:dd:6f:25:00:ba:7e:fb:
                    17:8e:ac:28:90:19:87:ec:29:15:c6:89:ef:17:5b:
                    af:56:f8:05:07:b0:d0:d4:56:32:61:40:56:97:36:
                    07:e3:7d:79:6a:fe:19:4a:df:8c:bc:fe:31:a5:01:
                    8a:97:71:2a:ad:dd:e1:42:7b:b7:91:62:c5:ab:d5:
                    8f:ba:96:28:e3:22:91:03:86:13:c0:07:43:11:fe:
                    5d:6d:f9:29:ec:46:c9:3a:fd:25:d4:ca:2a:aa:b4:
                    ba:56:6a:c7:67:a0:89:44:d6:a7:83:52:be:cb:65:
                    f7:a1:61:af:9a:31:2f:e1:12:dd:f7:55:d6:67:54:
                    f2:f5:c6:2a:3f:49:72:62:16:60:b5:f5:b5:e4:3d:
                    7a:20:33:b4:63:83:df:63:12:b4:75:9f:3f:72:56:
                    5d:01:0b:07:c0:e9:48:97:61:9c:27:60:d4:15:61:
                    7c:4f:3c:d2:d1:c2:a7:92:26:37:c7:24:16:78:b8:
                    8d:16:f2:45:55:f4:0e:9c:d4:e1:38:04:c1:93:2b:
                    f9:21:2c:ab:8a:05:07:00:43:df:53:cc:a7:ac:fb:
                    b9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1F:AF:85:F9:B3:18:A6:75:AD:2F:66:2E:BA:53:96:FD:85:A4:DB
            X509v3 Authority Key Identifier:
                keyid:E2:90:25:BB:26:94:1D:7B:88:CD:2D:70:E4:6F:A3:34:C3:B8:30:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EzzJLcgwgTCH9dH9xgXxM9VnYwkTyKm1c47ArD4zq9Zj/0/E29025BB26941D7B88CD2D70E46FA334C3B83086.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E29025BB26941D7B88CD2D70E46FA334C3B83086.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EzzJLcgwgTCH9dH9xgXxM9VnYwkTyKm1c47ArD4zq9Zj/0/3139302e3131322e3134302e302f32322d3232203d3e20323639373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:d6:61:8b:df:40:33:49:9a:08:4f:74:7b:66:c6:75:68:2b:
         f8:80:10:44:86:82:73:a3:a0:57:d7:bd:bc:4b:6a:87:b2:c0:
         6a:74:fb:15:aa:fc:d2:15:fe:66:65:81:f0:11:a3:33:15:4e:
         de:41:32:c7:d4:f7:f2:75:6d:d5:e6:86:ad:7c:ac:8e:28:bc:
         43:f8:71:11:e6:31:19:2d:28:11:28:b0:e0:84:c8:52:36:2f:
         54:e7:8b:fe:2e:f4:52:33:22:6e:d2:ab:c0:ff:47:b6:11:3e:
         7d:bb:0e:e0:5c:29:2d:c6:08:2e:5b:2d:a4:65:0d:ac:2c:e4:
         0f:71:5e:65:89:6d:5a:1e:8b:54:33:52:21:ad:2b:4b:8d:0a:
         3b:e9:d6:5b:d9:b7:8b:f6:2b:9e:59:55:7a:40:7e:01:3b:30:
         50:f1:90:2c:a8:a6:3d:d2:45:9a:b5:c1:d5:0b:6f:0f:58:91:
         ef:7b:bc:6f:c6:84:e3:f9:32:41:9c:a2:20:0b:2a:1b:8a:da:
         7d:8a:83:34:97:84:36:a4:bc:bc:a6:15:26:12:b7:25:aa:af:
         84:78:47:c1:2d:7a:45:e6:a1:64:b1:d8:3b:34:c2:15:57:e8:
         25:49:a2:8c:02:b3:06:e7:42:a1:73:c3:04:c1:76:66:3b:c5:
         d3:d7:9e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:53 2024 by rpki-client on console-ams.rpki-client.org