Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/3139302e3131352e38302e302f32332d3234203d3e20323730343535.roa
File:                     3139302e3131352e38302e302f32332d3234203d3e20323730343535.roa (raw, json)
Hash identifier:          +dOjGKPVSljsbL+vaP4FOuy8l2T1Wo3VRgaomlCl658=
Subject key identifier:   10:15:9B:0A:59:75:2C:67:B0:D1:D5:83:8B:C7:BA:25:7C:71:EC:1B
Certificate issuer:       /CN=39D5039FB41A6E31B24A650C9C3A3A3F512B662E
Certificate serial:       79E392E0062C607D28F065E846B44367AC4501ED
Authority key identifier: 39:D5:03:9F:B4:1A:6E:31:B2:4A:65:0C:9C:3A:3A:3F:51:2B:66:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39D5039FB41A6E31B24A650C9C3A3A3F512B662E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/3139302e3131352e38302e302f32332d3234203d3e20323730343535.roa
Signing time:             Thu 07 Dec 2023 14:56:00 +0000
ROA not before:           Thu 07 Dec 2023 14:51:00 +0000
ROA not after:            Thu 05 Dec 2024 14:56:00 +0000
asID:                     270455
IP address blocks:        190.115.80.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e3:92:e0:06:2c:60:7d:28:f0:65:e8:46:b4:43:67:ac:45:01:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39D5039FB41A6E31B24A650C9C3A3A3F512B662E
        Validity
            Not Before: Dec  7 14:51:00 2023 GMT
            Not After : Dec  5 14:56:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c2:94:47:69:c6:51:70:e5:3e:74:1b:95:02:
                    ab:0a:fa:39:54:13:60:28:7a:4d:74:0b:59:57:64:
                    b5:8d:a7:51:a0:b6:c5:72:d3:76:33:77:98:f3:b0:
                    7e:cf:d8:f3:90:29:1f:65:68:ce:58:74:ab:0c:2f:
                    7f:70:59:0b:c3:b5:f8:50:74:59:24:0d:7d:fb:bf:
                    85:ce:0c:46:2b:93:c2:bd:37:c2:9e:0a:df:50:fc:
                    26:af:00:ed:db:a8:38:6f:af:99:9a:85:c7:2b:22:
                    c0:83:c3:84:e4:59:a8:63:49:59:18:d7:c6:15:ab:
                    1f:49:f5:ed:7c:2c:8a:1d:8c:be:70:64:88:76:0a:
                    c1:df:83:8e:07:f9:6d:96:3c:86:f7:a7:f6:b2:f2:
                    af:93:41:53:c9:80:1b:aa:76:8e:ed:3a:f1:06:b3:
                    76:17:aa:cb:eb:ab:6d:0d:95:a9:39:05:cb:79:ad:
                    88:5a:1e:6f:38:1f:df:db:df:34:28:4f:98:e5:b3:
                    11:90:0a:2d:d8:90:2f:14:92:f9:eb:8b:a9:3d:6a:
                    8b:82:f2:eb:0e:e6:b8:7f:48:81:f3:ea:f0:31:47:
                    32:41:58:e7:f5:1d:d1:17:90:22:00:d5:32:8d:6f:
                    41:82:60:69:9b:b7:18:f9:61:ff:b5:b6:4f:cd:e9:
                    97:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:15:9B:0A:59:75:2C:67:B0:D1:D5:83:8B:C7:BA:25:7C:71:EC:1B
            X509v3 Authority Key Identifier:
                keyid:39:D5:03:9F:B4:1A:6E:31:B2:4A:65:0C:9C:3A:3A:3F:51:2B:66:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/39D5039FB41A6E31B24A650C9C3A3A3F512B662E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39D5039FB41A6E31B24A650C9C3A3A3F512B662E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/3139302e3131352e38302e302f32332d3234203d3e20323730343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:03:53:62:4d:02:ea:26:14:7a:3a:76:37:94:ee:0e:a9:ec:
         0d:28:7b:37:63:de:05:df:25:fd:f2:50:98:31:6a:f2:25:ec:
         21:29:c7:c7:6d:46:e0:a4:6b:59:42:ff:4b:4d:e6:aa:19:c8:
         40:7d:18:23:44:bb:6d:92:e5:25:8e:d9:9b:67:38:6a:3c:ba:
         46:7c:4a:cc:dc:55:aa:5e:64:14:e7:ac:13:31:2b:1d:cf:25:
         91:f8:bf:d1:ad:9e:ae:5c:c1:9d:a3:bb:04:4d:b0:a4:ce:12:
         fe:c4:28:52:c1:dc:29:e7:0a:ac:b2:d0:d1:c5:86:3e:a6:ae:
         c9:01:43:db:23:7d:23:32:17:dd:9c:b9:b4:f0:7c:bb:50:f4:
         30:85:34:f3:d8:ba:3d:09:51:9b:c5:d5:c8:05:ce:d9:ce:64:
         d1:2d:90:6a:e1:c8:3d:00:41:81:81:05:36:2f:b4:7a:d9:4d:
         c5:f5:58:d9:70:70:80:10:d8:cb:15:c4:e4:59:e5:c0:f1:ee:
         af:dc:b1:01:20:31:59:4e:0e:3e:cc:68:d9:ff:7a:55:c4:6c:
         ad:dd:44:80:be:ad:1d:c6:ce:ee:97:9f:69:19:7f:f8:ae:cf:
         7e:98:4e:06:fa:10:93:e3:04:5a:fb:85:1e:7b:8d:75:fc:c2:
         87:36:e6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org