Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/3139302e3131352e3139362e302f32322d3332203d3e20323638363234.roa
File:                     3139302e3131352e3139362e302f32322d3332203d3e20323638363234.roa (raw, json)
Hash identifier:          4FWl2UCrtdiy4BSqT4uCsF+BZmmE9x4TvrIc7grB5Io=
Subject key identifier:   33:AB:04:68:02:C4:FB:3A:EF:2D:A7:64:44:94:57:F5:FD:6E:7A:ED
Certificate issuer:       /CN=D46D9B53AD78E55F078DA7D69B411BF181E1973D
Certificate serial:       2648EAC6CA2B44D74E68B92746678348CA9C5E5A
Authority key identifier: D4:6D:9B:53:AD:78:E5:5F:07:8D:A7:D6:9B:41:1B:F1:81:E1:97:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D46D9B53AD78E55F078DA7D69B411BF181E1973D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/3139302e3131352e3139362e302f32322d3332203d3e20323638363234.roa
Signing time:             Mon 12 Dec 2022 19:10:00 +0000
ROA not before:           Mon 12 Dec 2022 19:05:00 +0000
ROA not after:            Mon 11 Dec 2023 19:10:00 +0000
asID:                     268624
IP address blocks:        190.115.196.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:48:ea:c6:ca:2b:44:d7:4e:68:b9:27:46:67:83:48:ca:9c:5e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D46D9B53AD78E55F078DA7D69B411BF181E1973D
        Validity
            Not Before: Dec 12 19:05:00 2022 GMT
            Not After : Dec 11 19:10:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:77:f5:f5:c5:ed:a2:a8:30:28:b1:cc:90:
                    b3:9a:b8:61:84:af:48:3d:df:67:e5:e3:f3:ad:b3:
                    93:c3:03:55:6d:f9:75:22:6b:64:f7:20:3b:72:d6:
                    cf:d9:b7:c3:5f:00:69:e1:20:ac:10:66:5c:f0:70:
                    8a:e9:75:77:86:a7:e0:84:df:26:e5:86:f3:64:d4:
                    fb:04:a0:30:e2:ca:9a:5d:82:10:1d:83:9f:d4:60:
                    aa:4b:21:70:34:c4:bf:0b:c6:ae:08:47:53:28:86:
                    77:59:25:27:91:65:cb:cc:75:94:f2:9a:87:ad:a7:
                    a7:59:59:cc:9f:d3:1f:d1:ac:4f:98:2e:df:16:de:
                    af:a5:7d:d5:d5:cd:50:c5:86:a2:7e:d4:f8:ab:59:
                    8c:f1:f4:70:be:61:c2:43:fd:e6:5d:72:28:b7:3c:
                    17:fb:6d:d2:44:bc:f8:fb:96:20:43:6e:c5:e8:0d:
                    21:e0:de:e9:c9:44:d2:57:bb:c6:2e:35:61:c4:31:
                    a6:b1:13:07:56:e0:f8:41:ea:b5:66:d6:c9:2f:df:
                    67:b3:3f:4e:e8:07:1c:01:9b:33:d7:b4:ac:1e:87:
                    3b:18:50:b1:d7:28:dd:3a:74:f0:98:21:06:a0:d0:
                    cd:e6:4e:d4:44:6b:61:77:ec:5c:45:ca:3b:30:41:
                    2b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AB:04:68:02:C4:FB:3A:EF:2D:A7:64:44:94:57:F5:FD:6E:7A:ED
            X509v3 Authority Key Identifier:
                keyid:D4:6D:9B:53:AD:78:E5:5F:07:8D:A7:D6:9B:41:1B:F1:81:E1:97:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/D46D9B53AD78E55F078DA7D69B411BF181E1973D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D46D9B53AD78E55F078DA7D69B411BF181E1973D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/3139302e3131352e3139362e302f32322d3332203d3e20323638363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:a2:93:79:7a:94:09:50:16:de:19:57:19:be:e3:f1:09:f1:
         1f:47:79:6b:2b:5c:d0:f3:5a:eb:20:91:0d:49:5c:66:89:eb:
         0b:05:95:9a:ce:4b:39:66:1b:00:f9:08:6c:a9:49:d5:9d:e4:
         f4:88:30:df:62:c4:11:63:87:49:ac:31:32:2b:65:7e:d9:b2:
         cd:4f:ef:fe:1c:74:0d:3f:cc:20:3c:93:9f:68:ab:eb:c0:60:
         2c:8a:25:45:f0:a4:10:17:5a:f0:c1:13:87:ed:74:0b:a7:a1:
         62:83:12:44:9c:6e:82:63:8c:88:82:a1:4c:95:15:11:9c:09:
         12:ff:d0:46:e7:d8:75:14:16:07:18:62:60:1a:15:45:81:16:
         a6:80:41:2f:e4:ea:1d:b6:b5:51:e3:c3:9b:c9:dd:0d:bf:7e:
         2f:0a:a2:dc:7c:da:2d:4d:33:be:8f:3a:a1:45:94:04:d4:1d:
         d2:58:18:a4:47:4a:c1:72:a7:d6:df:85:e4:a7:fa:e1:a7:95:
         41:dc:1e:57:4a:31:9d:20:26:f4:dc:6e:15:b0:1b:4f:b0:4f:
         0a:f6:d1:9c:30:78:1f:3c:b3:61:76:c2:31:91:33:6d:40:1f:
         b2:fd:a8:d3:c0:14:26:7d:a5:8e:4d:d0:b0:09:1d:86:2c:68:
         02:84:d1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org