Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/0/3139302e38392e31322e302f32322d3235203d3e20323730333437.roa
File:                     3139302e38392e31322e302f32322d3235203d3e20323730333437.roa (raw, json)
Hash identifier:          0Dj2nR0U0UTt35nhFyIhQ1S8VZs+JWatUXYmAkFfqTU=
Subject key identifier:   CB:39:06:D4:85:5C:BD:B9:53:50:FF:C6:74:2D:D0:A3:C6:49:3D:19
Certificate issuer:       /CN=786B5546151D25951A0101333307AA41E9175AFB
Certificate serial:       5E5A100D1AAE079FD4CC2BD007AA7AF8BC025EF2
Authority key identifier: 78:6B:55:46:15:1D:25:95:1A:01:01:33:33:07:AA:41:E9:17:5A:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/786B5546151D25951A0101333307AA41E9175AFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/0/3139302e38392e31322e302f32322d3235203d3e20323730333437.roa
Signing time:             Fri 09 Feb 2024 19:56:43 +0000
ROA not before:           Fri 09 Feb 2024 19:51:43 +0000
ROA not after:            Fri 07 Feb 2025 19:56:43 +0000
asID:                     270347
IP address blocks:        190.89.12.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5a:10:0d:1a:ae:07:9f:d4:cc:2b:d0:07:aa:7a:f8:bc:02:5e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786B5546151D25951A0101333307AA41E9175AFB
        Validity
            Not Before: Feb  9 19:51:43 2024 GMT
            Not After : Feb  7 19:56:43 2025 GMT
        Subject: CN=CB3906D4855CBDB95350FFC6742DD0A3C6493D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bf:cb:0e:cc:06:68:72:c7:84:8a:9a:c3:1e:
                    69:a5:f9:29:b2:ce:6b:e1:46:5d:37:5a:f7:5c:2d:
                    87:b9:99:38:bf:b6:6b:c5:cb:d4:d8:97:01:60:33:
                    3a:fa:c5:4e:bc:f4:08:0f:3c:2d:6f:0e:79:f8:e3:
                    ea:fd:46:47:0e:d2:be:e2:b6:fc:06:6f:6a:3f:a5:
                    6f:95:49:a1:8a:21:79:61:85:aa:db:22:f7:76:62:
                    5a:87:e0:87:04:8b:d4:d9:e3:79:62:05:85:f0:ec:
                    ee:97:35:ca:7e:3a:13:b1:1e:a4:ab:bb:8a:c6:6c:
                    bd:a3:06:3a:52:e1:4d:4b:57:0a:42:8f:69:0c:e4:
                    62:52:93:e4:48:0b:03:e6:f5:7e:56:6b:ae:e7:67:
                    c8:ce:2c:03:1b:04:71:31:71:53:f8:c4:4f:72:11:
                    64:d7:08:56:38:4c:e3:dc:27:6f:77:c2:85:e5:b9:
                    c1:7b:25:90:da:bf:04:23:d5:3b:00:c1:50:9f:05:
                    e2:9b:92:71:26:83:2b:0d:89:71:81:b2:7f:1d:49:
                    09:73:f0:ba:70:d4:a7:26:0f:d5:9e:e8:7f:f7:39:
                    2f:f8:04:e9:75:0f:7d:2b:75:9d:c5:ee:c7:c7:a0:
                    92:6d:ee:ac:d6:e9:ad:80:4d:e6:44:f3:6c:df:be:
                    31:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:39:06:D4:85:5C:BD:B9:53:50:FF:C6:74:2D:D0:A3:C6:49:3D:19
            X509v3 Authority Key Identifier:
                keyid:78:6B:55:46:15:1D:25:95:1A:01:01:33:33:07:AA:41:E9:17:5A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/0/786B5546151D25951A0101333307AA41E9175AFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/786B5546151D25951A0101333307AA41E9175AFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/0/3139302e38392e31322e302f32322d3235203d3e20323730333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:f2:48:3b:04:5e:b2:79:c6:1b:10:64:10:54:3e:9a:f5:53:
         53:1c:0d:7d:a4:4d:11:12:72:70:01:09:a0:82:f8:c1:ee:bb:
         3a:f4:05:65:fb:97:e9:48:35:37:34:14:e8:ea:88:d4:9e:db:
         50:d5:c7:cb:17:d0:05:68:47:26:3f:2e:81:85:24:0d:fd:98:
         e2:9d:8a:ea:c7:d6:ff:44:33:ba:26:ce:47:fd:c0:3d:0a:1f:
         df:37:17:70:37:f8:00:08:87:b2:4d:11:85:63:31:5e:b2:f9:
         c6:0a:cb:dd:fb:76:f7:a5:86:de:17:29:bb:c4:db:3b:90:78:
         b1:29:18:dd:7b:14:92:aa:c0:2d:3d:0a:06:2f:10:c7:14:9c:
         7b:d3:37:9c:ee:f7:c7:0e:7a:65:47:84:5a:49:7e:08:2f:a6:
         63:27:27:43:0e:5e:c4:6c:5c:e3:f3:b9:4e:e0:5d:08:28:25:
         07:41:77:ac:2c:7d:8d:d6:1c:ae:d0:45:0b:06:82:14:ad:36:
         e3:d7:83:70:b8:bf:61:95:10:43:90:20:b6:79:8c:82:20:40:
         4e:38:17:4c:39:d2:5e:e7:1a:98:6b:6e:f5:b9:33:0b:24:ee:
         41:af:22:a0:01:da:e9:06:00:d7:1e:76:36:b6:09:bf:5f:7e:
         21:91:9e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org