Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/0/3139302e38332e35362e302f32322d3332203d3e20323730333534.roa
File:                     3139302e38332e35362e302f32322d3332203d3e20323730333534.roa (raw, json)
Hash identifier:          B6sKH5CdEQzhUJe9n2N4pJ3NWVf8y1uj6kdohOmZVvo=
Subject key identifier:   55:7F:27:FB:A9:86:39:36:F4:6F:D3:4A:2D:14:8A:B2:A9:D8:B6:59
Certificate issuer:       /CN=38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5
Certificate serial:       35E5ED2BED1CBBD536810E825A41AE5EB63401E0
Authority key identifier: 38:AE:3F:6E:8F:9B:50:02:E3:5A:BB:64:2B:85:3C:AF:21:FD:53:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/0/3139302e38332e35362e302f32322d3332203d3e20323730333534.roa
Signing time:             Tue 09 Apr 2024 13:08:21 +0000
ROA not before:           Tue 09 Apr 2024 13:03:21 +0000
ROA not after:            Tue 08 Apr 2025 13:08:21 +0000
asID:                     270354
IP address blocks:        190.83.56.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e5:ed:2b:ed:1c:bb:d5:36:81:0e:82:5a:41:ae:5e:b6:34:01:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5
        Validity
            Not Before: Apr  9 13:03:21 2024 GMT
            Not After : Apr  8 13:08:21 2025 GMT
        Subject: CN=557F27FBA9863936F46FD34A2D148AB2A9D8B659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:60:ce:0c:21:31:4f:d2:0b:b0:a8:d3:05:ec:
                    46:00:c6:05:f4:e5:20:64:f7:97:48:85:a5:4d:72:
                    69:23:1d:de:d2:ba:07:ef:a9:c2:43:93:c1:ba:e5:
                    00:b2:26:a4:c5:e0:07:b1:db:11:2b:f1:58:e2:e8:
                    62:d2:c5:60:ae:b5:57:34:b5:2e:82:34:df:84:1a:
                    ce:f8:e3:7b:56:ad:12:1f:6a:b9:1d:5c:db:a3:f5:
                    db:ba:2d:03:95:7a:ff:cf:ff:4c:85:be:23:ef:9c:
                    02:59:4f:ef:34:d4:78:f0:fd:f5:54:0d:37:ec:53:
                    3f:8e:01:c0:95:ed:f7:14:d3:99:d6:c1:6a:06:fc:
                    2a:c9:a6:7d:81:b3:94:7d:ca:f9:21:fa:99:63:fc:
                    0f:ab:92:39:8b:de:db:39:ef:04:af:4b:9b:24:37:
                    03:08:78:26:cb:1c:18:9e:14:27:54:e8:26:72:76:
                    b1:c0:31:22:88:7b:8c:37:15:5b:14:02:b3:2f:92:
                    0f:df:23:e2:ae:cd:9a:30:ac:53:b2:0a:cb:0f:bc:
                    00:e1:86:bc:a7:94:52:b6:09:46:aa:12:ce:ff:0b:
                    f9:0e:cb:0f:8e:37:71:cf:e0:99:f5:1c:82:a0:d6:
                    cc:9d:1f:d0:cc:1a:10:63:be:7f:1e:f8:6c:4a:62:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7F:27:FB:A9:86:39:36:F4:6F:D3:4A:2D:14:8A:B2:A9:D8:B6:59
            X509v3 Authority Key Identifier:
                keyid:38:AE:3F:6E:8F:9B:50:02:E3:5A:BB:64:2B:85:3C:AF:21:FD:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/0/38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/0/3139302e38332e35362e302f32322d3332203d3e20323730333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:39:fa:23:b8:66:6c:d2:32:db:e1:23:c5:1c:87:dd:86:62:
         66:fe:70:41:03:0b:e4:aa:22:71:8b:cd:fa:52:c5:09:32:4b:
         01:86:55:d9:07:d7:78:65:20:83:a2:7b:c9:38:87:20:6b:18:
         7b:a6:bd:0c:b3:73:bc:51:5f:6b:82:80:28:45:71:5b:15:a6:
         a4:8c:6e:47:04:8f:8a:38:81:bf:13:83:8a:b8:96:e3:c1:60:
         4a:27:b3:2d:15:43:d7:3a:f3:d1:99:22:49:a7:e7:55:27:64:
         9e:65:35:4a:92:c2:cd:4d:37:96:39:d4:e1:5a:91:44:70:71:
         b7:1f:c5:6e:25:ba:0f:35:36:02:3e:49:c0:06:c0:d7:f9:37:
         6f:6f:c5:fa:86:9b:6e:73:b8:3a:1a:15:97:5b:c9:72:68:0e:
         08:a9:40:75:1e:26:44:9a:1d:c8:d4:07:94:df:b4:5f:68:a1:
         31:d6:58:f0:d5:9e:3d:ff:ac:80:9c:cf:dc:d2:f7:ec:60:ee:
         42:a3:c9:46:f8:92:25:fe:0a:f0:0e:7d:fd:7a:af:fd:8b:27:
         2a:0c:fc:32:c9:45:3e:5c:10:0d:80:2b:24:fb:bf:c5:76:5a:
         6a:c4:3c:06:db:33:d0:57:64:9f:8e:71:49:23:da:99:76:cc:
         be:00:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org