Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/3138392e39302e3134342e302f32302d3232203d3e203533313132.roa
File:                     3138392e39302e3134342e302f32302d3232203d3e203533313132.roa (raw, json)
Hash identifier:          h/p+tLZHTVKLIxo8unD5J3sxWkvAwrWdIAbTTkyVEiw=
Subject key identifier:   94:53:98:DB:C4:B4:82:A7:7C:99:AA:0C:AD:2C:E8:A9:AE:1D:07:2A
Certificate issuer:       /CN=FB77F49574CBE0843961A23238230FA3417E4159
Certificate serial:       3CDA43F64C2529CEE550BDB3B7E09988D452D346
Authority key identifier: FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/3138392e39302e3134342e302f32302d3232203d3e203533313132.roa
Signing time:             Thu 25 Jan 2024 23:56:24 +0000
ROA not before:           Thu 25 Jan 2024 23:51:24 +0000
ROA not after:            Thu 23 Jan 2025 23:56:24 +0000
asID:                     53112
IP address blocks:        189.90.144.0/20 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:da:43:f6:4c:25:29:ce:e5:50:bd:b3:b7:e0:99:88:d4:52:d3:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB77F49574CBE0843961A23238230FA3417E4159
        Validity
            Not Before: Jan 25 23:51:24 2024 GMT
            Not After : Jan 23 23:56:24 2025 GMT
        Subject: CN=945398DBC4B482A77C99AA0CAD2CE8A9AE1D072A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:6b:c9:37:df:7d:6a:57:70:6e:09:f3:fb:
                    90:65:41:c9:22:f0:1f:8a:bb:04:dd:2c:dd:0c:c9:
                    7a:09:9e:7c:b1:90:1e:16:de:2c:37:9a:07:17:03:
                    a4:2d:5a:b0:09:6d:19:96:10:8a:a0:27:05:47:24:
                    32:d2:8a:b0:17:98:49:35:7c:03:ad:b3:a3:7a:a5:
                    15:4a:fc:9f:aa:db:2b:41:b2:16:0b:d2:67:39:b0:
                    f4:64:78:ef:ad:d2:91:c9:1f:d9:06:d7:a9:c9:ea:
                    ca:05:41:44:e3:3d:ef:02:2d:fe:82:73:f5:5b:dc:
                    99:07:5b:1c:61:05:45:15:8b:34:22:7b:df:16:10:
                    1e:9a:bc:32:c0:26:77:ff:a8:89:9c:dd:31:ea:82:
                    f5:28:9c:29:4c:2a:f2:48:8c:89:96:c6:8e:03:e0:
                    e2:4b:6e:34:7f:41:70:ea:2e:4c:f1:f4:87:5e:e1:
                    08:9a:2e:5a:f5:05:c7:98:df:78:8e:17:92:d5:79:
                    e3:75:29:d0:16:63:9d:f5:3e:e4:1f:a3:3e:af:8d:
                    a0:5f:ac:cb:c8:cd:90:93:36:fe:10:ae:2c:c5:a4:
                    9b:5c:40:ec:49:54:f4:c3:c5:82:66:1b:47:02:2b:
                    66:72:22:1e:71:6e:b8:42:21:cb:cd:66:f1:7e:7e:
                    ba:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:53:98:DB:C4:B4:82:A7:7C:99:AA:0C:AD:2C:E8:A9:AE:1D:07:2A
            X509v3 Authority Key Identifier:
                keyid:FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/FB77F49574CBE0843961A23238230FA3417E4159.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/3138392e39302e3134342e302f32302d3232203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:f8:ea:c6:7d:6b:19:74:34:4b:a5:ab:12:35:af:77:f1:d1:
         61:5e:62:3a:e9:fc:01:17:61:8d:ce:2f:32:37:2a:7d:e1:94:
         04:69:4b:15:f9:a5:19:0a:31:77:88:b4:5b:01:d9:f6:4b:c2:
         79:c9:cf:a0:c7:74:79:9c:aa:d4:c2:f8:3e:d9:96:cb:22:b2:
         20:8e:4c:b7:c7:9d:63:ca:5f:64:55:ae:bf:ba:85:3e:d8:5e:
         1e:41:12:91:e0:36:c1:f8:66:d0:6e:46:ba:2f:74:30:ce:a6:
         dc:39:65:6e:e8:54:40:20:6c:79:df:30:12:41:8e:d1:ea:9a:
         d6:5c:a4:bc:06:9e:9d:80:16:20:0d:83:06:83:ee:08:7b:fa:
         5d:7b:de:01:e2:3e:0c:06:3e:86:cd:cc:65:d3:ca:22:9b:55:
         32:87:e1:4c:00:7c:c7:6c:a5:44:7a:37:b2:26:87:dd:4d:76:
         b7:15:75:a1:82:c9:d3:76:5e:3c:59:46:84:61:69:48:6f:4d:
         95:e3:40:8e:84:a6:d6:b3:c0:60:1a:96:d3:83:c5:d5:58:d8:
         ed:6b:03:16:11:78:aa:00:22:d9:3d:54:b8:60:d7:a8:67:ce:
         48:aa:f3:6b:7e:d1:3b:16:73:71:51:c2:2b:b0:0a:c5:97:2b:
         33:46:53:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:34 2024 by rpki-client on console-ams.rpki-client.org