Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3132382e302f32302d3230203d3e203532393330.roa
File:                     3139302e3138302e3132382e302f32302d3230203d3e203532393330.roa (raw, json)
Hash identifier:          EvD9CCexJbWHWng/PLQoyqaqRZKD78RDwXvdyliUHYc=
Subject key identifier:   B4:B1:F0:B4:D6:F0:D1:0F:73:E8:D1:21:13:A3:C2:EE:8E:35:A8:A8
Certificate issuer:       /CN=9F447BDED8BDE868DC45F27E97C658F459051FB1
Certificate serial:       10D1DB4612C241E79AF0650F7B8E3AA7F2A0B425
Authority key identifier: 9F:44:7B:DE:D8:BD:E8:68:DC:45:F2:7E:97:C6:58:F4:59:05:1F:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F447BDED8BDE868DC45F27E97C658F459051FB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3132382e302f32302d3230203d3e203532393330.roa
Signing time:             Wed 12 Jul 2023 18:33:07 +0000
ROA not before:           Wed 12 Jul 2023 18:28:07 +0000
ROA not after:            Wed 10 Jul 2024 18:33:07 +0000
asID:                     52930
IP address blocks:        190.180.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d1:db:46:12:c2:41:e7:9a:f0:65:0f:7b:8e:3a:a7:f2:a0:b4:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F447BDED8BDE868DC45F27E97C658F459051FB1
        Validity
            Not Before: Jul 12 18:28:07 2023 GMT
            Not After : Jul 10 18:33:07 2024 GMT
        Subject: CN=B4B1F0B4D6F0D10F73E8D12113A3C2EE8E35A8A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5f:5a:13:a2:ef:87:8f:21:d3:e3:91:52:bd:
                    25:69:28:f0:d7:20:63:ca:9a:c4:06:66:fc:48:63:
                    3b:fb:b1:3d:57:e8:4e:9b:28:59:1e:fb:2b:9b:93:
                    bf:18:01:a0:18:5c:ed:c4:0a:a5:e5:92:c5:44:c1:
                    71:09:cf:e9:d4:d9:95:01:20:83:49:b9:85:99:eb:
                    86:7c:bf:e2:6b:38:9c:a5:5e:57:f4:99:4f:be:17:
                    7b:73:de:b1:bc:95:c6:ff:3f:cf:3f:0f:40:ac:ee:
                    ec:0e:d7:2d:a3:dc:ae:fb:70:0e:55:8e:6f:f5:a0:
                    f2:38:b7:fe:7b:47:f1:0a:6f:7e:1d:c6:a5:82:60:
                    1c:ae:07:a1:01:e4:b6:f7:f7:85:90:d4:43:4c:b3:
                    5f:27:15:25:73:33:43:b1:98:d9:61:6d:3f:db:c7:
                    c6:bf:ce:e9:e6:e3:fb:9a:11:d9:14:b1:e1:ff:39:
                    de:d0:df:fd:68:1c:c2:dd:48:85:ac:6e:9d:d3:ed:
                    49:11:ce:1b:1b:0b:71:e3:de:08:86:a5:6c:6a:b0:
                    4b:83:2b:d0:bc:86:ae:53:81:f8:3f:0d:71:06:bb:
                    b0:a0:0f:a6:91:d8:2e:08:8e:d7:00:ed:87:05:72:
                    5b:bc:9b:26:be:bc:26:18:cc:2f:cb:8b:0a:c0:55:
                    6d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B1:F0:B4:D6:F0:D1:0F:73:E8:D1:21:13:A3:C2:EE:8E:35:A8:A8
            X509v3 Authority Key Identifier:
                keyid:9F:44:7B:DE:D8:BD:E8:68:DC:45:F2:7E:97:C6:58:F4:59:05:1F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/9F447BDED8BDE868DC45F27E97C658F459051FB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F447BDED8BDE868DC45F27E97C658F459051FB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3132382e302f32302d3230203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:ee:85:cf:c6:80:27:5c:d4:35:d8:35:5a:c0:83:24:a6:f8:
         0f:a8:8b:eb:c5:18:48:39:ab:ae:6d:89:05:8d:1c:39:a7:d3:
         46:0a:0b:08:0a:8a:0b:c9:7a:2b:e6:ed:59:e8:72:5a:38:be:
         6c:dd:7e:6a:73:fe:55:4d:33:53:1b:1f:cd:49:57:88:bf:fa:
         ae:45:bb:54:e9:18:e5:62:69:6b:c9:7c:c3:2d:8b:eb:00:ff:
         69:9e:39:00:9a:6e:c2:a4:27:33:92:46:b0:4d:2d:52:cf:23:
         9e:53:9e:f1:51:b2:44:65:af:c0:9c:0d:c1:20:00:53:85:8e:
         9b:9c:cb:fd:05:96:54:a3:c5:03:8a:b8:2b:16:f0:65:0c:e1:
         b3:48:4c:9c:24:04:cb:1b:eb:39:91:ce:27:20:ac:c3:74:fa:
         14:f6:79:ff:b4:70:eb:a4:31:64:aa:e2:d6:b1:82:57:2d:be:
         c6:4e:e5:ec:32:25:71:1e:a6:f6:64:0d:a0:fa:a8:89:4d:df:
         97:4f:9d:2b:b3:8f:40:38:1e:a0:68:ba:16:f2:3c:81:9d:10:
         76:1d:c6:ca:ee:5e:86:56:07:82:24:2a:ce:82:8b:e3:4f:52:
         b8:3d:f5:05:8e:8e:1d:94:6b:85:e5:c9:04:63:9f:7a:a3:24:
         be:2a:e8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org