Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3139302e3138302e3133362e302f32342d3234203d3e203532393330.roa
File:                     3139302e3138302e3133362e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          nZlj+tC0UkBu0ZLIN8Jb/tAH/tCCSd7fYa0Op+9xIpM=
Subject key identifier:   42:8D:62:7C:A0:A4:3E:F3:4E:5E:1E:28:AC:3D:47:1F:0B:52:BF:35
Certificate issuer:       /CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
Certificate serial:       2EB8659BCFCF07054DCDE513F6DDCF90CF0C3C92
Authority key identifier: AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3139302e3138302e3133362e302f32342d3234203d3e203532393330.roa
Signing time:             Sat 06 Apr 2024 17:30:40 +0000
ROA not before:           Sat 06 Apr 2024 17:25:40 +0000
ROA not after:            Sat 05 Apr 2025 17:30:40 +0000
asID:                     52930
IP address blocks:        190.180.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b8:65:9b:cf:cf:07:05:4d:cd:e5:13:f6:dd:cf:90:cf:0c:3c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
        Validity
            Not Before: Apr  6 17:25:40 2024 GMT
            Not After : Apr  5 17:30:40 2025 GMT
        Subject: CN=428D627CA0A43EF34E5E1E28AC3D471F0B52BF35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b5:fc:42:63:02:04:56:53:de:a9:75:0a:d3:
                    0e:74:c9:f7:51:58:54:d2:80:fd:b9:74:89:96:79:
                    4f:48:16:33:cd:90:f4:31:07:49:53:c2:76:4a:3c:
                    bb:7f:72:c9:77:d8:94:2f:26:64:65:dd:4e:d2:25:
                    15:e5:a2:b9:11:19:9c:f9:17:37:99:f3:81:54:4e:
                    6d:f9:da:d4:29:f7:1d:29:49:5b:5d:c6:04:3e:da:
                    26:60:53:08:10:2b:bb:47:4b:2c:27:9f:e8:61:3d:
                    88:51:c1:2b:61:b2:03:62:7a:b2:e5:40:b6:13:46:
                    9c:26:6c:d4:f9:7a:89:ed:00:68:d9:e6:e9:69:df:
                    e7:1c:57:71:43:ae:6d:1f:93:ff:9e:5f:34:c4:5b:
                    05:28:d6:95:26:02:28:8f:44:8c:ec:85:d8:f2:6a:
                    f6:fa:2f:74:a4:ed:ce:89:44:fc:d0:15:21:82:2d:
                    a1:7c:8f:52:9b:7e:45:1f:3f:95:53:9c:26:98:5c:
                    5f:72:9f:df:a0:a4:e8:e1:c0:8a:ef:82:91:6c:e3:
                    e1:84:21:a9:53:22:d7:cf:74:16:83:d8:9f:50:2d:
                    75:5a:cc:67:d8:65:24:74:90:ad:28:9f:7a:90:bf:
                    ae:3c:aa:9d:38:bd:4d:f1:85:14:9e:06:f1:d1:a9:
                    b9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8D:62:7C:A0:A4:3E:F3:4E:5E:1E:28:AC:3D:47:1F:0B:52:BF:35
            X509v3 Authority Key Identifier:
                keyid:AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/AE58493D362ABCD98C2752F6BC5F4335A17F721D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3139302e3138302e3133362e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:69:fc:79:ea:42:98:67:8f:2b:6d:e2:cc:b7:80:01:65:ab:
         3e:fa:09:89:6a:43:20:5d:70:a0:30:01:c2:2c:6e:44:ac:47:
         3b:ce:3e:39:0e:8e:75:0a:be:a5:6d:5e:7c:d3:d7:49:ae:c4:
         47:7a:e7:15:b8:09:53:be:52:62:57:1b:96:c0:74:17:a3:97:
         a9:76:32:23:2c:0e:91:28:46:16:1d:8a:a4:1f:e1:fb:e4:77:
         ad:bd:fc:35:dd:51:16:44:4b:2a:29:55:2b:f2:47:d3:d8:48:
         80:05:69:db:15:fc:98:33:63:e5:f2:f1:b7:66:20:27:62:36:
         d1:a1:7d:76:b9:21:fd:44:e3:a6:bf:c4:59:6e:83:75:fe:67:
         dd:b7:f2:40:90:8c:63:ac:6b:e4:a2:9d:28:de:61:99:5b:d0:
         a1:8d:37:5a:7f:82:5c:c1:3f:31:93:d5:a8:da:a9:20:07:b0:
         49:d9:40:f0:dc:b7:63:f9:6f:6f:06:1e:55:6f:32:90:3c:62:
         35:0d:19:da:1d:c0:31:eb:4e:89:79:cb:6b:06:82:6c:a7:1f:
         f3:76:6d:23:ec:0e:31:45:e6:aa:11:c0:b9:75:e0:41:b0:29:
         6e:03:eb:84:a1:0e:6b:6d:1f:62:ed:3b:26:a4:8f:ac:df:d7:
         9b:db:d2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org