Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/3139302e3131352e36382e302f32322d3234203d3e20323730353438.roa
File:                     3139302e3131352e36382e302f32322d3234203d3e20323730353438.roa (raw, json)
Hash identifier:          2CTguE5jmThuefO0FboXcdJwcn/fAPnt0sN1hMakGvg=
Subject key identifier:   62:F2:21:76:11:1F:49:BC:3B:17:D8:A2:EC:AD:1F:A3:D2:92:DC:F7
Certificate issuer:       /CN=41708E304CF7ABF013B9D61D9AC203815B961D44
Certificate serial:       61FD6888A1B2BC474BB23F1152C353A68C44D68E
Authority key identifier: 41:70:8E:30:4C:F7:AB:F0:13:B9:D6:1D:9A:C2:03:81:5B:96:1D:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41708E304CF7ABF013B9D61D9AC203815B961D44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/3139302e3131352e36382e302f32322d3234203d3e20323730353438.roa
Signing time:             Thu 21 Sep 2023 19:53:38 +0000
ROA not before:           Thu 21 Sep 2023 19:48:38 +0000
ROA not after:            Thu 19 Sep 2024 19:53:38 +0000
asID:                     270548
IP address blocks:        190.115.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fd:68:88:a1:b2:bc:47:4b:b2:3f:11:52:c3:53:a6:8c:44:d6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41708E304CF7ABF013B9D61D9AC203815B961D44
        Validity
            Not Before: Sep 21 19:48:38 2023 GMT
            Not After : Sep 19 19:53:38 2024 GMT
        Subject: CN=62F22176111F49BC3B17D8A2ECAD1FA3D292DCF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:09:77:aa:f6:c9:ff:da:8b:43:c0:38:de:1f:
                    ee:74:38:4d:23:22:03:37:ff:b6:9a:1f:61:ca:27:
                    3b:30:fa:c7:75:24:da:d1:11:ca:b7:7e:ee:71:30:
                    1a:2f:96:0f:72:d5:9e:ba:11:7f:ab:5f:65:63:a5:
                    76:e5:ef:89:db:b3:39:e0:a7:96:9c:ec:b1:ef:41:
                    78:bb:56:4c:d9:48:80:94:db:3a:59:a0:24:29:e3:
                    0e:02:4b:83:d2:50:f5:26:84:fa:63:65:c0:1d:48:
                    20:02:8f:3a:90:0f:a3:d6:8d:a5:ee:d5:e2:06:78:
                    e6:4f:41:f6:9f:76:84:1a:51:7e:6c:cf:d6:3e:4e:
                    20:df:b3:c7:12:17:ea:03:00:3e:42:0a:bb:22:fb:
                    17:54:df:57:d9:8b:a6:bb:e3:3e:09:c4:eb:f5:f4:
                    7a:a2:ed:aa:02:6d:22:95:db:3b:d7:20:73:70:e7:
                    95:46:5a:ea:76:93:7a:ed:df:16:e4:8f:89:c6:ec:
                    fb:7b:c3:ff:25:ec:41:9f:bc:c4:88:f0:ac:1f:26:
                    07:75:1c:0a:4a:40:2a:c8:cd:fc:a6:1b:25:ad:d9:
                    8d:69:99:18:5a:f8:ed:c2:53:23:9b:c0:4b:82:98:
                    d5:2e:e7:a3:47:78:32:3e:a2:fe:78:9e:a5:49:24:
                    3a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F2:21:76:11:1F:49:BC:3B:17:D8:A2:EC:AD:1F:A3:D2:92:DC:F7
            X509v3 Authority Key Identifier:
                keyid:41:70:8E:30:4C:F7:AB:F0:13:B9:D6:1D:9A:C2:03:81:5B:96:1D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/41708E304CF7ABF013B9D61D9AC203815B961D44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41708E304CF7ABF013B9D61D9AC203815B961D44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/3139302e3131352e36382e302f32322d3234203d3e20323730353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:34:d1:79:fa:00:d9:d8:b8:0a:a8:3b:ff:c1:b8:07:6b:86:
         59:02:4d:91:0c:b9:03:e2:8d:28:b8:82:9f:b1:c3:36:15:fc:
         6f:a7:21:25:43:e4:ed:88:49:e2:b3:e5:44:7f:21:84:44:f4:
         f5:0c:82:3a:6d:1a:7f:5d:c1:34:c2:7a:ba:fd:d8:c7:a8:d9:
         c7:9a:95:da:e8:49:48:e8:40:c8:e8:b6:bb:0d:4f:51:3a:dc:
         cd:b0:82:ea:f6:4d:86:f0:8f:be:6b:7e:a6:e2:45:0e:1b:54:
         0f:06:3b:1d:5e:ad:90:4f:e4:5c:8f:e7:f2:d3:f4:cb:e1:f1:
         00:d3:dd:0f:9a:73:88:93:9d:ab:b1:f1:a5:e0:ff:ed:e4:a7:
         72:d1:a8:94:61:44:e9:84:d2:16:00:ae:57:8d:a6:9d:7e:9a:
         8c:d4:a2:43:84:91:03:b9:9e:12:73:d7:d9:62:75:1a:60:0b:
         34:aa:5a:9c:db:eb:d5:55:80:b5:97:31:95:c6:f3:b3:65:37:
         8f:5a:62:6d:bb:7a:d1:49:05:bd:e7:8e:a8:1a:21:8c:88:03:
         6c:21:1b:80:49:03:ed:e7:1a:8c:d8:c3:d4:a1:e8:ba:62:9b:
         75:7d:60:aa:6b:67:27:83:aa:d7:50:a5:eb:de:6b:e7:3e:5a:
         bf:ca:60:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org