Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/3139302e3131312e3133302e302f32342d3234203d3e20323730333832.roa
File:                     3139302e3131312e3133302e302f32342d3234203d3e20323730333832.roa (raw, json)
Hash identifier:          Cv63blfh5vQZiCBNe8cG9j4uLkdTu+DCp51+WJfYiDs=
Subject key identifier:   04:D7:5C:11:BD:A0:64:94:7F:FD:BA:27:D6:D3:07:47:12:8A:23:D6
Certificate issuer:       /CN=85192C5FA856A20D36DBD2155B9F94D2C94DFA3F
Certificate serial:       3211F831CB590EC83BBEA1C2BA4E92528346B1B2
Authority key identifier: 85:19:2C:5F:A8:56:A2:0D:36:DB:D2:15:5B:9F:94:D2:C9:4D:FA:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/3139302e3131312e3133302e302f32342d3234203d3e20323730333832.roa
Signing time:             Mon 18 Dec 2023 19:19:25 +0000
ROA not before:           Mon 18 Dec 2023 19:14:25 +0000
ROA not after:            Mon 16 Dec 2024 19:19:25 +0000
asID:                     270382
IP address blocks:        190.111.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:11:f8:31:cb:59:0e:c8:3b:be:a1:c2:ba:4e:92:52:83:46:b1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85192C5FA856A20D36DBD2155B9F94D2C94DFA3F
        Validity
            Not Before: Dec 18 19:14:25 2023 GMT
            Not After : Dec 16 19:19:25 2024 GMT
        Subject: CN=04D75C11BDA064947FFDBA27D6D30747128A23D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3d:70:f1:73:43:bf:9a:9c:01:5c:a3:ad:77:
                    2f:06:fc:35:a6:98:fb:c7:f5:98:04:02:f2:09:9b:
                    da:9b:4d:2c:a3:3a:06:f7:27:69:15:50:8f:f5:44:
                    8c:62:13:e5:ab:0c:c7:fa:61:e5:70:0c:55:a6:82:
                    77:40:b7:4f:8f:a3:46:32:e2:e9:72:db:3d:6b:92:
                    c4:a2:70:8a:cf:66:42:ab:dd:02:25:fb:e5:5b:bd:
                    24:84:d7:7b:b7:66:09:96:cd:f0:cd:86:b9:1e:9b:
                    fe:f3:34:ea:3c:26:ef:c5:c9:99:8b:21:71:94:89:
                    0c:b2:55:1a:85:38:2b:4a:c1:11:59:58:4a:74:9b:
                    2e:01:3d:0a:72:1c:dc:e5:9d:18:e7:db:79:3c:89:
                    76:20:87:68:f5:ff:19:0f:35:c9:95:55:83:65:c8:
                    33:0e:3e:a5:3b:e7:19:2f:9e:c8:37:ea:4f:f6:22:
                    d6:1e:3c:ae:0a:a9:3b:2f:78:e7:58:25:e5:98:c6:
                    3c:e4:55:3b:f7:07:55:14:8d:f6:95:f4:5d:7f:c6:
                    0c:16:20:00:d5:0c:f1:8e:9a:fd:37:20:ad:02:e6:
                    47:c7:e9:8b:5f:35:dc:42:04:93:2d:92:9b:46:e6:
                    86:9f:76:d7:eb:b2:4b:28:4d:16:46:2b:8e:b5:44:
                    fc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D7:5C:11:BD:A0:64:94:7F:FD:BA:27:D6:D3:07:47:12:8A:23:D6
            X509v3 Authority Key Identifier:
                keyid:85:19:2C:5F:A8:56:A2:0D:36:DB:D2:15:5B:9F:94:D2:C9:4D:FA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85192C5FA856A20D36DBD2155B9F94D2C94DFA3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/3139302e3131312e3133302e302f32342d3234203d3e20323730333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:d1:e8:50:0e:a8:27:ef:33:0a:c8:b2:64:15:57:2c:17:a9:
         ff:ec:9d:9e:7c:63:68:b7:1f:aa:0c:ea:f3:78:0d:46:f6:40:
         29:fc:5d:10:30:64:13:a6:5e:57:ae:59:ae:6b:97:84:3b:b1:
         7c:74:4e:85:bf:32:e3:23:3f:7f:ea:dc:bc:4b:4c:46:c9:e2:
         ca:8c:1c:26:4d:a7:1c:44:c6:9a:75:3c:21:6a:59:b1:cc:4f:
         9f:65:3f:80:00:85:82:bd:61:3d:b6:94:b4:25:66:d6:af:97:
         d6:92:4e:40:ba:a1:7e:9a:26:10:28:66:a2:73:e1:f9:2e:2c:
         02:6c:ab:e5:1d:e0:33:75:46:21:07:fe:40:b3:64:b1:f2:f4:
         79:48:ef:e1:5e:f9:e9:64:3b:7e:8d:35:62:b3:c1:1d:4f:b5:
         2c:cf:d8:e3:1d:ec:a8:bf:3f:b5:cd:58:f7:9d:f6:bf:44:72:
         09:8c:19:dd:e6:f6:b3:64:24:a4:88:75:84:b6:a6:78:34:05:
         40:1e:ac:ac:a7:62:62:0b:38:c3:e7:ab:ac:b1:18:9d:b4:99:
         45:8f:9f:5c:a9:6b:ea:93:36:b7:2c:5a:de:72:2e:0f:33:dc:
         10:f3:bb:a6:3a:06:cc:4c:a3:78:6b:51:ea:ee:57:97:f6:a6:
         1e:5f:19:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org