Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134382e302f32342d3332203d3e20323730333730.roa
File:                     3139302e38392e3134382e302f32342d3332203d3e20323730333730.roa (raw, json)
Hash identifier:          m4tFVCUFRYvEtbV4LHKKGrwtu0Jykj6uB5/aGAqjaSg=
Subject key identifier:   E2:02:BA:EA:C0:64:C0:CD:BB:76:96:C3:7F:A9:DB:2F:F6:F1:2D:C9
Certificate issuer:       /CN=6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9
Certificate serial:       5B998DEE35F9EEBBB43E651EF1B28E49D7ADAA6D
Authority key identifier: 6B:FE:4C:13:23:7B:DB:8F:DD:E5:06:CE:A7:34:B9:89:B3:DC:91:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134382e302f32342d3332203d3e20323730333730.roa
Signing time:             Tue 02 May 2023 11:27:18 +0000
ROA not before:           Tue 02 May 2023 11:22:18 +0000
ROA not after:            Tue 30 Apr 2024 11:27:18 +0000
asID:                     270370
IP address blocks:        190.89.148.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:99:8d:ee:35:f9:ee:bb:b4:3e:65:1e:f1:b2:8e:49:d7:ad:aa:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9
        Validity
            Not Before: May  2 11:22:18 2023 GMT
            Not After : Apr 30 11:27:18 2024 GMT
        Subject: CN=E202BAEAC064C0CDBB7696C37FA9DB2FF6F12DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:72:75:eb:02:7d:71:c5:b6:f5:d1:75:15:16:
                    3c:98:01:34:41:df:b6:9e:c4:06:b7:f8:53:66:97:
                    86:c4:af:e8:a0:1f:bf:87:64:c7:c9:3e:6b:44:83:
                    ce:db:32:67:f0:c6:d5:7c:a7:ea:e7:b1:cf:4d:23:
                    04:71:cc:52:16:99:b7:86:d3:79:fe:64:24:3c:cc:
                    9a:b4:c3:33:9c:a3:90:d5:d2:64:bd:93:f0:d0:88:
                    51:12:f4:e0:28:0e:70:49:86:b4:e5:31:90:81:8d:
                    f7:9c:92:19:e0:6e:5d:e0:4e:6d:ae:b4:7d:ec:9c:
                    2c:9f:0f:d4:4d:84:a7:1f:e8:be:67:0a:5a:88:0e:
                    91:fb:e9:91:0b:64:54:0b:40:df:bb:c9:1b:ad:1b:
                    3d:0e:7b:03:2e:21:6a:79:8f:f8:9b:5b:73:9f:a6:
                    c6:d3:7e:ad:13:0c:35:d2:2b:90:0a:9f:69:03:de:
                    60:bc:0e:9b:f1:9f:28:28:a1:22:fb:9a:57:8b:36:
                    0e:23:85:dc:4e:d6:82:83:43:a6:5e:5d:95:1f:f6:
                    af:9b:d6:69:e4:77:c1:7a:d4:9a:3d:be:11:8c:a3:
                    af:11:ec:29:0c:99:0c:18:94:6c:f7:85:33:d0:db:
                    5b:61:9e:93:59:5e:7b:d9:d8:44:07:0f:fa:dd:26:
                    04:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:02:BA:EA:C0:64:C0:CD:BB:76:96:C3:7F:A9:DB:2F:F6:F1:2D:C9
            X509v3 Authority Key Identifier:
                keyid:6B:FE:4C:13:23:7B:DB:8F:DD:E5:06:CE:A7:34:B9:89:B3:DC:91:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134382e302f32342d3332203d3e20323730333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:95:9b:42:46:f7:da:f2:e5:06:32:6a:b7:8b:88:31:21:71:
         e8:33:0d:a8:08:d9:b3:c2:dc:63:55:43:46:e5:1f:ff:96:6c:
         42:2a:0c:06:1d:08:bf:5d:b8:03:e1:e4:b6:ae:ad:7b:2a:09:
         33:a4:97:e6:dd:d7:52:aa:3f:5d:67:6f:77:3c:40:f5:21:49:
         f9:7c:6a:4b:7d:99:96:c2:63:03:f1:a3:fa:bf:a8:2c:dc:32:
         46:c0:9f:1c:62:24:6e:e1:70:ce:56:04:0b:2e:0f:25:7e:14:
         54:40:39:16:14:86:b2:9c:ad:fc:70:a1:a4:b6:53:0f:b5:b2:
         9c:36:04:17:0e:ed:4b:46:fc:21:3b:8e:94:24:45:de:fc:74:
         bf:cf:24:19:b5:97:88:6f:73:2e:ba:68:dd:61:9f:75:4f:57:
         70:61:50:77:00:a6:5e:1c:1a:19:b9:0d:4d:53:74:9a:7f:24:
         a9:95:94:d9:54:b4:82:41:f1:4a:00:16:c1:b5:93:ac:3f:a6:
         a2:72:7e:cc:a7:29:5c:d7:45:2c:18:ef:87:bb:be:f5:9d:94:
         41:d3:fc:19:85:e4:60:92:3c:bb:05:04:99:22:fd:98:aa:8b:
         49:ff:a4:c5:36:84:68:09:80:1e:7d:da:76:7f:2f:a6:ce:17:
         94:68:a3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org