Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa
File:                     3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa (raw, json)
Hash identifier:          UQm1bnNwvfAyVDn7d1LS20/yGwnSw+SqOSaYPJuorxs=
Subject key identifier:   AD:F7:5E:44:CC:02:3F:77:1B:2F:EB:E9:A0:20:91:7A:9D:E2:B0:B2
Certificate issuer:       /CN=7196070155EEACE0B9DB990C69D30A191553EAC8
Certificate serial:       424E14468728E1D42D3097214675E26D85355766
Authority key identifier: 71:96:07:01:55:EE:AC:E0:B9:DB:99:0C:69:D3:0A:19:15:53:EA:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7196070155EEACE0B9DB990C69D30A191553EAC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa
Signing time:             Thu 29 Feb 2024 20:35:37 +0000
ROA not before:           Thu 29 Feb 2024 20:30:37 +0000
ROA not after:            Thu 27 Feb 2025 20:35:37 +0000
asID:                     270370
IP address blocks:        190.89.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4e:14:46:87:28:e1:d4:2d:30:97:21:46:75:e2:6d:85:35:57:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7196070155EEACE0B9DB990C69D30A191553EAC8
        Validity
            Not Before: Feb 29 20:30:37 2024 GMT
            Not After : Feb 27 20:35:37 2025 GMT
        Subject: CN=ADF75E44CC023F771B2FEBE9A020917A9DE2B0B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:30:e0:3e:47:5b:76:c1:7e:4c:00:47:40:
                    c9:b2:5d:30:a4:6c:61:62:3e:a8:d1:1a:d9:90:28:
                    8d:8c:38:ca:4c:db:5a:30:24:25:29:51:cc:d0:4a:
                    5d:97:12:42:96:df:19:ed:91:a6:ab:13:21:08:01:
                    c7:ce:ad:17:9a:3a:3f:40:0a:5f:9f:2c:2e:d3:d5:
                    96:af:7d:12:be:f6:85:53:4c:f0:1d:79:b5:74:9e:
                    af:5c:c1:ad:ec:80:86:3e:ea:10:f2:e2:d1:2f:fb:
                    c7:db:a4:ee:da:2d:58:d9:b0:a0:d2:21:c0:5b:0d:
                    ec:7b:54:ef:71:21:c2:de:b5:7e:d3:55:cf:59:2b:
                    ae:a3:74:b4:89:6b:62:29:16:6a:60:01:8c:58:b7:
                    8f:d5:0e:bc:bb:6b:c4:4e:96:8c:96:9b:36:6f:66:
                    88:21:31:af:61:60:c7:c2:f6:36:5b:5e:7d:73:56:
                    4f:af:57:13:be:2c:77:7c:78:2b:c2:75:d0:03:55:
                    89:1d:02:1a:19:9f:6d:0f:82:76:59:3a:51:39:82:
                    07:24:ba:81:f7:34:27:ef:38:cc:4d:ef:87:aa:b7:
                    ee:4c:8a:49:5f:c7:2b:10:92:19:32:a5:48:cc:82:
                    06:67:ff:58:de:a8:a5:41:0f:60:0c:e9:a1:6a:e9:
                    21:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F7:5E:44:CC:02:3F:77:1B:2F:EB:E9:A0:20:91:7A:9D:E2:B0:B2
            X509v3 Authority Key Identifier:
                keyid:71:96:07:01:55:EE:AC:E0:B9:DB:99:0C:69:D3:0A:19:15:53:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/7196070155EEACE0B9DB990C69D30A191553EAC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7196070155EEACE0B9DB990C69D30A191553EAC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:69:07:4f:c3:38:aa:48:f0:84:e0:3d:d5:dc:05:14:3f:6e:
         05:b4:0f:d0:d5:b1:84:96:21:c5:b5:49:98:4d:90:de:94:b9:
         60:6a:08:b0:71:4b:3a:33:d4:ea:fc:a9:ee:62:f1:dc:52:fa:
         e6:f5:0c:e2:17:8d:b1:d1:bc:2a:9a:52:de:31:a1:a9:d8:63:
         bc:ed:16:51:e9:69:7b:3c:ad:98:b8:65:0e:56:a8:bf:88:fb:
         af:e3:bb:4b:31:8a:d3:7b:27:98:96:cf:32:f1:d9:fe:b5:19:
         f5:4e:65:ab:e9:d1:81:b6:be:83:f4:99:02:d0:2e:af:7b:d5:
         73:ff:cd:75:8a:b2:75:cc:3c:65:2b:db:bb:ec:8a:28:80:d0:
         8e:eb:7f:34:3e:3b:0c:9d:da:36:8c:d3:e2:d5:af:5f:db:2b:
         0a:c0:57:21:e3:9a:6c:4a:03:8e:06:ce:fe:3a:b5:82:80:5c:
         a9:b1:ff:ca:50:d5:c3:3f:83:1c:c3:52:85:6a:1c:e8:d0:4d:
         76:c0:86:e2:c5:31:3b:b4:bb:44:af:fc:d6:9d:1c:b7:05:f9:
         63:ee:e7:74:66:55:1b:b8:53:1b:73:9a:17:8b:8a:39:eb:14:
         22:29:8a:44:e8:79:79:d1:a3:59:ee:61:1c:57:14:a3:3a:d0:
         78:91:57:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org