Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3135302e302f32342d3332203d3e20323730333730.roa
File:                     3139302e38392e3135302e302f32342d3332203d3e20323730333730.roa (raw, json)
Hash identifier:          5HZEb5065V/03ZvDrBGkYpfpwkpNOYiDPfybihRXceQ=
Subject key identifier:   F8:B1:49:74:48:4E:5F:82:B4:03:D6:1B:2E:7D:56:E0:32:28:56:18
Certificate issuer:       /CN=6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9
Certificate serial:       1C7BCBA9DCFA1F56E24DDC00BDCF6F05A9B63F76
Authority key identifier: 6B:FE:4C:13:23:7B:DB:8F:DD:E5:06:CE:A7:34:B9:89:B3:DC:91:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3135302e302f32342d3332203d3e20323730333730.roa
Signing time:             Tue 02 May 2023 11:27:30 +0000
ROA not before:           Tue 02 May 2023 11:22:30 +0000
ROA not after:            Tue 30 Apr 2024 11:27:30 +0000
asID:                     270370
IP address blocks:        190.89.150.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7b:cb:a9:dc:fa:1f:56:e2:4d:dc:00:bd:cf:6f:05:a9:b6:3f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9
        Validity
            Not Before: May  2 11:22:30 2023 GMT
            Not After : Apr 30 11:27:30 2024 GMT
        Subject: CN=F8B14974484E5F82B403D61B2E7D56E032285618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:35:06:d9:38:ad:83:69:0c:99:ea:0d:3c:a1:
                    86:e5:d0:e9:94:a6:1a:ac:e9:33:2a:82:f4:6d:6f:
                    48:9f:d1:ed:a9:47:6b:63:70:48:8a:51:fe:cb:3e:
                    7b:84:ce:05:93:51:8d:93:39:5e:0d:20:24:10:26:
                    1c:8d:70:fa:d0:d1:6e:0b:03:11:14:5b:b2:ee:90:
                    93:13:2b:14:6d:6d:5f:e0:c9:80:05:4e:fc:23:2a:
                    86:6e:90:2c:e0:c7:17:b8:a2:75:b1:21:27:3f:be:
                    58:92:32:7f:b7:02:2d:e1:ba:6f:12:e9:36:44:c7:
                    29:9d:58:f9:c5:74:60:6e:da:ab:97:9e:60:e6:1e:
                    ac:6e:db:dd:17:d0:fa:af:c0:a6:c5:29:76:69:b9:
                    98:6e:ac:3b:05:54:29:fe:f6:6f:53:5f:64:d8:eb:
                    de:f1:70:61:06:8b:dc:f7:8a:68:b0:1d:67:3b:d6:
                    d0:7d:72:47:f4:2d:8a:5b:51:1f:5e:1f:fe:cf:10:
                    68:78:c4:e3:87:b4:23:fb:14:b7:b8:3b:62:20:c5:
                    70:8c:0f:fb:72:4f:bb:1b:57:05:f8:71:41:93:c0:
                    30:ad:6b:c6:9b:3e:fe:7a:d5:ab:b7:40:4f:35:1d:
                    a5:b6:68:7d:86:6d:66:0c:cd:74:10:40:d0:d8:0b:
                    64:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B1:49:74:48:4E:5F:82:B4:03:D6:1B:2E:7D:56:E0:32:28:56:18
            X509v3 Authority Key Identifier:
                keyid:6B:FE:4C:13:23:7B:DB:8F:DD:E5:06:CE:A7:34:B9:89:B3:DC:91:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3135302e302f32342d3332203d3e20323730333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:82:1f:ee:d7:be:54:bf:1b:16:cf:6b:11:3c:ba:90:3d:a2:
         64:8d:62:6c:84:53:76:0c:89:dd:e6:35:e1:a0:e5:b6:f0:95:
         00:7d:d4:1c:67:77:11:ea:9c:aa:a8:41:a6:36:d5:8d:a0:5e:
         44:68:39:71:b9:ee:b4:a0:db:b2:a8:94:4d:d5:e2:bf:02:b4:
         78:1e:25:95:c6:5c:3d:49:85:b5:22:8d:28:40:17:51:17:30:
         7d:47:a2:dd:80:a5:c3:a4:fe:d2:03:2e:38:6f:a7:29:0a:f0:
         ea:d7:c8:20:c5:82:f5:3e:b2:3b:7f:36:98:96:b0:99:d6:d3:
         a8:c5:72:d5:98:31:1c:b0:6c:d4:a7:2e:43:6c:66:0e:41:f2:
         d5:8a:0d:5e:4e:44:24:4d:72:37:23:c4:8c:73:4e:0d:f8:21:
         af:0a:73:11:5b:ab:a9:97:91:49:0d:ce:81:e3:10:72:ec:00:
         f8:ad:16:93:97:ca:e1:a8:8b:a5:05:aa:89:4e:eb:86:f4:49:
         b6:5e:08:d3:92:5b:65:47:9e:27:4d:06:bf:60:c3:00:11:a9:
         e6:dc:38:19:08:da:c1:db:01:3e:a7:01:99:87:40:2f:25:ca:
         ed:dd:a5:35:9c:51:98:3b:7d:d2:1b:e4:3a:66:66:fb:53:e0:
         b8:b2:02:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org