Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3135312e302f32342d3234203d3e20323730333730.roa
File:                     3139302e38392e3135312e302f32342d3234203d3e20323730333730.roa (raw, json)
Hash identifier:          djkFsWdsus+j6hfwTcPHigtZC4UKGX5niRfYZXjYh9U=
Subject key identifier:   70:66:BE:99:CF:64:A4:0E:FD:BC:AB:59:8C:87:65:2C:71:EB:06:35
Certificate issuer:       /CN=7196070155EEACE0B9DB990C69D30A191553EAC8
Certificate serial:       63CCC5CA1A69DB1F5EAD20A0AFFF6E754E7B38D2
Authority key identifier: 71:96:07:01:55:EE:AC:E0:B9:DB:99:0C:69:D3:0A:19:15:53:EA:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7196070155EEACE0B9DB990C69D30A191553EAC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3135312e302f32342d3234203d3e20323730333730.roa
Signing time:             Thu 29 Feb 2024 20:34:35 +0000
ROA not before:           Thu 29 Feb 2024 20:29:35 +0000
ROA not after:            Thu 27 Feb 2025 20:34:35 +0000
asID:                     270370
IP address blocks:        190.89.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cc:c5:ca:1a:69:db:1f:5e:ad:20:a0:af:ff:6e:75:4e:7b:38:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7196070155EEACE0B9DB990C69D30A191553EAC8
        Validity
            Not Before: Feb 29 20:29:35 2024 GMT
            Not After : Feb 27 20:34:35 2025 GMT
        Subject: CN=7066BE99CF64A40EFDBCAB598C87652C71EB0635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:32:8b:2b:26:16:81:4f:f8:8e:09:f3:f1:
                    59:9b:11:46:52:aa:ac:fa:d8:f7:b1:22:1c:3a:a3:
                    46:4b:f5:12:b8:bf:fe:f7:6b:06:77:6c:ea:2f:c7:
                    e7:01:e8:6a:9b:9e:45:19:36:ce:d3:6f:d8:69:89:
                    80:c8:1d:d1:c8:ef:c4:9e:b5:21:8f:b9:0b:63:9e:
                    b6:70:bf:5e:74:f1:fe:71:08:bf:3e:ad:24:67:51:
                    a2:36:54:e1:dd:f7:0b:10:c6:7d:bb:47:ce:70:7f:
                    a7:ff:aa:34:01:92:ee:88:0a:2f:9c:d2:d0:2e:d1:
                    43:0c:58:67:ae:45:29:5a:fd:e5:db:b1:ce:d2:48:
                    df:1a:1c:ca:6f:c6:4f:22:20:c3:e9:7b:bd:b9:f8:
                    88:74:21:eb:d1:e8:05:a5:8c:e5:55:09:1a:de:44:
                    e8:fc:55:10:cd:2e:7e:10:9e:15:4e:09:92:c1:54:
                    17:b6:31:9d:f7:64:8a:47:66:b4:24:f9:92:4c:1b:
                    21:74:62:ad:c9:d5:94:05:bb:1e:47:77:06:2c:08:
                    f7:88:e8:85:82:8b:79:d7:b7:83:eb:04:b7:ec:dc:
                    11:16:33:51:12:e3:85:04:cc:ef:2a:11:2c:57:e7:
                    67:c0:26:2d:4f:7b:07:11:d0:1f:fe:58:e3:c5:76:
                    69:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:66:BE:99:CF:64:A4:0E:FD:BC:AB:59:8C:87:65:2C:71:EB:06:35
            X509v3 Authority Key Identifier:
                keyid:71:96:07:01:55:EE:AC:E0:B9:DB:99:0C:69:D3:0A:19:15:53:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/7196070155EEACE0B9DB990C69D30A191553EAC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7196070155EEACE0B9DB990C69D30A191553EAC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3135312e302f32342d3234203d3e20323730333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:d2:f1:e2:ea:5e:75:c7:48:f6:0c:38:a8:75:21:01:a5:fc:
         76:52:95:ab:35:4d:7e:3f:a3:82:ca:47:a5:f5:41:39:56:5a:
         06:18:80:a8:a5:65:9f:9a:af:24:2d:51:0b:76:3c:54:00:aa:
         30:c5:66:d8:7f:6a:b6:98:db:0e:18:fc:4d:d1:7e:aa:94:9c:
         39:2e:ed:bd:d3:71:f3:ae:ad:90:67:02:cd:5d:57:2e:26:b4:
         3a:a5:06:a4:c3:03:90:00:a6:55:03:33:41:c5:e0:ec:18:69:
         08:e7:a4:d4:3d:7c:05:6b:97:d8:50:9e:4f:ff:af:1e:0a:a3:
         0d:d6:b9:26:0c:e3:21:1d:b9:24:93:e8:45:06:de:e1:26:57:
         f1:39:8d:c3:26:4f:30:ae:42:e3:d2:20:d7:74:cd:2a:15:04:
         89:f1:9b:36:f1:3b:bb:00:3d:f1:ec:86:a3:ea:5a:87:1a:a9:
         c0:ea:f8:1e:b1:af:f9:69:60:ab:c7:4c:db:03:ce:7c:8c:6e:
         a3:e8:85:b0:f8:67:7c:8f:48:51:92:fd:e5:f4:47:ab:39:90:
         30:e1:3b:a1:00:a3:89:f7:69:ec:ef:f6:66:89:5a:e5:2f:a8:
         ce:f5:ed:8a:bf:50:96:93:0c:a8:32:32:f8:bc:55:f4:68:e7:
         fd:55:80:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org