Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3135312e302f32342d3332203d3e20323730333730.roa
File:                     3139302e38392e3135312e302f32342d3332203d3e20323730333730.roa (raw, json)
Hash identifier:          t9aGF4GNw0voPMPRvoTGF3/+/0TvUVIv87Qr7uGaEP4=
Subject key identifier:   B1:22:34:B4:59:81:23:19:39:90:B3:A1:76:F3:E7:62:E3:06:85:F8
Certificate issuer:       /CN=6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9
Certificate serial:       070F4283E3101A7B5B0DF15C5D6147BF29006CCE
Authority key identifier: 6B:FE:4C:13:23:7B:DB:8F:DD:E5:06:CE:A7:34:B9:89:B3:DC:91:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3135312e302f32342d3332203d3e20323730333730.roa
Signing time:             Tue 02 May 2023 11:27:35 +0000
ROA not before:           Tue 02 May 2023 11:22:35 +0000
ROA not after:            Tue 30 Apr 2024 11:27:35 +0000
asID:                     270370
IP address blocks:        190.89.151.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0f:42:83:e3:10:1a:7b:5b:0d:f1:5c:5d:61:47:bf:29:00:6c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9
        Validity
            Not Before: May  2 11:22:35 2023 GMT
            Not After : Apr 30 11:27:35 2024 GMT
        Subject: CN=B12234B4598123193990B3A176F3E762E30685F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6c:de:d9:be:63:15:bb:f6:9d:aa:64:66:96:
                    bb:01:e3:e2:48:47:c2:ac:90:47:86:80:bd:b6:ed:
                    97:66:39:34:f4:c9:ad:d7:5c:8d:05:1e:68:be:8c:
                    85:4a:78:7f:1b:16:de:37:ea:93:8e:74:21:9e:05:
                    74:15:54:fa:09:e2:8f:41:ba:86:14:1c:db:22:50:
                    ac:80:f7:7d:a5:49:f7:95:cc:b6:f2:9d:51:db:8c:
                    0d:61:7d:a5:bf:cc:12:1d:e0:04:fe:b1:2a:cb:4a:
                    e5:1c:f3:47:e5:c6:cc:f1:4d:37:37:3f:89:e9:a0:
                    74:94:52:7a:c7:58:bd:25:f0:a7:6a:55:ac:1f:5c:
                    c4:d4:81:4d:4f:3e:cb:60:38:ca:2f:ab:fb:ab:fb:
                    1a:fc:f8:26:b5:c9:3c:a8:7d:80:3c:86:a1:f3:91:
                    a4:a3:7b:87:d9:f4:ef:04:9e:e1:08:3b:d2:90:70:
                    6b:54:37:66:ac:76:73:d3:36:0a:33:41:0f:a1:35:
                    cf:ba:5c:59:74:ba:ae:2c:3d:22:6f:01:73:39:ea:
                    c1:e9:e8:85:07:6a:4b:b5:7e:1d:1d:21:94:63:29:
                    5b:76:50:3e:36:04:c4:21:1f:fa:1e:73:d5:90:41:
                    b3:ad:0a:47:2e:26:4c:3c:54:24:45:9a:00:43:e9:
                    dc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:22:34:B4:59:81:23:19:39:90:B3:A1:76:F3:E7:62:E3:06:85:F8
            X509v3 Authority Key Identifier:
                keyid:6B:FE:4C:13:23:7B:DB:8F:DD:E5:06:CE:A7:34:B9:89:B3:DC:91:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3135312e302f32342d3332203d3e20323730333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:e9:53:21:5f:a9:a2:e0:99:0b:4a:41:0d:2f:12:3c:db:8a:
         4b:2a:57:40:f2:50:c9:aa:e5:1a:e8:76:a2:1e:a1:c7:4a:b4:
         52:36:f6:6c:1d:7e:88:95:2b:89:b8:ee:b8:8d:90:92:61:74:
         f4:27:ae:5f:9e:a5:16:07:1d:e8:c7:b3:79:2a:1b:1d:2f:14:
         bc:94:ec:76:b5:2d:45:43:a3:5b:a9:dd:fe:d1:71:bf:0a:75:
         35:f0:4d:7d:fc:b1:c7:3c:7f:7d:52:90:8f:3a:47:2b:48:6b:
         c9:31:d6:71:bc:46:10:84:d3:ea:22:c8:32:5d:09:65:19:11:
         ba:33:6f:42:31:28:72:3b:9a:29:e6:7c:d0:85:8a:70:0b:9a:
         9b:e6:f9:47:f1:02:83:d4:f8:ce:06:74:1f:e2:a7:1c:ac:bb:
         16:eb:15:21:19:0c:9e:db:1c:55:1f:bd:c7:86:cd:1c:78:74:
         15:c7:64:af:6b:d8:89:86:43:0f:ef:ec:38:db:ab:0b:81:28:
         20:f2:bc:3e:96:dd:5c:9b:8b:be:8f:20:4a:15:6f:b4:3d:fe:
         52:df:62:4e:57:8c:6d:f1:27:e6:75:d3:21:8e:a9:34:5b:a5:
         cd:d6:72:45:d8:9d:b9:01:8e:00:88:5a:4b:47:3c:3f:01:c3:
         a3:d1:0d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org