Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/3139302e3130332e3134382e302f32322d3234203d3e20323730393335.roa
File:                     3139302e3130332e3134382e302f32322d3234203d3e20323730393335.roa (raw, json)
Hash identifier:          +i0WkDc1LscIkkLaOvxVKF4ngMZI1Wp8y/DCCzrlo3k=
Subject key identifier:   AF:F7:1A:62:46:45:5C:2B:3D:67:3F:5F:65:2B:B0:08:A6:0E:5F:D9
Certificate issuer:       /CN=F2CB4D8C555C5C75560EAC12733A3547001E9332
Certificate serial:       730CF0BA46346C2938DD9C0F22F754EBE900084D
Authority key identifier: F2:CB:4D:8C:55:5C:5C:75:56:0E:AC:12:73:3A:35:47:00:1E:93:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/3139302e3130332e3134382e302f32322d3234203d3e20323730393335.roa
Signing time:             Tue 31 Oct 2023 20:58:00 +0000
ROA not before:           Tue 31 Oct 2023 20:53:00 +0000
ROA not after:            Tue 29 Oct 2024 20:58:00 +0000
asID:                     270935
IP address blocks:        190.103.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0c:f0:ba:46:34:6c:29:38:dd:9c:0f:22:f7:54:eb:e9:00:08:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CB4D8C555C5C75560EAC12733A3547001E9332
        Validity
            Not Before: Oct 31 20:53:00 2023 GMT
            Not After : Oct 29 20:58:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7a:f1:73:8f:1d:31:94:cc:2b:87:ee:a5:d7:
                    46:23:55:d1:d6:9d:88:fd:a4:b0:da:72:8f:d4:62:
                    68:d6:b7:f1:ec:90:cc:20:a8:a4:12:4f:fb:04:97:
                    0b:37:46:54:e9:f5:18:c1:df:c9:45:7b:c1:e3:0c:
                    e1:8c:49:82:c2:10:50:f2:f8:ab:b3:38:1d:bd:e9:
                    cc:02:14:8f:db:97:e7:9c:99:12:a3:3d:41:b8:03:
                    31:2b:9d:df:33:26:ee:8f:79:1c:39:67:ea:20:c2:
                    06:49:6c:d6:78:62:b0:e0:c7:83:19:68:2e:3a:a4:
                    d8:79:bc:73:e7:b7:dd:82:5a:12:14:78:bc:a0:b0:
                    90:5a:48:45:b7:2c:b8:b0:92:e4:59:41:27:65:5c:
                    47:74:95:ac:21:a6:ad:7e:92:a9:79:a1:87:d7:5e:
                    40:da:c2:c7:f0:12:df:88:b4:0c:0f:1e:1f:dd:5a:
                    b8:f2:04:5a:23:5b:12:2a:e8:21:79:04:30:8e:5a:
                    2d:d9:37:2b:6b:99:1f:8a:63:e1:a8:54:38:70:de:
                    05:18:15:a4:15:31:f5:05:43:3f:6c:6b:e1:bc:65:
                    57:58:32:98:f6:af:06:64:6d:8c:39:ca:5f:a1:74:
                    d1:5d:56:d7:59:fa:b6:3e:7c:17:62:88:2b:23:78:
                    11:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F7:1A:62:46:45:5C:2B:3D:67:3F:5F:65:2B:B0:08:A6:0E:5F:D9
            X509v3 Authority Key Identifier:
                keyid:F2:CB:4D:8C:55:5C:5C:75:56:0E:AC:12:73:3A:35:47:00:1E:93:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/3139302e3130332e3134382e302f32322d3234203d3e20323730393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:51:a0:54:dd:2d:2d:2d:09:94:03:b4:9b:0e:25:f0:64:f3:
         c1:ad:33:55:9e:d9:48:3d:0f:a0:ff:c0:46:50:1a:c4:35:f8:
         1d:a1:e9:27:23:f6:1b:01:78:34:8e:18:71:83:11:45:c3:4f:
         f9:00:cb:64:5c:ed:2b:f9:fa:df:a5:3c:63:5a:3c:c7:56:8f:
         62:07:ce:ce:4d:32:0d:a9:0e:43:14:f5:97:52:0b:94:94:91:
         e2:c8:dd:17:7c:da:fe:ab:3f:52:86:65:f9:2f:7c:2d:7d:ce:
         1f:cd:a3:7b:5a:f8:f9:a9:99:03:71:54:69:83:ea:45:2e:cd:
         2b:db:6b:3d:2b:a7:9c:42:ca:fd:7a:13:3d:6c:3d:66:6c:34:
         9c:4a:e3:68:d9:c0:c5:07:29:d1:4e:8e:7d:6c:93:d7:f7:e0:
         38:82:94:cd:f5:e5:d9:54:4f:13:d7:8d:2f:ad:30:7d:0e:d5:
         c8:48:33:86:17:ac:99:d9:42:6f:86:7f:b8:f2:22:6f:a6:ef:
         02:39:f2:de:ad:f0:38:83:b0:2e:f3:f8:af:8e:dd:c0:22:7a:
         e0:59:d3:03:27:9f:50:8f:0d:54:15:b2:ca:2c:a2:5d:7e:95:
         7f:49:8b:fa:bc:b9:3d:53:15:56:5b:23:2d:88:d5:08:cd:99:
         32:0b:77:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:57 2024 by rpki-client on console-ams.rpki-client.org