Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa
File:                     3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa (raw, json)
Hash identifier:          7DRWA4+H8sCKzf20mLF4VtZXTcIvHAOqs0BO69RCl+I=
Subject key identifier:   F2:05:A5:EF:C1:72:0E:B6:37:B9:B5:B7:62:D7:EB:22:4E:A6:0E:4D
Certificate issuer:       /CN=F26D92011A6EAFA382E390DF1E18F9DF59CCCF2F
Certificate serial:       0429DAF48C946BDA1518708850D186AF43894BC3
Authority key identifier: F2:6D:92:01:1A:6E:AF:A3:82:E3:90:DF:1E:18:F9:DF:59:CC:CF:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F26D92011A6EAFA382E390DF1E18F9DF59CCCF2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa
Signing time:             Tue 15 Aug 2023 14:36:57 +0000
ROA not before:           Tue 15 Aug 2023 14:31:57 +0000
ROA not after:            Tue 13 Aug 2024 14:36:57 +0000
asID:                     270860
IP address blocks:        190.124.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:29:da:f4:8c:94:6b:da:15:18:70:88:50:d1:86:af:43:89:4b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F26D92011A6EAFA382E390DF1E18F9DF59CCCF2F
        Validity
            Not Before: Aug 15 14:31:57 2023 GMT
            Not After : Aug 13 14:36:57 2024 GMT
        Subject: CN=F205A5EFC1720EB637B9B5B762D7EB224EA60E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:a6:36:80:cc:35:59:8f:c1:d5:b9:1e:4a:
                    3f:51:69:e1:3d:2f:1a:7f:89:17:d8:51:14:17:fa:
                    b4:7d:4a:42:32:27:3a:ec:15:1a:ae:0e:4c:f3:08:
                    c4:d2:4a:80:e6:31:d1:20:98:30:46:0d:a5:ed:4a:
                    aa:45:06:77:65:83:dc:60:28:69:fa:d0:95:91:b2:
                    52:11:02:bf:76:1f:5e:72:3c:6b:5d:e2:0f:41:6b:
                    46:6e:8b:f7:1f:9f:46:92:0f:34:40:2c:df:b0:d3:
                    9d:1e:6d:80:6f:9c:6e:53:50:79:0c:57:5a:26:1a:
                    ab:1a:32:f0:4d:3f:33:99:e1:14:67:31:ab:66:5f:
                    31:bf:11:a9:fb:2e:af:94:60:34:0f:a4:1c:aa:71:
                    87:df:c7:cf:97:ce:51:60:a4:95:71:6e:87:38:9e:
                    8b:d7:1f:8d:8b:e9:57:48:9d:a0:74:b2:6e:49:80:
                    40:1a:62:e1:6d:ff:2c:a6:22:9e:6b:85:cd:c3:72:
                    8d:53:2d:a5:6e:88:84:a3:d5:44:35:92:16:76:de:
                    4b:ea:22:71:43:b9:04:38:dd:b8:cf:fd:41:9e:7f:
                    53:68:48:b5:ae:62:ef:0a:2a:73:c0:28:dc:56:e4:
                    4c:d1:cd:21:d8:9e:e3:bf:ca:e1:3e:ed:08:ab:d6:
                    9f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:05:A5:EF:C1:72:0E:B6:37:B9:B5:B7:62:D7:EB:22:4E:A6:0E:4D
            X509v3 Authority Key Identifier:
                keyid:F2:6D:92:01:1A:6E:AF:A3:82:E3:90:DF:1E:18:F9:DF:59:CC:CF:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/F26D92011A6EAFA382E390DF1E18F9DF59CCCF2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F26D92011A6EAFA382E390DF1E18F9DF59CCCF2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:88:3d:57:50:29:a1:c0:2c:3d:b6:dd:9c:92:a0:f8:e3:97:
         30:e7:03:b8:0e:3d:58:5a:27:e8:b1:cb:a8:9c:60:b2:a6:3c:
         bd:a6:62:e5:6d:b8:c5:a4:40:31:23:67:21:7b:dc:74:e3:a8:
         93:a0:55:6a:5e:6f:f3:c9:2b:b2:15:39:43:c3:aa:df:9b:fb:
         e4:b2:6c:a0:d7:06:2d:ea:54:72:50:04:bc:97:29:cc:a8:0f:
         65:ee:91:83:df:8b:ea:ab:23:47:a8:28:98:9c:5a:ca:21:4a:
         46:4b:7e:e7:7a:c9:c4:3d:49:b3:68:84:01:69:29:95:09:1d:
         3f:ff:d4:45:36:a2:b2:3c:88:50:db:37:0b:a6:bb:58:c0:7c:
         72:d3:30:0f:01:e7:cd:83:df:66:4c:79:48:d0:a9:cb:91:f9:
         33:95:46:5c:ce:a0:32:8e:98:c6:be:92:0b:14:20:4b:0e:1b:
         2b:99:d4:51:18:8a:ff:c5:34:a2:86:c5:56:c4:f7:d4:70:96:
         eb:2e:d2:0f:9d:2d:f2:ec:b4:20:d4:9f:47:ba:e4:fc:12:4c:
         97:31:7a:0f:eb:ad:e1:ed:66:d4:6c:06:80:10:3a:0f:f1:a8:
         3c:b3:d4:55:e9:00:86:2f:01:44:ff:74:29:f0:01:48:61:af:
         a2:86:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org