Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234362e302f32332d3233203d3e20323730383630.roa
File:                     3139302e3132342e3234362e302f32332d3233203d3e20323730383630.roa (raw, json)
Hash identifier:          VBF+/2Kx0RxqwxfXBG2H2DjOdxh+6aC/g+XcaVv3310=
Subject key identifier:   44:0B:1D:CA:0B:C6:39:1D:84:4A:FA:57:95:45:9D:5C:65:1F:58:08
Certificate issuer:       /CN=F26D92011A6EAFA382E390DF1E18F9DF59CCCF2F
Certificate serial:       3351A6C5BF294B9DC06498579FD7006711C3DC56
Authority key identifier: F2:6D:92:01:1A:6E:AF:A3:82:E3:90:DF:1E:18:F9:DF:59:CC:CF:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F26D92011A6EAFA382E390DF1E18F9DF59CCCF2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234362e302f32332d3233203d3e20323730383630.roa
Signing time:             Tue 15 Aug 2023 14:36:57 +0000
ROA not before:           Tue 15 Aug 2023 14:31:57 +0000
ROA not after:            Tue 13 Aug 2024 14:36:57 +0000
asID:                     270860
IP address blocks:        190.124.246.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:51:a6:c5:bf:29:4b:9d:c0:64:98:57:9f:d7:00:67:11:c3:dc:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F26D92011A6EAFA382E390DF1E18F9DF59CCCF2F
        Validity
            Not Before: Aug 15 14:31:57 2023 GMT
            Not After : Aug 13 14:36:57 2024 GMT
        Subject: CN=440B1DCA0BC6391D844AFA5795459D5C651F5808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b6:8d:aa:53:01:20:ec:b0:4c:8a:fb:9e:3b:
                    25:5e:94:eb:43:05:31:cd:14:cf:48:8b:96:f7:40:
                    d4:fc:67:6a:34:44:2e:42:d0:69:5e:07:7d:68:52:
                    23:36:2e:ad:ee:7a:ff:ae:76:13:71:56:95:d7:60:
                    01:15:12:a9:4c:a7:92:55:8e:03:42:7d:39:e3:a7:
                    e5:ad:3d:d6:db:29:cd:18:28:41:db:5e:94:30:28:
                    07:53:4a:64:2e:64:ba:6b:b0:1e:95:6a:56:a2:d4:
                    ba:57:18:02:d8:d5:f4:08:45:53:25:55:e3:91:83:
                    e3:58:63:29:cf:c5:2a:93:52:85:34:06:7c:15:74:
                    9d:ca:41:84:a3:4e:cf:83:b4:76:b1:86:64:98:93:
                    e6:a1:60:9d:31:9f:a5:7d:2b:f4:9b:f3:d7:9b:f9:
                    c5:37:e4:3c:5e:fc:65:0e:4a:ba:8f:04:db:39:fc:
                    6b:6f:63:b8:d3:fe:a1:e5:12:de:4b:c8:93:f4:51:
                    8a:fc:da:53:ea:eb:76:85:77:0e:90:60:6d:c3:ba:
                    ec:0d:0d:2a:3f:8c:7b:0c:a0:e6:ca:c9:9f:2b:1b:
                    79:6a:15:bf:7b:87:e5:94:47:6b:50:b6:a9:2b:8b:
                    7b:f6:4b:81:17:73:8b:8f:c4:2a:15:01:92:97:87:
                    84:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0B:1D:CA:0B:C6:39:1D:84:4A:FA:57:95:45:9D:5C:65:1F:58:08
            X509v3 Authority Key Identifier:
                keyid:F2:6D:92:01:1A:6E:AF:A3:82:E3:90:DF:1E:18:F9:DF:59:CC:CF:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/F26D92011A6EAFA382E390DF1E18F9DF59CCCF2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F26D92011A6EAFA382E390DF1E18F9DF59CCCF2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234362e302f32332d3233203d3e20323730383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:3e:4a:d0:b7:b1:4c:a8:8c:72:2a:07:2b:c1:6d:fc:0a:59:
         59:f3:9a:c0:9c:da:eb:6c:cc:a7:cb:fd:81:66:df:62:69:bf:
         de:2f:ae:83:c6:b0:2c:d8:c0:bc:b3:32:7b:f8:27:07:a4:1d:
         0f:22:11:44:18:16:5e:5e:df:32:c0:23:26:cf:c6:59:ac:00:
         e3:e8:6f:30:5c:f4:61:cf:e6:85:e7:9c:93:b4:b2:04:35:f8:
         e2:e0:7b:cc:37:84:bb:4a:d3:9a:81:5f:95:20:fb:b8:9f:e7:
         35:18:ff:71:b0:53:f7:a5:35:09:e7:67:55:7d:c9:51:f3:44:
         52:f3:f1:c7:8e:c8:f8:7b:11:a7:c9:0f:3c:47:e8:20:95:c3:
         c4:89:01:85:61:b3:45:4e:78:8a:9f:90:d2:ac:a3:1e:6a:d5:
         47:51:25:9b:ec:bf:5a:19:03:49:27:ad:3e:e2:60:b1:16:29:
         3c:8b:cc:6e:ea:c7:15:da:0c:cb:8a:cb:97:e2:fb:d3:fc:41:
         73:9a:d9:e6:ef:9f:ff:bf:89:c6:ae:09:04:68:66:e3:a4:9c:
         df:b2:99:10:1f:9c:aa:9d:e3:68:64:7d:4b:c0:3a:7a:2d:65:
         3f:11:ed:7d:04:75:b8:56:06:a0:c5:fb:2c:b1:b2:bd:6b:58:
         8c:fd:f7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org