Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa
File:                     3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa (raw, json)
Hash identifier:          F6N5Km5oG7UEOJjoellJmKh/r8SI/PuXdrzF9FJXhqY=
Subject key identifier:   40:39:2F:75:58:26:79:E9:FD:DC:3B:56:B3:0B:42:84:D2:DB:8C:05
Certificate issuer:       /CN=491DF027C89335A18A3A28961D8C093B7FAF2B03
Certificate serial:       5165B91BCFF774BC37F4AD510CD1728073E991D9
Authority key identifier: 49:1D:F0:27:C8:93:35:A1:8A:3A:28:96:1D:8C:09:3B:7F:AF:2B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/491DF027C89335A18A3A28961D8C093B7FAF2B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa
Signing time:             Mon 01 Jul 2024 06:05:14 +0000
ROA not before:           Mon 01 Jul 2024 06:00:14 +0000
ROA not after:            Mon 30 Jun 2025 06:05:14 +0000
asID:                     270428
IP address blocks:        190.111.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:65:b9:1b:cf:f7:74:bc:37:f4:ad:51:0c:d1:72:80:73:e9:91:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491DF027C89335A18A3A28961D8C093B7FAF2B03
        Validity
            Not Before: Jul  1 06:00:14 2024 GMT
            Not After : Jun 30 06:05:14 2025 GMT
        Subject: CN=40392F75582679E9FDDC3B56B30B4284D2DB8C05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:d4:1a:b6:0a:09:2c:5b:69:4a:43:27:7b:
                    86:de:ae:21:2c:84:77:05:dc:ce:97:79:66:c9:a8:
                    0e:04:a6:06:39:e8:a9:18:80:fc:2a:1d:e4:75:c3:
                    e8:b1:12:8f:7a:01:c7:3d:fa:dd:aa:94:83:5f:92:
                    87:eb:81:72:53:7f:c9:7c:ab:69:ff:47:dc:65:31:
                    72:d2:26:2c:98:50:a3:08:80:b4:7c:5d:ce:f6:99:
                    d3:0e:d6:83:88:78:b9:f3:df:59:51:9a:56:a6:15:
                    a9:3a:64:1b:1a:5a:35:13:57:e5:6d:eb:8e:a8:ac:
                    4d:24:59:b0:60:2b:aa:41:5d:d6:b6:03:23:31:fb:
                    45:dc:0e:1b:f2:e2:68:40:9e:c6:be:e5:45:18:3a:
                    6c:ba:bb:8a:90:04:a5:0c:d9:b7:cd:54:d0:0b:7f:
                    9a:f0:b0:52:35:1c:25:63:e7:54:d9:d7:54:d9:4e:
                    12:c8:24:07:0d:1a:56:44:45:eb:a8:02:47:a0:c6:
                    ec:78:cc:5a:26:99:86:58:73:4a:05:fc:8f:5d:ea:
                    a5:79:49:72:7e:fd:88:24:dd:3b:77:c0:85:8b:d8:
                    d0:85:a9:83:05:ce:b9:d5:d6:fa:df:74:64:c1:b4:
                    bd:58:9d:7b:f1:42:37:b7:c3:f7:a7:4e:ab:1d:0c:
                    0c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:39:2F:75:58:26:79:E9:FD:DC:3B:56:B3:0B:42:84:D2:DB:8C:05
            X509v3 Authority Key Identifier:
                keyid:49:1D:F0:27:C8:93:35:A1:8A:3A:28:96:1D:8C:09:3B:7F:AF:2B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/491DF027C89335A18A3A28961D8C093B7FAF2B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/491DF027C89335A18A3A28961D8C093B7FAF2B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:9a:fa:28:5a:a5:4c:6b:e5:fa:76:bf:80:b8:4d:2b:86:fc:
         e6:de:a5:67:98:e9:b3:3a:fd:59:50:e6:32:95:45:0a:91:8d:
         12:6e:69:23:e3:e6:96:cd:c2:9d:48:7f:18:aa:10:54:d9:68:
         45:a3:ff:6b:57:d0:9e:ab:f7:5c:61:a4:57:f9:70:b4:bc:62:
         75:1c:1b:36:45:67:df:51:ca:79:7c:0d:2e:b1:58:09:13:4e:
         5d:28:f6:3b:3a:ba:b1:93:a3:05:d2:3a:ba:8f:49:c6:33:85:
         f6:4c:fa:a3:97:71:8e:57:b6:4b:17:c3:ec:2e:36:a9:d7:2c:
         b4:9e:10:89:a0:73:fe:7d:a0:22:30:04:ca:9c:31:40:7e:1b:
         58:d6:9c:15:e8:89:68:51:79:9a:9f:16:f2:b1:4d:5c:c0:e7:
         9c:57:d9:60:e0:36:c1:94:69:8b:e0:32:23:74:68:02:39:19:
         9a:91:c3:6f:5e:89:08:ba:d7:4d:49:81:87:0f:cc:af:99:a8:
         6a:e7:97:13:f1:9c:48:b6:1a:3c:00:40:c6:ec:ed:d6:9c:d9:
         96:2c:0a:76:54:fb:20:0e:44:10:93:ed:a6:8e:e1:7b:cc:6c:
         aa:5e:ac:ea:95:90:9f:4c:de:d6:a6:98:44:13:79:7a:14:e3:
         8e:07:64:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 13:27:54 2024 by rpki-client on console-ams.rpki-client.org