Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3137302e302f32342d3234203d3e20323632393839.roa
File:                     3139302e3130332e3137302e302f32342d3234203d3e20323632393839.roa (raw, json)
Hash identifier:          FgCmQFfKi2/8Nv3jzwFZJg+0chux6UCto6bPc1YHjO4=
Subject key identifier:   94:49:70:0A:FB:81:50:D8:52:26:4E:1E:59:65:FF:D3:C0:10:A0:5F
Certificate issuer:       /CN=30EC14818870F287A0496328742C6ECE8AD0FA82
Certificate serial:       538F5789ACAAC168B5AE19818B27B4C7D18FCB75
Authority key identifier: 30:EC:14:81:88:70:F2:87:A0:49:63:28:74:2C:6E:CE:8A:D0:FA:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30EC14818870F287A0496328742C6ECE8AD0FA82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3137302e302f32342d3234203d3e20323632393839.roa
Signing time:             Thu 26 Oct 2023 20:34:56 +0000
ROA not before:           Thu 26 Oct 2023 20:29:56 +0000
ROA not after:            Thu 24 Oct 2024 20:34:56 +0000
asID:                     262989
IP address blocks:        190.103.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8f:57:89:ac:aa:c1:68:b5:ae:19:81:8b:27:b4:c7:d1:8f:cb:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30EC14818870F287A0496328742C6ECE8AD0FA82
        Validity
            Not Before: Oct 26 20:29:56 2023 GMT
            Not After : Oct 24 20:34:56 2024 GMT
        Subject: CN=9449700AFB8150D852264E1E5965FFD3C010A05F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:db:56:ac:dd:e4:4b:5b:7a:94:0b:7b:46:f1:
                    8d:19:c4:49:4d:bf:d5:ba:31:0c:f4:60:0e:c5:f9:
                    85:89:07:41:89:55:10:e3:88:06:51:e1:cb:cf:57:
                    d0:8b:1a:33:f4:db:0b:10:65:e5:43:8b:2c:a4:bf:
                    42:e4:ce:28:35:ce:38:35:a1:3c:69:63:7b:a4:b6:
                    ab:32:6b:1d:cc:48:4b:70:79:1c:0b:7f:f5:1a:59:
                    ff:47:20:f2:65:e6:54:e0:fd:31:77:80:75:d5:5a:
                    7a:77:63:6f:93:9f:f9:50:c4:d9:16:9d:41:b4:28:
                    04:90:e8:9a:c8:8d:83:13:f3:2c:ed:86:c8:47:b4:
                    1c:37:3b:f2:d9:d9:9a:51:00:17:8d:d3:ac:41:e2:
                    80:70:f6:85:c3:9c:59:29:4c:d3:97:b7:ce:0a:8a:
                    a6:20:95:5e:d9:83:19:d2:82:e4:57:f9:ac:e4:c1:
                    56:08:41:1f:07:e2:bf:9d:4b:1b:d0:73:04:5c:7e:
                    a0:fe:5c:34:2d:74:1f:c1:74:a8:d4:a6:4d:59:f0:
                    6d:63:57:08:e3:99:cf:14:a1:84:8f:f8:59:85:34:
                    5c:f5:b0:61:bb:27:c2:0f:73:49:4a:ed:99:53:0f:
                    ba:93:4f:1f:b3:33:ad:56:63:3e:4c:10:40:7f:43:
                    20:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:49:70:0A:FB:81:50:D8:52:26:4E:1E:59:65:FF:D3:C0:10:A0:5F
            X509v3 Authority Key Identifier:
                keyid:30:EC:14:81:88:70:F2:87:A0:49:63:28:74:2C:6E:CE:8A:D0:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/30EC14818870F287A0496328742C6ECE8AD0FA82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30EC14818870F287A0496328742C6ECE8AD0FA82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3137302e302f32342d3234203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:b1:05:00:60:b8:c8:47:4a:a2:97:8c:0b:40:03:19:2f:85:
         4c:a0:c0:1b:13:2c:f2:93:ef:06:af:ad:83:c3:4e:ea:1c:01:
         f6:f9:00:62:02:8b:30:ee:01:d6:83:04:43:1e:49:75:bb:c9:
         a6:e5:7c:9c:71:0f:55:ad:7c:a3:17:70:20:2a:10:41:70:8f:
         17:41:dd:61:d0:f3:fb:f9:ee:59:42:93:ab:eb:d1:56:72:c8:
         a1:7f:4e:14:84:9c:d5:99:16:57:6b:36:4f:55:84:26:5a:d4:
         35:d2:51:11:aa:92:58:a8:ee:ca:94:b3:9e:b8:f7:48:c5:0c:
         e6:39:cf:c8:3f:a3:ea:1c:77:29:fb:65:7b:7e:26:5f:7d:15:
         fb:27:c1:70:1e:4e:d0:7c:0e:61:75:16:45:f7:aa:62:0f:0b:
         29:bc:3f:da:54:88:85:87:5c:9f:8f:c3:2c:22:59:f8:b1:d2:
         57:2a:c5:6b:4d:3f:ea:0c:b6:9b:0d:97:5a:8f:58:7f:2b:58:
         a1:e8:72:9e:3b:c1:47:3e:83:35:e2:50:45:03:79:e6:67:12:
         fd:f5:95:14:3c:00:e0:46:0f:83:08:52:96:0c:09:aa:ab:31:
         38:c1:f9:4a:5e:3b:7c:53:94:22:5c:b9:51:9c:41:b2:49:14:
         54:2d:1a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org