Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3137342e302f32342d3234203d3e20323632393839.roa
File:                     3139302e3130332e3137342e302f32342d3234203d3e20323632393839.roa (raw, json)
Hash identifier:          or7PBs0C3n3N8m7xZJZcmpV7rTC0Vmg94f2P+7czGVM=
Subject key identifier:   BB:DF:79:03:CF:44:DD:70:E2:76:91:C8:B2:FE:D9:1F:4C:D0:F0:84
Certificate issuer:       /CN=207EB381959B83F7299D680B4544AE4668DCFE56
Certificate serial:       749E3A1719AA6210A0144997B1EBD26CDE35338F
Authority key identifier: 20:7E:B3:81:95:9B:83:F7:29:9D:68:0B:45:44:AE:46:68:DC:FE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/207EB381959B83F7299D680B4544AE4668DCFE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3137342e302f32342d3234203d3e20323632393839.roa
Signing time:             Fri 25 Aug 2023 16:32:44 +0000
ROA not before:           Fri 25 Aug 2023 16:27:44 +0000
ROA not after:            Fri 23 Aug 2024 16:32:44 +0000
asID:                     262989
IP address blocks:        190.103.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9e:3a:17:19:aa:62:10:a0:14:49:97:b1:eb:d2:6c:de:35:33:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207EB381959B83F7299D680B4544AE4668DCFE56
        Validity
            Not Before: Aug 25 16:27:44 2023 GMT
            Not After : Aug 23 16:32:44 2024 GMT
        Subject: CN=BBDF7903CF44DD70E27691C8B2FED91F4CD0F084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:7a:6a:ba:7c:f6:82:96:9d:74:4f:03:4c:
                    6c:14:0c:1d:d6:4e:0a:59:02:f5:53:25:d1:13:72:
                    52:c6:94:55:b3:e6:7c:7d:67:de:89:0c:96:da:50:
                    79:c7:58:ca:a2:ad:36:ba:23:9e:fd:12:ff:a6:d3:
                    3b:ac:fa:63:9e:c3:9e:ed:59:dd:74:2e:9a:c2:73:
                    f3:90:bc:30:72:74:88:d9:9c:41:22:83:92:34:78:
                    e9:5d:c7:73:90:f3:42:1b:bb:39:d6:42:7b:ec:28:
                    e6:9c:4f:5b:36:1c:82:8c:9d:cb:62:3a:bc:89:04:
                    04:62:47:65:05:9f:5f:09:57:22:ee:a0:8f:2c:2a:
                    71:95:c8:10:2f:3e:37:88:9b:96:5f:0a:b1:5b:da:
                    d5:5f:cd:e6:e2:eb:e0:50:47:c9:5d:bf:0f:83:72:
                    8f:ff:b6:4b:41:e7:1a:eb:88:46:89:7f:24:d2:36:
                    b3:6d:d2:0f:25:de:e2:2d:7c:09:00:33:c0:bd:11:
                    cc:40:9b:33:65:ab:bd:a7:1c:2f:8b:d2:a0:50:c0:
                    3b:f4:43:db:f0:02:8b:d1:4d:ec:8e:3d:bc:b5:55:
                    ab:45:7b:b1:72:6e:b4:c8:d6:71:fd:ea:54:a3:58:
                    c2:c6:49:48:bf:60:40:a0:c4:8b:e3:ec:73:59:f5:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DF:79:03:CF:44:DD:70:E2:76:91:C8:B2:FE:D9:1F:4C:D0:F0:84
            X509v3 Authority Key Identifier:
                keyid:20:7E:B3:81:95:9B:83:F7:29:9D:68:0B:45:44:AE:46:68:DC:FE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/207EB381959B83F7299D680B4544AE4668DCFE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/207EB381959B83F7299D680B4544AE4668DCFE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3137342e302f32342d3234203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:f9:9b:bc:55:e9:aa:18:d0:3f:b8:65:b5:26:a4:8d:c8:86:
         99:07:f5:38:e0:c6:f5:db:b5:f1:a2:0f:d7:5b:9d:92:08:ec:
         62:61:16:5c:ae:bb:fe:90:2f:fb:f8:6b:70:69:ac:31:21:17:
         10:1f:b7:50:73:b7:a8:74:77:00:f4:d5:8d:5d:dd:5b:3c:12:
         31:a6:45:9c:9b:a0:fb:7e:cc:70:0c:43:19:ab:f8:05:b9:0c:
         4e:06:d1:21:cb:62:ec:5e:2a:97:b5:54:f5:5b:7c:54:39:a5:
         db:79:a7:df:39:93:88:66:45:d5:0b:5d:50:7b:6b:75:6d:19:
         7a:93:ce:e5:e3:56:89:80:dd:d1:f9:f3:b9:b2:99:cd:dd:3a:
         6b:10:e3:3f:aa:be:38:07:f6:ef:40:e9:cc:fe:5f:c7:73:45:
         f8:40:20:4d:3f:7f:b8:f2:c9:9b:1f:97:a4:3e:6d:6c:bc:d7:
         97:c2:2f:5f:c0:8e:77:ff:8d:7f:4a:0f:c4:75:8b:cd:8e:c2:
         41:fe:7c:63:13:1f:85:f5:1b:d3:88:6f:81:85:61:34:db:82:
         21:71:33:ac:76:de:93:7a:f2:a4:bb:a8:f8:95:51:61:56:13:
         31:30:ed:4d:da:90:e7:90:d5:c0:e0:b0:21:59:38:74:42:47:
         48:2a:7e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org