Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/3139302e3131312e3136382e302f32342d3234203d3e20323730343138.roa
File:                     3139302e3131312e3136382e302f32342d3234203d3e20323730343138.roa (raw, json)
Hash identifier:          mM9mwGWhKaRwA2S8+x0C3BT/Mip+cHPNK5vucZIXpSI=
Subject key identifier:   8A:46:0C:D7:2D:04:8F:F0:DA:86:07:95:E4:F2:28:76:81:E5:39:82
Certificate issuer:       /CN=24E0959AB7772BF66753580C3F4588BD984B000C
Certificate serial:       5455FF2606734FEF3C98BF0C5D671D6FABFA5569
Authority key identifier: 24:E0:95:9A:B7:77:2B:F6:67:53:58:0C:3F:45:88:BD:98:4B:00:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24E0959AB7772BF66753580C3F4588BD984B000C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/3139302e3131312e3136382e302f32342d3234203d3e20323730343138.roa
Signing time:             Fri 01 Mar 2024 17:54:52 +0000
ROA not before:           Fri 01 Mar 2024 17:49:52 +0000
ROA not after:            Fri 28 Feb 2025 17:54:52 +0000
asID:                     270418
IP address blocks:        190.111.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:55:ff:26:06:73:4f:ef:3c:98:bf:0c:5d:67:1d:6f:ab:fa:55:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24E0959AB7772BF66753580C3F4588BD984B000C
        Validity
            Not Before: Mar  1 17:49:52 2024 GMT
            Not After : Feb 28 17:54:52 2025 GMT
        Subject: CN=8A460CD72D048FF0DA860795E4F2287681E53982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:18:99:7a:fe:ba:e2:45:b7:93:17:55:14:
                    91:03:a2:ef:a9:60:c2:91:c0:22:ae:cc:47:48:f1:
                    f6:36:66:79:21:2e:ba:53:39:89:07:59:15:b8:b3:
                    cd:09:0a:d7:0d:dc:1c:a1:81:e3:e7:6e:0f:e8:a3:
                    01:54:b6:ce:d8:6c:6c:b3:97:dc:ef:83:fc:79:1e:
                    d5:14:a6:83:2a:e3:d8:d5:c8:65:6a:97:be:08:84:
                    d4:80:16:18:88:10:f6:b0:2a:c5:d8:98:e7:5d:0d:
                    91:37:0a:f4:4e:f1:a9:53:cd:d9:2b:30:0d:ba:37:
                    b7:d7:1f:6d:0d:3f:1a:1c:4d:a7:ec:06:5c:da:bb:
                    34:2b:dd:c9:53:c1:31:7a:f2:18:6c:a4:e3:85:ec:
                    42:ed:e9:0b:34:47:90:01:67:48:c0:2f:45:79:45:
                    10:8e:1b:44:69:0e:55:f7:f0:b7:12:de:b5:18:89:
                    b5:31:d9:2d:2e:f5:1e:ae:87:dd:40:49:36:55:9f:
                    1f:6c:c6:35:e6:6a:0c:41:b2:08:3c:1c:f4:57:99:
                    23:10:b8:c7:b3:83:c4:16:a5:a0:ac:1d:c9:54:f5:
                    e5:2c:74:e3:30:cd:dd:be:16:69:fb:77:97:a9:79:
                    03:7f:1e:66:1d:ad:ee:b2:07:bf:c0:22:8a:aa:32:
                    3e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:46:0C:D7:2D:04:8F:F0:DA:86:07:95:E4:F2:28:76:81:E5:39:82
            X509v3 Authority Key Identifier:
                keyid:24:E0:95:9A:B7:77:2B:F6:67:53:58:0C:3F:45:88:BD:98:4B:00:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/24E0959AB7772BF66753580C3F4588BD984B000C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24E0959AB7772BF66753580C3F4588BD984B000C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/3139302e3131312e3136382e302f32342d3234203d3e20323730343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:cd:ab:a6:6b:c5:25:8e:eb:9d:ef:93:a6:42:96:c8:32:82:
         19:9d:5d:83:f9:5d:38:77:a6:21:b5:ec:f0:8c:ee:71:98:7b:
         0d:20:90:22:a9:4d:23:6c:d4:f9:c2:09:d0:72:1d:bc:d4:07:
         54:ca:d1:af:9a:6b:3a:87:87:ef:eb:b9:40:01:ea:61:73:75:
         1f:6b:fa:fa:19:42:89:b0:cf:43:2d:ac:a7:17:4b:a7:d6:cd:
         e5:66:3b:a7:cf:e2:f3:05:37:28:55:ba:de:b2:e7:24:55:46:
         78:0a:47:60:73:8e:7b:a7:1f:f8:37:b2:d4:bf:ba:73:2d:16:
         c1:be:ce:60:0e:b5:2c:42:a9:5f:93:ed:3d:28:82:60:32:78:
         63:29:19:4e:4d:9e:5f:fc:21:a2:17:4a:56:68:82:69:5f:43:
         84:54:9a:44:92:d4:ff:50:82:5c:9b:60:51:e8:05:2c:32:20:
         19:1e:94:1d:7f:1f:98:23:6c:98:ae:0e:1f:e2:db:24:38:02:
         7a:fd:0f:af:f5:73:56:35:d4:c4:07:7a:c7:85:ae:5d:72:e4:
         c1:21:cb:e7:80:3f:c7:7e:80:97:5d:d8:00:0c:93:d3:81:6a:
         31:27:82:66:90:3a:30:89:e5:61:23:0a:67:8b:d4:aa:88:f9:
         f1:0a:45:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org