Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3139302e372e3137362e302f32302d3234203d3e20323632353032.roa
File:                     3139302e372e3137362e302f32302d3234203d3e20323632353032.roa (raw, json)
Hash identifier:          swkeNG3YBUgPQCIaFotaGmQtFR+kqtLsnT37wJn/rZg=
Subject key identifier:   20:49:09:4A:DA:4A:28:5D:2D:41:44:CB:44:50:C2:92:25:E4:58:16
Certificate issuer:       /CN=BF977F78777D6EE714F2CC1F0A8242EB6809E7C0
Certificate serial:       6FA99E7E99E0E4B8D5C33EBEEE8934EB7583329B
Authority key identifier: BF:97:7F:78:77:7D:6E:E7:14:F2:CC:1F:0A:82:42:EB:68:09:E7:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF977F78777D6EE714F2CC1F0A8242EB6809E7C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3139302e372e3137362e302f32302d3234203d3e20323632353032.roa
Signing time:             Fri 17 Nov 2023 19:15:05 +0000
ROA not before:           Fri 17 Nov 2023 19:10:05 +0000
ROA not after:            Fri 15 Nov 2024 19:15:05 +0000
asID:                     262502
IP address blocks:        190.7.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a9:9e:7e:99:e0:e4:b8:d5:c3:3e:be:ee:89:34:eb:75:83:32:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF977F78777D6EE714F2CC1F0A8242EB6809E7C0
        Validity
            Not Before: Nov 17 19:10:05 2023 GMT
            Not After : Nov 15 19:15:05 2024 GMT
        Subject: CN=2049094ADA4A285D2D4144CB4450C29225E45816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:39:3b:71:ff:e2:0f:38:39:52:01:57:43:39:
                    bb:7c:9a:98:ee:c3:14:7d:51:43:6e:38:4d:dd:7b:
                    08:1b:2e:dc:36:96:0f:6c:5d:3a:4b:af:f0:ba:9e:
                    c1:be:0d:6c:58:10:32:c5:a6:23:1b:ca:48:da:33:
                    f6:f5:aa:96:34:c0:70:92:b3:84:57:1d:59:df:f9:
                    63:98:c7:75:4f:9c:c4:be:83:f1:2d:72:f8:15:93:
                    eb:ae:46:4c:b0:4a:14:46:a1:ed:9c:a1:25:ed:a4:
                    d3:54:10:16:c3:31:53:b5:c5:63:bb:ce:2e:c9:11:
                    ce:c2:8f:0b:8b:06:b3:66:c2:72:0a:c5:bd:48:dd:
                    ed:fb:b9:64:88:6b:12:be:af:de:41:22:d5:d1:05:
                    d0:24:58:86:a9:4b:fc:cb:9a:cb:2a:3b:33:28:25:
                    9d:80:02:95:79:4a:ca:ba:9e:36:e4:c1:1d:c0:e8:
                    89:ea:24:42:3d:9c:1a:90:b7:79:87:f9:8b:b3:bb:
                    28:23:f3:2e:cd:83:b5:69:52:ef:d9:aa:0b:fe:1c:
                    f4:eb:68:7a:fe:69:2a:25:5a:d9:90:5a:25:4e:7d:
                    5e:c1:2b:15:e9:69:27:5a:71:73:1b:21:64:3d:fa:
                    01:9e:64:41:be:07:2c:7c:c2:7c:4e:9f:23:60:c0:
                    6a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:49:09:4A:DA:4A:28:5D:2D:41:44:CB:44:50:C2:92:25:E4:58:16
            X509v3 Authority Key Identifier:
                keyid:BF:97:7F:78:77:7D:6E:E7:14:F2:CC:1F:0A:82:42:EB:68:09:E7:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/BF977F78777D6EE714F2CC1F0A8242EB6809E7C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF977F78777D6EE714F2CC1F0A8242EB6809E7C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3139302e372e3137362e302f32302d3234203d3e20323632353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         75:6a:51:44:97:e4:71:4a:30:71:39:72:a5:c3:a7:58:ac:fb:
         10:36:a4:13:83:46:9f:25:81:8c:66:62:fe:1e:06:09:5e:7b:
         82:6a:d8:56:a9:8d:ff:c5:57:c6:3d:1f:d8:96:aa:a1:bc:b9:
         50:bb:67:d5:d1:9d:b3:d3:62:f8:63:b9:2a:54:ff:21:d0:72:
         64:f0:a7:d9:72:98:98:3e:92:35:83:b2:76:81:b1:a0:2e:74:
         7c:c6:4d:11:19:e4:eb:a7:78:6f:c5:16:2f:75:d5:c9:1c:bc:
         2b:b0:00:92:78:5c:60:0d:88:9e:c2:8f:9c:c6:1a:3b:71:25:
         d2:9f:c6:95:06:32:ff:e5:f7:b3:ce:d1:83:55:54:63:3b:f2:
         f3:09:76:65:c9:78:a3:38:8e:75:39:68:12:db:98:a7:ab:1b:
         40:d6:93:66:43:3b:a3:8b:c6:94:aa:2b:87:c1:a2:5b:d3:eb:
         23:25:cc:3b:d9:b3:8c:10:99:29:ee:fc:d1:5d:cf:71:a9:c2:
         f5:84:8e:0d:07:b6:88:54:16:63:cf:9c:69:61:b2:97:ed:05:
         a1:00:f1:6c:5c:bb:ac:46:88:f4:a4:0b:a4:00:fc:67:bd:a7:
         bd:33:ed:45:22:a9:d2:87:f9:93:67:e1:a4:3f:a5:a3:a8:48:
         ce:b8:b6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org