Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3139302e38392e3234352e302f32342d3234203d3e20323730343133.roa
File:                     3139302e38392e3234352e302f32342d3234203d3e20323730343133.roa (raw, json)
Hash identifier:          IQ/2d04LxGAbCKpBv9b1QoJYwDsP9DYj43PXsb2IfUc=
Subject key identifier:   24:11:6D:92:A2:F0:D9:2B:29:20:D8:E2:B9:A4:E7:E5:5F:05:3D:E6
Certificate issuer:       /CN=AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9
Certificate serial:       322432A523BDA6D1854D546119DE5B5252073F58
Authority key identifier: AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3139302e38392e3234352e302f32342d3234203d3e20323730343133.roa
Signing time:             Mon 26 Jun 2023 13:08:03 +0000
ROA not before:           Mon 26 Jun 2023 13:03:03 +0000
ROA not after:            Mon 24 Jun 2024 13:08:03 +0000
asID:                     270413
IP address blocks:        190.89.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:24:32:a5:23:bd:a6:d1:85:4d:54:61:19:de:5b:52:52:07:3f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9
        Validity
            Not Before: Jun 26 13:03:03 2023 GMT
            Not After : Jun 24 13:08:03 2024 GMT
        Subject: CN=24116D92A2F0D92B2920D8E2B9A4E7E55F053DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d2:6d:21:1a:5a:01:99:67:67:b1:28:1e:e8:
                    f7:9e:c4:36:42:ba:aa:68:32:09:b6:56:5c:f9:92:
                    c5:e4:63:8b:d7:17:63:cb:c2:08:66:a1:18:5c:65:
                    de:01:4d:ea:80:2c:a9:1e:50:bb:13:9e:fb:20:8d:
                    65:09:28:cd:8d:97:6b:8c:e0:13:7b:8f:4b:a9:8a:
                    10:1d:f4:de:53:0b:bb:73:89:25:b2:de:d5:bc:c5:
                    a1:4b:05:f2:d0:00:ee:fc:c7:af:bf:80:07:84:7a:
                    a5:81:3f:67:2f:42:f3:b6:d6:64:9f:a5:01:12:9b:
                    55:12:67:0c:8b:eb:d1:a5:77:b2:f8:d1:03:b8:1e:
                    f5:23:ba:2a:82:84:05:a8:0f:ad:66:ae:ad:b7:65:
                    71:ef:a7:28:75:80:7e:7d:55:50:c0:e6:ed:d6:00:
                    7d:db:97:30:a5:b7:81:b0:30:df:9d:46:bb:7c:88:
                    54:c8:c0:87:15:d5:7a:1c:a6:5a:ce:03:28:2e:a4:
                    8f:69:a8:a3:c0:ba:4b:3a:e1:e6:59:f2:ad:e8:81:
                    d0:f7:91:ae:f2:42:4b:1f:96:b3:3e:f5:43:16:1d:
                    77:bb:5f:ba:35:00:66:13:9b:4c:ab:a4:e8:28:2c:
                    c4:6c:81:55:f0:f3:72:cd:83:1f:af:a6:f8:20:9b:
                    59:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:11:6D:92:A2:F0:D9:2B:29:20:D8:E2:B9:A4:E7:E5:5F:05:3D:E6
            X509v3 Authority Key Identifier:
                keyid:AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3139302e38392e3234352e302f32342d3234203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:31:7b:b9:1b:4e:47:61:84:de:6d:a0:57:7a:c2:73:80:3a:
         d3:72:68:07:b8:5d:a0:e3:52:7b:7e:ea:dc:b4:6f:51:58:eb:
         23:0a:29:73:65:84:81:5d:46:bf:05:f0:63:0b:2e:8f:7e:a1:
         ab:86:5b:7c:73:84:da:3a:78:8c:21:60:97:d0:5f:6d:66:bd:
         ff:d9:8c:e0:e3:03:d3:6d:ad:ae:bc:27:b7:d2:b2:78:6b:e9:
         be:25:7c:2b:20:96:b2:c1:74:c6:a1:fd:85:c1:a2:a6:30:7e:
         ce:71:66:05:d8:54:5e:e7:6c:9b:8f:57:9f:f2:16:7c:c5:79:
         21:43:37:55:f7:48:ce:6d:a2:3e:23:bf:bf:a3:36:d6:a6:11:
         68:dc:ec:07:23:c7:d3:33:08:d8:c3:a5:37:dc:35:7a:a8:8d:
         85:92:97:19:b9:19:91:bd:81:58:0d:30:7a:9a:48:80:c8:ed:
         48:53:56:65:a2:50:60:49:ab:5b:90:01:f8:6b:6d:e9:91:68:
         a8:d4:8f:77:ae:59:17:8a:65:e0:d5:8d:24:1f:5a:d8:33:09:
         6c:e3:44:72:9f:96:f4:92:36:59:da:0b:01:42:b2:e4:97:7b:
         e6:53:ff:66:00:42:7e:03:71:81:b9:6a:ae:6d:52:08:9d:af:
         e9:e6:e0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org