Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3139302e38392e3234372e302f32342d3234203d3e20323730343133.roa
File:                     3139302e38392e3234372e302f32342d3234203d3e20323730343133.roa (raw, json)
Hash identifier:          WS9loPgOC2/QZ8PL58Lx+mEmQevAkKeT1ROaCSx+5vg=
Subject key identifier:   BC:33:AF:EB:1F:AB:3A:DA:9B:3A:1B:2E:4A:34:AF:DA:2C:6C:DE:61
Certificate issuer:       /CN=AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9
Certificate serial:       60F0CC8D15786139EC657CD09CA8CE16DD6A51EB
Authority key identifier: AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3139302e38392e3234372e302f32342d3234203d3e20323730343133.roa
Signing time:             Mon 26 Jun 2023 13:08:04 +0000
ROA not before:           Mon 26 Jun 2023 13:03:04 +0000
ROA not after:            Mon 24 Jun 2024 13:08:04 +0000
asID:                     270413
IP address blocks:        190.89.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f0:cc:8d:15:78:61:39:ec:65:7c:d0:9c:a8:ce:16:dd:6a:51:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9
        Validity
            Not Before: Jun 26 13:03:04 2023 GMT
            Not After : Jun 24 13:08:04 2024 GMT
        Subject: CN=BC33AFEB1FAB3ADA9B3A1B2E4A34AFDA2C6CDE61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:58:0c:01:0c:10:68:6d:81:43:74:45:e8:
                    92:c9:86:9c:8f:54:f3:a0:14:83:2b:6b:07:7c:99:
                    91:35:90:35:aa:1a:f1:7c:90:a3:5d:a9:bc:32:6e:
                    4a:5b:3c:96:5f:07:2c:21:37:15:a5:ab:bc:12:ff:
                    7e:6a:fa:92:c7:ae:cb:22:4f:06:a1:7f:a5:60:02:
                    08:d8:46:98:b2:5c:02:7f:1c:24:4c:86:da:ca:9b:
                    4e:58:e0:12:53:ac:56:78:7b:17:84:cc:98:16:75:
                    c8:46:68:82:5e:a2:c4:7d:45:e3:87:4e:82:95:92:
                    f4:b7:1e:15:18:8b:11:e5:a6:83:0e:42:69:84:c2:
                    03:50:10:45:3f:b5:98:b1:4e:c8:64:08:7e:dd:c7:
                    75:0d:f0:03:a2:32:25:66:da:73:88:81:2d:52:8d:
                    50:ff:ca:d6:cb:8d:67:ac:87:3b:13:b4:ce:8f:e3:
                    60:6e:21:6f:c2:9d:9b:93:62:a2:44:80:60:fa:03:
                    cc:dc:e8:ec:be:c9:04:e1:f6:cd:80:5d:10:e0:a3:
                    7a:0b:3b:b0:cb:63:40:bb:17:40:e8:a5:ea:f3:f0:
                    3a:b1:43:bc:31:dd:4a:e0:6b:72:7b:3f:1b:87:27:
                    bd:21:5d:e9:51:70:61:90:a1:0f:0f:56:16:fc:e2:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:33:AF:EB:1F:AB:3A:DA:9B:3A:1B:2E:4A:34:AF:DA:2C:6C:DE:61
            X509v3 Authority Key Identifier:
                keyid:AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/3139302e38392e3234372e302f32342d3234203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:be:3c:80:68:44:e0:79:83:83:b9:d5:cb:9c:01:79:e9:ee:
         8a:af:47:e6:21:62:8a:e7:bd:09:ec:80:56:30:28:20:e1:4b:
         15:af:43:b2:c0:1a:bf:48:8b:b9:18:f5:7c:4a:52:ca:85:eb:
         fd:7f:4e:4f:4f:dc:66:b6:6e:c5:ef:4e:99:e4:a4:3a:13:2b:
         3f:b8:1a:63:4c:f9:18:27:dc:db:32:b1:fa:2f:e5:31:b8:0f:
         03:6d:81:6a:6c:d7:a5:7b:0c:e5:ce:65:89:ac:24:2d:76:be:
         81:60:34:c5:fd:cf:40:67:a9:6f:b3:93:0e:3b:99:2a:31:b5:
         ab:df:3f:85:52:5c:c7:e2:05:22:c9:83:e7:09:7d:bf:5b:b8:
         60:d0:56:d9:d3:0c:2a:5e:75:3e:e4:d3:df:26:4d:a5:7c:5f:
         4a:5c:1c:29:13:1f:ab:d0:1d:82:24:2c:3c:e8:51:46:a0:5c:
         20:73:6f:8d:e3:4d:06:ef:9e:e9:6d:4c:f6:f8:c0:a5:9e:63:
         d4:1a:05:f3:26:03:d9:98:cf:5c:c5:4b:23:d8:5c:ac:64:70:
         52:47:5a:b1:1e:3d:6e:2d:dd:45:7c:d1:6a:de:4b:27:8c:8a:
         5e:9a:c2:4c:59:75:56:d2:88:b8:6b:76:d9:3f:1e:88:80:1c:
         58:66:0d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org