Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/3139302e3139362e3234352e302f32342d3234203d3e20323636313736.roa
File:                     3139302e3139362e3234352e302f32342d3234203d3e20323636313736.roa (raw, json)
Hash identifier:          Rqvhzb7yUwGWV5zrfnE9EZgj/lfjxcJLde/W9dGHonY=
Subject key identifier:   B9:50:B0:76:8E:5B:45:21:0D:8F:96:69:35:EB:62:64:12:84:56:E3
Certificate issuer:       /CN=A7EB3670BE4A7F2675ECAD168E7B035DF544B5FA
Certificate serial:       4BF1DEF681FA9DD08AC40232CFECD6A9BBBAE1A9
Authority key identifier: A7:EB:36:70:BE:4A:7F:26:75:EC:AD:16:8E:7B:03:5D:F5:44:B5:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7EB3670BE4A7F2675ECAD168E7B035DF544B5FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/3139302e3139362e3234352e302f32342d3234203d3e20323636313736.roa
Signing time:             Fri 05 Jan 2024 14:33:15 +0000
ROA not before:           Fri 05 Jan 2024 14:28:15 +0000
ROA not after:            Fri 03 Jan 2025 14:33:15 +0000
asID:                     266176
IP address blocks:        190.196.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f1:de:f6:81:fa:9d:d0:8a:c4:02:32:cf:ec:d6:a9:bb:ba:e1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7EB3670BE4A7F2675ECAD168E7B035DF544B5FA
        Validity
            Not Before: Jan  5 14:28:15 2024 GMT
            Not After : Jan  3 14:33:15 2025 GMT
        Subject: CN=B950B0768E5B45210D8F966935EB6264128456E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:76:ae:d6:d8:4c:32:93:2c:a0:06:6f:13:b3:
                    46:35:49:09:01:55:15:bc:54:a5:d1:2b:85:a8:bc:
                    54:de:59:5f:b5:d9:29:29:47:f5:4e:ae:18:62:19:
                    50:87:76:53:5b:72:d9:28:b8:fb:df:39:8e:cd:20:
                    7b:d2:3e:fe:ff:5f:05:80:25:67:5b:dd:42:85:e7:
                    57:58:65:37:2c:a7:0b:85:81:16:7a:f1:26:86:3d:
                    94:4a:6e:a0:93:9e:4f:15:6e:f0:c5:9d:7e:ae:6f:
                    98:d2:34:93:5e:2e:71:a4:68:02:91:a5:5c:e1:46:
                    b6:b7:27:b9:3e:38:42:21:31:0d:0f:21:c4:ed:76:
                    13:ef:9a:08:bf:64:f6:5f:41:2e:22:3d:1b:4b:5c:
                    5b:13:d0:74:d4:08:f0:56:33:33:7c:5b:99:c3:43:
                    92:2b:9c:ed:9d:d0:17:67:fc:d3:49:25:53:db:d2:
                    11:bc:67:0f:c2:8f:85:f8:c3:63:33:e7:d6:ea:1d:
                    12:4b:b1:95:2a:05:23:a4:2a:49:08:a9:59:2d:f2:
                    d9:43:5b:f0:3b:7e:61:f0:22:ee:d1:d7:37:e4:5f:
                    27:08:f5:be:e7:b4:87:de:cb:7b:8e:70:0b:82:29:
                    4e:1f:0a:70:7d:fb:7c:a9:82:6c:46:db:74:32:fb:
                    77:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:50:B0:76:8E:5B:45:21:0D:8F:96:69:35:EB:62:64:12:84:56:E3
            X509v3 Authority Key Identifier:
                keyid:A7:EB:36:70:BE:4A:7F:26:75:EC:AD:16:8E:7B:03:5D:F5:44:B5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/A7EB3670BE4A7F2675ECAD168E7B035DF544B5FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7EB3670BE4A7F2675ECAD168E7B035DF544B5FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/3139302e3139362e3234352e302f32342d3234203d3e20323636313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:d4:55:c0:be:83:a1:3a:65:e8:a7:97:8b:e5:6e:f2:1f:bd:
         2f:49:32:d9:96:dd:89:0b:ff:5e:d8:80:f4:5d:d4:06:01:a8:
         49:47:da:61:76:ed:1f:ab:a1:5a:16:65:6d:92:ac:5c:7a:7e:
         b2:26:64:53:53:1a:1b:b8:39:f9:8b:c4:b3:ce:ba:32:38:2f:
         59:83:83:7a:9f:b6:47:d4:54:0e:f2:f7:bb:c1:76:c4:7b:77:
         9e:fa:5b:43:50:57:fe:0c:d4:83:9f:e1:27:e6:58:75:e5:78:
         88:73:11:cd:d6:19:22:e7:f8:9b:1d:26:e5:f5:66:37:f9:0c:
         d2:dd:2f:36:02:12:62:3d:55:ac:44:c8:7d:11:ac:14:8f:a5:
         c9:e6:f4:5a:01:57:22:1d:ec:94:c5:4a:50:1f:9e:fb:94:45:
         65:b1:d6:be:ee:12:d3:49:9e:44:5e:2c:15:43:ea:b6:34:8c:
         e8:9d:22:81:26:94:4e:04:1d:9b:1a:8a:1d:d5:cc:2c:21:e6:
         54:21:e3:65:e6:ab:37:e3:42:dd:31:b9:fa:38:96:63:24:fd:
         f3:a5:52:f6:c9:ee:6c:7f:9a:f4:24:46:d3:0e:f5:17:56:46:
         48:02:a6:a5:96:d8:0e:53:f8:0b:e4:52:87:4a:f2:6d:1d:99:
         38:96:e6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org