Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/3139302e31312e3230382e302f32342d3234203d3e20323730363532.roa
File:                     3139302e31312e3230382e302f32342d3234203d3e20323730363532.roa (raw, json)
Hash identifier:          OgGoqTbkbOgrcY3eorAORCP8p4hwDModB+wh0cLXZXk=
Subject key identifier:   E4:4B:F7:72:39:B5:8F:3A:84:58:E0:DD:B2:A5:C9:D2:FB:5A:07:F8
Certificate issuer:       /CN=D892296CC5D537587815493CE7B655C9469444D7
Certificate serial:       34DEE03BA83520D0BBD494C0834FCAD2880811DA
Authority key identifier: D8:92:29:6C:C5:D5:37:58:78:15:49:3C:E7:B6:55:C9:46:94:44:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D892296CC5D537587815493CE7B655C9469444D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/3139302e31312e3230382e302f32342d3234203d3e20323730363532.roa
Signing time:             Sat 16 Dec 2023 09:36:53 +0000
ROA not before:           Sat 16 Dec 2023 09:31:53 +0000
ROA not after:            Sat 14 Dec 2024 09:36:53 +0000
asID:                     270652
IP address blocks:        190.11.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:de:e0:3b:a8:35:20:d0:bb:d4:94:c0:83:4f:ca:d2:88:08:11:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D892296CC5D537587815493CE7B655C9469444D7
        Validity
            Not Before: Dec 16 09:31:53 2023 GMT
            Not After : Dec 14 09:36:53 2024 GMT
        Subject: CN=E44BF77239B58F3A8458E0DDB2A5C9D2FB5A07F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:52:ff:92:64:91:02:b9:0f:55:13:a7:c2:d6:
                    2e:77:3f:e1:93:c3:39:0c:58:86:7c:a0:28:c5:58:
                    f7:39:c0:77:d7:bb:00:fa:33:4a:43:e7:2c:c6:b9:
                    ef:16:4b:62:c5:94:da:47:e1:e0:a5:77:f3:7d:80:
                    b6:61:92:d6:33:1c:6b:8e:44:c6:e0:b3:a2:a4:ff:
                    c4:72:3b:b6:de:fa:de:42:5c:fc:7c:5d:95:88:fa:
                    df:e5:eb:43:e0:bd:78:f8:06:ff:07:d6:0c:d5:62:
                    21:e3:5d:1e:95:cc:cf:a2:06:80:fb:1c:1e:1d:9c:
                    0d:00:af:84:38:b7:3a:04:f4:36:20:32:f8:1e:07:
                    6c:d5:d3:d7:ea:fa:c9:92:cd:71:93:e5:a8:5e:dc:
                    d8:54:56:f5:72:a6:ea:32:2a:81:ff:04:40:9d:5f:
                    04:59:0b:2e:1b:bf:2e:3e:78:20:09:95:a5:c4:da:
                    f2:11:fb:b3:e1:15:50:63:59:3f:68:1b:f8:ce:46:
                    db:17:40:79:8c:ab:d2:f3:2c:2a:27:10:95:1b:86:
                    4f:89:73:bf:ba:19:5a:9f:85:e6:df:f4:1d:46:65:
                    7a:60:33:0b:fc:4b:eb:14:13:f7:86:14:93:06:25:
                    db:a6:f6:31:86:ec:48:7b:d8:26:51:d4:71:f6:21:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4B:F7:72:39:B5:8F:3A:84:58:E0:DD:B2:A5:C9:D2:FB:5A:07:F8
            X509v3 Authority Key Identifier:
                keyid:D8:92:29:6C:C5:D5:37:58:78:15:49:3C:E7:B6:55:C9:46:94:44:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/D892296CC5D537587815493CE7B655C9469444D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D892296CC5D537587815493CE7B655C9469444D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/3139302e31312e3230382e302f32342d3234203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:8c:2c:6f:a1:56:a1:e5:c6:8b:26:85:b2:a4:2d:36:04:8f:
         94:a6:26:63:04:8f:8f:19:65:b9:32:24:7f:0e:2f:4f:90:be:
         9b:c6:67:77:4e:b2:b1:e0:26:1d:a9:0f:15:7b:6b:f5:a8:ec:
         40:0f:2f:f0:1a:5a:20:af:4f:47:b5:21:df:db:50:3a:ba:f8:
         ef:d8:a9:dc:5a:c0:5f:ca:f4:28:45:ca:69:6b:5e:70:57:0c:
         38:24:1d:67:a2:ea:e3:d9:8b:4e:0d:df:d4:07:5e:0e:0a:12:
         eb:f5:fd:26:b7:92:57:cb:f8:0c:d5:4f:5f:11:47:17:00:69:
         42:46:5e:38:a4:01:78:c3:ce:4f:b0:3d:ba:f6:30:5c:bf:2f:
         fd:5d:d7:8f:64:2e:f1:92:cc:76:1f:bc:68:51:4b:0f:30:5e:
         3d:23:e1:be:93:94:1b:84:40:cf:7a:33:5c:dd:18:a5:9a:01:
         58:57:c3:c1:76:36:fa:12:60:28:cf:d0:8d:ab:7e:c6:cb:f4:
         23:20:f5:e2:cf:f6:40:04:ec:ea:46:4a:8b:c4:76:3f:8c:90:
         a0:1c:96:71:50:21:4f:e6:ba:12:01:c3:8d:8a:59:cc:2e:4f:
         43:51:a5:4c:8b:25:99:c6:ca:0a:71:21:35:79:66:db:9d:e7:
         ed:9a:18:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:49 2024 by rpki-client on console-fra.rpki-client.org