Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/3139302e31312e3231302e302f32342d3234203d3e20323730363532.roa
File:                     3139302e31312e3231302e302f32342d3234203d3e20323730363532.roa (raw, json)
Hash identifier:          YbAs2Ww4Qmoh144fFiEmeK0vbI411QqWa6HQonBEvHE=
Subject key identifier:   F4:43:20:D0:C9:3E:9D:69:3F:67:7A:84:10:E9:BD:BE:56:33:21:3F
Certificate issuer:       /CN=D892296CC5D537587815493CE7B655C9469444D7
Certificate serial:       7A7D10589B2ECF81C7093FC314C532985815C7D4
Authority key identifier: D8:92:29:6C:C5:D5:37:58:78:15:49:3C:E7:B6:55:C9:46:94:44:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D892296CC5D537587815493CE7B655C9469444D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/3139302e31312e3231302e302f32342d3234203d3e20323730363532.roa
Signing time:             Sat 16 Dec 2023 09:36:52 +0000
ROA not before:           Sat 16 Dec 2023 09:31:52 +0000
ROA not after:            Sat 14 Dec 2024 09:36:52 +0000
asID:                     270652
IP address blocks:        190.11.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7d:10:58:9b:2e:cf:81:c7:09:3f:c3:14:c5:32:98:58:15:c7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D892296CC5D537587815493CE7B655C9469444D7
        Validity
            Not Before: Dec 16 09:31:52 2023 GMT
            Not After : Dec 14 09:36:52 2024 GMT
        Subject: CN=F44320D0C93E9D693F677A8410E9BDBE5633213F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:9f:7c:8a:3f:b2:27:6e:0b:dd:be:08:23:
                    dc:30:a2:5a:b0:dd:4e:20:51:1f:4d:56:15:a7:11:
                    03:3d:50:09:f4:8b:e9:ee:a8:c3:90:1c:6a:0c:44:
                    15:f7:82:ae:75:b9:9e:91:d4:88:17:45:88:52:82:
                    dd:30:58:6d:6a:1a:f4:1a:7d:b4:3a:d9:f6:a6:82:
                    c5:df:77:20:0e:14:2e:90:72:4b:12:e8:db:34:de:
                    95:90:9d:bb:e5:2e:8f:f1:75:21:d9:1f:e6:cb:dd:
                    69:a0:a6:7c:88:a9:8a:76:c8:3b:da:5f:51:96:d9:
                    07:8b:ba:02:4c:e7:dc:44:0b:6d:93:77:ab:f7:5a:
                    ab:a5:15:8d:93:9a:d2:78:16:03:49:fe:2d:03:f9:
                    f3:e7:86:29:30:ab:5a:fd:41:29:e6:34:20:74:e8:
                    20:6d:0d:2c:7d:1b:ef:e8:a1:24:1b:10:bc:30:be:
                    67:bc:51:e4:ae:33:4b:51:82:1e:45:4a:ca:0c:45:
                    16:b7:e5:cc:3d:2e:1d:6d:9f:57:d5:ef:0c:9a:72:
                    cc:43:17:f5:18:89:4e:61:24:f9:72:64:30:47:34:
                    1c:51:3f:fe:01:a6:f3:df:0d:00:5c:c1:93:f4:6a:
                    38:c1:2d:67:83:83:60:2f:ad:bd:c9:03:26:2c:2b:
                    fb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:43:20:D0:C9:3E:9D:69:3F:67:7A:84:10:E9:BD:BE:56:33:21:3F
            X509v3 Authority Key Identifier:
                keyid:D8:92:29:6C:C5:D5:37:58:78:15:49:3C:E7:B6:55:C9:46:94:44:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/D892296CC5D537587815493CE7B655C9469444D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D892296CC5D537587815493CE7B655C9469444D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/3139302e31312e3231302e302f32342d3234203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:64:64:86:81:0a:e9:26:be:17:84:fb:e3:8c:da:23:8c:d0:
         2e:35:74:02:e3:6e:c7:66:a2:19:25:52:d3:a1:cb:62:7d:e5:
         89:db:7f:1d:0f:56:ef:0a:f5:0c:e4:88:00:60:70:3a:fa:94:
         98:82:82:8f:4e:df:ca:4a:c4:3c:e1:bb:64:da:ab:60:a2:5d:
         9c:cf:7b:b2:33:96:54:b3:90:eb:2e:2a:62:a2:32:37:34:f1:
         3e:9d:61:83:bd:0c:40:6c:66:89:b7:71:e7:4d:5c:79:ea:05:
         89:5c:69:ac:e1:be:82:58:15:32:6d:bc:05:ca:a6:18:95:d3:
         09:cf:72:b0:f4:fe:ea:35:50:ea:f1:cf:9d:9a:37:b5:3a:a8:
         d3:9e:d8:0a:d9:20:05:a7:0a:01:bf:66:79:73:13:21:b4:d6:
         53:84:b6:c2:6e:4a:3e:56:b5:5c:d7:19:f6:34:41:02:ea:47:
         17:d8:19:88:b8:8b:6c:08:35:99:80:0b:16:5a:85:45:37:8d:
         fa:b3:de:b0:d2:4a:18:36:50:42:09:b8:da:04:d4:53:1d:54:
         40:9e:9c:aa:a5:9c:ad:37:47:d4:54:ad:02:22:dd:f7:e3:aa:
         9a:76:b6:ba:4b:2f:58:c5:cc:b1:ca:df:4f:f4:3f:2c:9b:2d:
         5a:d2:22:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org