Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/3139302e31312e3231312e302f32342d3234203d3e20323730363532.roa
File:                     3139302e31312e3231312e302f32342d3234203d3e20323730363532.roa (raw, json)
Hash identifier:          Gm/Pg3EhykfnCoW06wx7ij8W4n9OzqRrwuTk5RaQv9U=
Subject key identifier:   AF:AB:A5:78:C8:30:83:92:A2:3B:16:94:A6:B4:A1:54:5A:2A:1B:06
Certificate issuer:       /CN=D892296CC5D537587815493CE7B655C9469444D7
Certificate serial:       1A98311D288D15E32DBD8D0786DAA42C7504CC8A
Authority key identifier: D8:92:29:6C:C5:D5:37:58:78:15:49:3C:E7:B6:55:C9:46:94:44:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D892296CC5D537587815493CE7B655C9469444D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/3139302e31312e3231312e302f32342d3234203d3e20323730363532.roa
Signing time:             Sat 16 Dec 2023 09:36:53 +0000
ROA not before:           Sat 16 Dec 2023 09:31:53 +0000
ROA not after:            Sat 14 Dec 2024 09:36:53 +0000
asID:                     270652
IP address blocks:        190.11.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:98:31:1d:28:8d:15:e3:2d:bd:8d:07:86:da:a4:2c:75:04:cc:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D892296CC5D537587815493CE7B655C9469444D7
        Validity
            Not Before: Dec 16 09:31:53 2023 GMT
            Not After : Dec 14 09:36:53 2024 GMT
        Subject: CN=AFABA578C8308392A23B1694A6B4A1545A2A1B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:04:90:1c:8b:95:8d:31:54:98:f4:18:5b:ed:
                    cf:9a:fd:a6:65:d7:d7:a1:3f:1d:4a:13:04:a3:06:
                    3c:9f:08:04:b3:43:8f:6e:33:8b:d7:f9:d9:e5:7b:
                    e5:8f:bb:b2:dd:42:ed:ee:3a:1a:1e:5a:01:f8:20:
                    0b:b6:3e:4d:04:87:38:7d:07:2d:45:fc:9f:c5:4d:
                    9a:90:8a:91:a7:95:1b:e8:c5:9f:5a:88:10:cd:43:
                    c3:ad:52:ee:6c:35:c2:b9:f4:bb:d8:93:1c:8c:55:
                    c9:f5:91:ca:9c:ce:a0:18:df:07:76:f8:a2:8f:70:
                    e0:f6:6e:dc:93:f0:b4:92:e2:3f:69:5c:32:2d:52:
                    f6:68:16:26:aa:38:60:d7:a1:64:b9:a4:30:16:f6:
                    97:e4:7c:18:cb:30:9c:50:1c:44:62:14:20:83:68:
                    43:07:b3:ed:aa:d3:bf:ce:ee:ec:74:29:e9:b4:e5:
                    da:eb:e5:43:05:81:06:1a:d6:aa:19:1b:c3:84:7d:
                    a8:18:49:d2:bd:1d:54:35:0b:c0:32:c3:9e:8f:9e:
                    dd:62:77:55:38:0e:26:c6:a9:ef:f2:2d:01:e5:3b:
                    43:2a:7d:65:f1:7b:c2:e2:1c:1b:9d:7a:3c:ae:02:
                    35:2b:27:c4:af:01:a0:35:5f:7a:a9:c7:16:6d:6e:
                    74:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AB:A5:78:C8:30:83:92:A2:3B:16:94:A6:B4:A1:54:5A:2A:1B:06
            X509v3 Authority Key Identifier:
                keyid:D8:92:29:6C:C5:D5:37:58:78:15:49:3C:E7:B6:55:C9:46:94:44:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/D892296CC5D537587815493CE7B655C9469444D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D892296CC5D537587815493CE7B655C9469444D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/3139302e31312e3231312e302f32342d3234203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:8c:fa:c9:7f:bb:8a:93:44:33:4e:38:4b:bc:e3:2c:59:01:
         fa:91:8b:9d:fe:2b:61:27:2f:84:d5:23:58:60:58:d9:60:b8:
         62:ba:90:fc:82:36:9a:a1:2c:fc:73:7b:29:97:a9:78:39:e6:
         56:b2:13:9a:cf:f2:85:00:af:b7:6c:dd:b8:39:c8:c1:62:38:
         e2:e8:17:f3:4a:3d:97:85:7c:3c:df:65:08:3f:3d:14:e0:bd:
         3b:48:5c:c9:ee:31:97:4e:a8:01:89:d8:0d:31:42:b7:ad:1f:
         26:39:47:d1:5b:4c:7f:a5:a4:b1:48:4a:79:84:4f:e5:02:f1:
         6b:2d:2c:6d:3f:20:74:74:83:91:9b:cf:53:71:17:e9:0f:30:
         96:89:a8:8a:65:2e:f7:1b:1e:7d:65:e7:d2:52:d6:b1:c2:64:
         51:c0:9a:89:74:71:f2:8c:c3:66:c9:32:3f:66:53:0b:4d:4e:
         79:10:2d:80:7b:d6:81:b5:b6:96:82:05:ce:e2:67:e5:77:06:
         65:2f:2d:36:4d:0c:17:2a:3d:93:30:a9:78:df:16:cb:db:8e:
         6f:6f:2a:55:da:35:36:fb:12:2b:95:60:a4:77:09:c5:85:41:
         07:cd:a3:61:fb:e6:b1:d8:37:68:a3:52:40:87:b9:47:82:c3:
         cb:90:9a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:49 2024 by rpki-client on console-fra.rpki-client.org