Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/0/3139302e3131352e3231362e302f32322d3332203d3e20323730383435.roa
File:                     3139302e3131352e3231362e302f32322d3332203d3e20323730383435.roa (raw, json)
Hash identifier:          Ka1C3RhglcwbjY+yZr7cUnW586URIW4fKeoQv977Exg=
Subject key identifier:   55:1F:40:35:55:31:36:D5:EB:9D:AF:AA:32:BA:6D:FC:50:85:10:93
Certificate issuer:       /CN=31B3197FDF000F3E6D82BE06C1F8ADCA033CCA2C
Certificate serial:       1F98B2722370A16B92492ABC83B5556EA9D4F5CD
Authority key identifier: 31:B3:19:7F:DF:00:0F:3E:6D:82:BE:06:C1:F8:AD:CA:03:3C:CA:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31B3197FDF000F3E6D82BE06C1F8ADCA033CCA2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/0/3139302e3131352e3231362e302f32322d3332203d3e20323730383435.roa
Signing time:             Wed 14 Feb 2024 11:52:28 +0000
ROA not before:           Wed 14 Feb 2024 11:47:28 +0000
ROA not after:            Wed 12 Feb 2025 11:52:28 +0000
asID:                     270845
IP address blocks:        190.115.216.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:98:b2:72:23:70:a1:6b:92:49:2a:bc:83:b5:55:6e:a9:d4:f5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31B3197FDF000F3E6D82BE06C1F8ADCA033CCA2C
        Validity
            Not Before: Feb 14 11:47:28 2024 GMT
            Not After : Feb 12 11:52:28 2025 GMT
        Subject: CN=551F4035553136D5EB9DAFAA32BA6DFC50851093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:32:29:18:5a:29:0f:f4:b5:d6:a8:cc:97:dd:
                    88:4f:14:6a:7f:a0:25:60:7c:4f:eb:03:73:da:16:
                    c9:cf:b1:61:6e:fc:bb:0c:f3:8a:d3:81:9b:32:b7:
                    be:31:1a:92:28:22:6b:c6:f2:31:4b:d0:cd:d8:90:
                    92:13:86:02:b1:23:dc:db:bb:a4:e1:ab:74:6e:f6:
                    7e:51:b2:0f:4b:6f:75:0d:d5:34:41:3e:2a:97:d9:
                    4e:ed:cb:99:81:09:1f:e8:95:bf:d8:30:94:bc:a4:
                    8a:82:a3:84:36:14:b9:f6:aa:93:08:aa:ec:92:b1:
                    72:7a:78:32:70:9a:14:bc:66:9b:50:1e:58:ce:7c:
                    79:6a:58:fa:15:ec:aa:77:36:96:86:94:84:ff:e5:
                    ba:5d:35:b5:9b:39:15:3a:8e:9e:a6:26:0a:87:bb:
                    2d:99:25:88:61:96:fc:1a:53:96:7f:30:4d:84:11:
                    38:12:b1:0d:53:ce:be:2d:58:03:48:d0:aa:b2:97:
                    23:74:c5:92:89:87:48:fb:0d:19:d0:8f:4f:55:3d:
                    bb:e7:07:98:99:1f:fb:2a:56:dc:32:d2:48:6e:1b:
                    71:03:2c:3b:51:5e:b3:47:80:e6:c3:1f:d1:9e:a9:
                    be:db:6f:1b:a1:25:6a:db:60:19:2d:96:31:af:8d:
                    b1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1F:40:35:55:31:36:D5:EB:9D:AF:AA:32:BA:6D:FC:50:85:10:93
            X509v3 Authority Key Identifier:
                keyid:31:B3:19:7F:DF:00:0F:3E:6D:82:BE:06:C1:F8:AD:CA:03:3C:CA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/0/31B3197FDF000F3E6D82BE06C1F8ADCA033CCA2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31B3197FDF000F3E6D82BE06C1F8ADCA033CCA2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/0/3139302e3131352e3231362e302f32322d3332203d3e20323730383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:6f:ad:ac:59:e3:10:3c:af:c1:ea:67:2e:91:fc:58:b8:5c:
         12:09:69:76:5f:1e:5e:a6:97:86:7a:ef:3f:fa:b6:ea:f1:b8:
         14:7d:75:5a:63:cd:2e:f3:7f:f1:cd:89:84:cb:20:94:3e:97:
         3b:60:b5:80:e1:c4:69:89:69:bb:f0:f1:3b:83:a1:86:59:9d:
         b6:39:4d:b8:3b:5c:cf:e9:08:b8:e8:72:2c:e2:68:02:aa:b9:
         aa:6b:fe:5b:83:1c:95:b8:5c:6d:f6:52:39:7a:c4:4b:21:d0:
         b5:5c:de:52:91:0c:44:be:5d:c6:5a:3e:1e:6f:cd:e5:6c:41:
         f1:d0:04:a0:ae:38:40:db:5a:a8:a6:f6:87:aa:23:86:d6:32:
         b2:8c:ec:08:8a:20:6a:02:0c:8f:88:90:52:a3:cf:4c:4b:62:
         9a:ec:70:4b:a8:97:81:63:dd:3a:c6:67:6a:f9:5e:e5:62:6a:
         d0:5c:12:00:fe:da:2b:c0:98:f8:ec:47:c0:be:76:36:55:99:
         0d:12:42:13:e0:95:59:32:36:a4:e1:2a:3f:be:52:35:65:a6:
         5d:9a:53:be:4e:e6:40:6b:95:99:7a:fc:cd:a9:b4:14:85:f7:
         21:05:97:3b:8f:06:be:7e:8c:9c:4f:c9:e1:55:12:86:a3:15:
         c4:73:94:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org