Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GNtT9fPE7RatLLeo7Dg3LiFckTsJisiM9mH4baHAenY/0/3139302e38392e3134322e302f32342d3234203d3e20323730333933.roa
File:                     3139302e38392e3134322e302f32342d3234203d3e20323730333933.roa (raw, json)
Hash identifier:          iLhkZmzITaSBvLhMhONsbcsqvv+V+Oj+RHRd2PSC/BU=
Subject key identifier:   CB:0D:91:7D:79:92:50:96:80:81:03:A0:C3:AD:E1:E5:F8:19:1B:F9
Certificate issuer:       /CN=F85B06359227861B2D78F9E4EAB635F99B381050
Certificate serial:       38CA9167BFD0494E00E455E472F84B2A9B0AF919
Authority key identifier: F8:5B:06:35:92:27:86:1B:2D:78:F9:E4:EA:B6:35:F9:9B:38:10:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F85B06359227861B2D78F9E4EAB635F99B381050.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GNtT9fPE7RatLLeo7Dg3LiFckTsJisiM9mH4baHAenY/0/3139302e38392e3134322e302f32342d3234203d3e20323730333933.roa
Signing time:             Mon 03 Apr 2023 19:50:39 +0000
ROA not before:           Mon 03 Apr 2023 19:45:39 +0000
ROA not after:            Mon 01 Apr 2024 19:50:39 +0000
asID:                     270393
IP address blocks:        190.89.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ca:91:67:bf:d0:49:4e:00:e4:55:e4:72:f8:4b:2a:9b:0a:f9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F85B06359227861B2D78F9E4EAB635F99B381050
        Validity
            Not Before: Apr  3 19:45:39 2023 GMT
            Not After : Apr  1 19:50:39 2024 GMT
        Subject: CN=CB0D917D79925096808103A0C3ADE1E5F8191BF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:81:e2:f2:52:68:5d:d4:ba:73:0f:d5:a0:
                    17:be:78:57:b6:36:0d:f8:8a:0a:bb:49:c0:4f:c4:
                    02:00:e2:0d:f7:46:7e:3b:66:56:ab:fa:b6:42:84:
                    7e:a1:cd:fb:cd:ed:03:2f:53:00:17:c5:55:e8:26:
                    1c:49:f8:51:63:48:82:d1:da:57:63:65:eb:cf:6d:
                    ca:95:cb:c6:1e:99:98:01:eb:82:d1:d0:22:5d:ad:
                    02:7d:07:7f:26:64:a5:0b:fe:49:a2:ed:17:8f:c5:
                    db:e7:d7:73:2b:e5:de:ef:87:2f:66:35:32:44:48:
                    16:84:fd:f4:20:79:a6:12:69:76:26:fc:3a:bd:99:
                    24:88:68:c8:33:20:e4:ac:ae:2e:df:a6:4c:93:f2:
                    9e:19:fe:95:f4:d4:97:9e:dd:ba:3e:95:d6:9a:58:
                    8a:75:4e:44:13:14:7b:99:c5:4b:a8:cb:31:31:9b:
                    2a:f4:bb:51:b1:8e:16:ea:cf:9c:a7:b2:3c:f3:d7:
                    96:78:c6:76:34:f1:2b:ab:6c:78:d7:18:0b:d3:53:
                    c9:39:89:ad:d9:15:0c:09:80:87:51:19:88:7c:33:
                    0c:77:8c:92:b1:28:d2:4f:aa:e9:9c:38:cd:be:b9:
                    c1:8c:b2:6f:73:a5:bf:57:f3:6e:44:20:56:22:10:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0D:91:7D:79:92:50:96:80:81:03:A0:C3:AD:E1:E5:F8:19:1B:F9
            X509v3 Authority Key Identifier:
                keyid:F8:5B:06:35:92:27:86:1B:2D:78:F9:E4:EA:B6:35:F9:9B:38:10:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GNtT9fPE7RatLLeo7Dg3LiFckTsJisiM9mH4baHAenY/0/F85B06359227861B2D78F9E4EAB635F99B381050.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F85B06359227861B2D78F9E4EAB635F99B381050.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GNtT9fPE7RatLLeo7Dg3LiFckTsJisiM9mH4baHAenY/0/3139302e38392e3134322e302f32342d3234203d3e20323730333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:43:53:33:ba:e1:86:8d:e8:fd:00:97:6f:a8:3a:62:59:a6:
         a9:d0:a0:59:b3:16:3e:52:fe:7c:40:7f:80:45:b2:81:60:bd:
         03:f8:21:0d:c5:47:f1:0c:c8:fa:07:05:a3:ad:e9:5a:cd:da:
         71:05:e4:cf:89:38:db:d5:f0:75:24:dd:8d:0c:42:66:68:0e:
         53:64:71:f3:10:5a:0d:d8:46:1e:9e:07:da:12:c4:0a:75:23:
         94:83:8b:71:f6:6d:ea:4e:b8:2d:bb:60:b2:cf:dd:fe:80:aa:
         3b:bb:a6:33:77:7d:17:c2:ca:4f:6b:a1:7e:c8:e2:5e:16:c8:
         fb:fb:d5:f2:68:b7:ff:9d:eb:28:66:7b:d7:e5:ee:a7:e9:e3:
         fe:76:89:9e:85:d0:42:0f:af:9f:25:ad:db:1c:7a:31:49:3b:
         cd:9b:55:b8:7b:a4:bc:97:21:12:05:2d:e0:2d:05:cf:14:05:
         1b:96:3a:64:c9:b7:33:00:e0:bc:70:69:bd:eb:69:de:ab:5c:
         99:2d:e5:de:26:2a:84:df:4e:8e:2a:eb:9e:e5:f5:9a:73:84:
         90:f5:fa:aa:30:75:b5:a7:a4:ac:b0:ee:5b:ed:c2:b6:0e:d8:
         f6:34:e7:62:af:d1:45:94:44:f5:20:9c:8d:ad:17:1c:6d:05:
         24:48:f9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org