Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/3139302e3131322e3133352e302f32342d3234203d3e20323730333338.roa
File:                     3139302e3131322e3133352e302f32342d3234203d3e20323730333338.roa (raw, json)
Hash identifier:          8ghW5uQ19r4v5910yhCMJw6SYTASKlCTwL21XFVA2/Q=
Subject key identifier:   53:D7:02:3B:D1:7D:4A:81:E5:6E:C5:19:D3:5D:25:D8:D2:AB:BE:45
Certificate issuer:       /CN=966322EBF60EAC72722BAA489C53B18FD38FE811
Certificate serial:       57466E47EAD1566FE2155CA0423D1865FAB27913
Authority key identifier: 96:63:22:EB:F6:0E:AC:72:72:2B:AA:48:9C:53:B1:8F:D3:8F:E8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/966322EBF60EAC72722BAA489C53B18FD38FE811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/3139302e3131322e3133352e302f32342d3234203d3e20323730333338.roa
Signing time:             Mon 18 Dec 2023 15:53:56 +0000
ROA not before:           Mon 18 Dec 2023 15:48:56 +0000
ROA not after:            Mon 16 Dec 2024 15:53:56 +0000
asID:                     270338
IP address blocks:        190.112.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:46:6e:47:ea:d1:56:6f:e2:15:5c:a0:42:3d:18:65:fa:b2:79:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966322EBF60EAC72722BAA489C53B18FD38FE811
        Validity
            Not Before: Dec 18 15:48:56 2023 GMT
            Not After : Dec 16 15:53:56 2024 GMT
        Subject: CN=53D7023BD17D4A81E56EC519D35D25D8D2ABBE45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:91:83:cf:cc:fc:3b:4c:6e:38:5b:96:70:
                    96:a0:87:85:0a:0d:c5:c0:9a:69:17:53:48:29:d9:
                    f1:12:c4:e4:bf:0f:8d:c2:4c:79:0a:45:f8:f4:9d:
                    28:a0:60:a5:86:04:2a:02:1f:d8:ec:b6:13:1a:25:
                    03:7c:48:a4:7d:56:8e:58:a4:03:f6:3b:81:99:e4:
                    28:f4:ff:00:df:25:e4:5d:6e:90:cd:a5:74:19:58:
                    62:bb:e1:af:6c:60:4d:87:8d:d3:d5:90:3a:44:0c:
                    f9:91:5f:92:33:a3:fb:3f:68:da:5c:27:bb:52:82:
                    fb:3c:07:0c:20:f5:cd:b4:ae:84:34:bc:ad:53:6e:
                    e3:01:3b:d0:a1:a3:7c:15:31:44:40:d2:23:44:5b:
                    44:05:b2:ed:7b:4f:b0:c8:6a:5c:aa:e1:23:a1:8f:
                    1c:b0:aa:5a:29:95:a7:4e:3e:aa:4d:b9:93:7a:6d:
                    a3:44:8b:c1:f6:c7:ac:0d:0a:f4:ec:0c:38:a5:db:
                    bf:d4:01:8a:05:a0:91:97:a0:39:f1:05:c8:b8:c1:
                    d5:9a:a9:57:65:d5:43:8f:d2:11:58:d7:9e:08:eb:
                    d4:16:a2:aa:12:95:bb:b0:b5:24:37:47:57:9d:a1:
                    af:9a:ae:bf:b8:23:ca:90:3d:f6:9e:43:f2:0f:6b:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D7:02:3B:D1:7D:4A:81:E5:6E:C5:19:D3:5D:25:D8:D2:AB:BE:45
            X509v3 Authority Key Identifier:
                keyid:96:63:22:EB:F6:0E:AC:72:72:2B:AA:48:9C:53:B1:8F:D3:8F:E8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/966322EBF60EAC72722BAA489C53B18FD38FE811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/966322EBF60EAC72722BAA489C53B18FD38FE811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/3139302e3131322e3133352e302f32342d3234203d3e20323730333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:6c:6a:6c:f4:b0:f5:1b:38:d1:17:c7:76:61:52:57:b9:59:
         f5:3e:c2:ab:2b:58:4f:8b:7d:71:c8:1c:b9:b3:3c:8e:4e:06:
         0e:c1:d6:98:99:e5:6a:aa:33:ec:66:1d:33:41:8d:84:ac:e7:
         d3:ec:c9:5a:cb:17:86:af:80:01:ea:26:1d:ce:72:25:40:54:
         26:d5:fe:4c:9a:cb:66:8c:2e:bc:7a:c6:ef:13:a2:50:26:d4:
         cd:51:63:c9:e9:29:a6:e7:47:9c:22:4c:2e:29:2f:15:91:6a:
         ce:3d:65:a8:5c:29:d7:f7:9a:19:17:70:d4:a6:84:35:66:ee:
         88:ee:d1:7b:ab:ef:7c:6e:1a:70:77:52:2f:4c:c1:df:03:c4:
         3c:88:8e:40:11:e7:aa:26:d4:4e:0c:35:23:02:7f:1b:44:1d:
         6f:53:4a:22:80:1a:42:28:45:0a:b8:e8:12:8d:7f:9e:e2:be:
         39:bc:71:f9:82:ca:a5:33:05:7c:2a:ff:ed:f5:8c:93:72:ef:
         85:69:da:d2:f5:17:b1:0e:09:84:11:e8:b0:09:52:ea:3e:97:
         13:00:25:24:d6:e5:d1:d6:d4:e8:7c:c3:53:29:d5:3f:b2:a4:
         1c:76:25:e4:75:00:62:22:d8:1e:1f:b9:93:d6:53:ff:7d:e8:
         0d:c1:5a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org