Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3139312e3234332e39302e302f32342d3234203d3e203238323130.roa
File:                     3139312e3234332e39302e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          AhKQT78mIgUewasOYuT+OwCRO/9l7QRI9MwF63bXHpc=
Subject key identifier:   08:5E:9E:57:E4:E4:73:79:F4:60:85:11:26:0D:BB:98:AE:94:3D:72
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       3262477E8A67F9FEA1D023BB719E3552E7A999E4
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3139312e3234332e39302e302f32342d3234203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:24 +0000
ROA not before:           Wed 28 Feb 2024 13:58:24 +0000
ROA not after:            Wed 26 Feb 2025 14:03:24 +0000
asID:                     28210
IP address blocks:        191.243.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:62:47:7e:8a:67:f9:fe:a1:d0:23:bb:71:9e:35:52:e7:a9:99:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:24 2024 GMT
            Not After : Feb 26 14:03:24 2025 GMT
        Subject: CN=085E9E57E4E47379F4608511260DBB98AE943D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ce:e4:b0:c4:51:24:96:f9:42:4a:a2:4d:44:
                    34:ec:fb:ea:e9:59:7c:0f:2d:b9:c1:d5:14:e7:e7:
                    29:c8:79:5b:55:6e:23:67:4f:f5:2d:45:5b:95:59:
                    76:cd:83:55:4a:8d:62:c7:68:95:36:29:69:57:74:
                    c0:09:3d:a6:e9:aa:68:2f:55:9e:26:bd:a5:34:48:
                    c4:5a:2d:ad:19:9c:a9:87:2e:21:73:76:b2:50:e8:
                    78:1e:92:3f:4c:32:43:85:0d:93:16:86:92:86:2b:
                    dd:72:0c:b5:93:99:60:24:54:ca:ab:d6:b5:9a:ab:
                    64:ae:1a:bb:f7:9c:2f:ca:c7:43:3e:81:23:0d:a0:
                    33:4a:c8:6a:53:fd:54:01:63:15:1e:4f:c4:06:5c:
                    2b:69:5c:4d:7f:e5:4d:7e:99:87:08:dc:d8:6b:5b:
                    58:3e:df:29:9d:7c:6a:03:47:4a:14:00:b3:a2:2b:
                    4d:fb:99:55:0c:1f:b2:7f:f5:01:d2:e4:fe:47:a3:
                    5c:6d:4f:db:9e:35:52:40:06:65:c9:44:02:57:1d:
                    9f:10:52:d0:53:06:aa:53:22:ee:7e:c1:9b:41:44:
                    fa:dd:f7:43:f0:99:56:7e:86:70:8d:4d:3b:d5:ab:
                    7e:42:d1:37:88:f4:d1:d7:b6:3b:39:8d:5f:d4:4f:
                    87:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5E:9E:57:E4:E4:73:79:F4:60:85:11:26:0D:BB:98:AE:94:3D:72
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3139312e3234332e39302e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:12:98:89:a0:9d:f6:75:6d:98:18:55:13:cd:3f:80:e4:41:
         f6:4c:00:ca:dd:b6:c0:84:19:15:7c:d8:0a:a5:0d:45:d6:1f:
         30:13:b3:76:30:89:75:80:ad:d0:88:45:5e:dc:6e:e5:a3:cf:
         c3:c0:1b:68:90:ec:c7:68:12:b8:5b:c8:83:1e:71:de:64:66:
         79:bc:3d:94:42:7b:2e:64:95:7a:b9:19:4b:ca:2d:61:bb:92:
         6e:62:bc:3e:a9:08:17:e7:8f:d4:38:cf:64:9a:e3:b8:fd:96:
         19:33:ec:5b:ef:9b:52:67:b0:28:5f:09:e8:1e:72:d2:d6:eb:
         c4:df:58:25:f7:c2:48:d2:57:86:ba:91:a6:8c:89:d1:f8:b5:
         8f:bb:cd:99:66:3e:07:81:08:9a:de:f8:03:e0:e7:4d:8f:a4:
         cf:da:6f:ad:16:f9:05:21:4c:6b:a0:44:14:53:18:c5:7d:64:
         0e:0f:ea:2c:7f:91:33:4a:f0:58:5d:a5:dd:4c:e3:9d:18:7f:
         56:1b:f5:9e:df:31:54:2f:70:94:b6:59:d5:69:46:fd:56:ec:
         fc:c6:f2:3e:18:3a:10:00:09:90:28:82:36:89:6d:f0:f9:e8:
         02:7c:9c:4a:92:a1:77:95:aa:93:e1:b1:c3:b6:aa:23:c5:29:
         d5:50:4e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org