Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UmLLvx6S36nJhusNXRYANxXRHs57qy5yXHoiH5rW6w3/0/3139302e322e37392e302f32342d3234203d3e203631393230.roa
File:                     3139302e322e37392e302f32342d3234203d3e203631393230.roa (raw, json)
Hash identifier:          04AYs/8MUPCSfv9B0i0O0+eSXGC75ezod60J813XPgU=
Subject key identifier:   28:BA:20:4B:1B:AD:88:04:0F:7B:F9:09:E1:D6:B1:ED:0E:AC:EF:6B
Certificate issuer:       /CN=AAE0AF17A7DC38EB68E62E5A8280F89643AACF08
Certificate serial:       106AF5F89D68F6E4D931B99D4EF8FA3AED1A64C4
Authority key identifier: AA:E0:AF:17:A7:DC:38:EB:68:E6:2E:5A:82:80:F8:96:43:AA:CF:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAE0AF17A7DC38EB68E62E5A8280F89643AACF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UmLLvx6S36nJhusNXRYANxXRHs57qy5yXHoiH5rW6w3/0/3139302e322e37392e302f32342d3234203d3e203631393230.roa
Signing time:             Wed 20 Dec 2023 03:55:06 +0000
ROA not before:           Wed 20 Dec 2023 03:50:06 +0000
ROA not after:            Wed 18 Dec 2024 03:55:06 +0000
asID:                     61920
IP address blocks:        190.2.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6a:f5:f8:9d:68:f6:e4:d9:31:b9:9d:4e:f8:fa:3a:ed:1a:64:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAE0AF17A7DC38EB68E62E5A8280F89643AACF08
        Validity
            Not Before: Dec 20 03:50:06 2023 GMT
            Not After : Dec 18 03:55:06 2024 GMT
        Subject: CN=28BA204B1BAD88040F7BF909E1D6B1ED0EACEF6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:9a:e8:8c:4c:52:67:dd:e9:86:a4:74:8c:
                    52:58:83:52:eb:26:9e:c4:f3:19:fe:db:ee:06:9d:
                    85:a6:a1:70:34:a6:c7:91:15:02:3e:1c:e8:5f:e8:
                    37:68:01:63:a5:cc:2b:aa:ab:aa:5c:58:8e:d6:9c:
                    cb:95:61:b1:4c:cd:46:c2:07:7e:5f:52:3a:ee:49:
                    49:82:1d:c2:4a:04:9c:48:41:45:1c:6b:a4:ad:69:
                    ec:31:af:50:86:52:16:56:56:e0:ef:cc:e1:87:9b:
                    34:74:c9:2a:86:f3:a3:62:30:03:d0:03:9f:64:88:
                    eb:32:a5:27:a4:d2:26:a0:15:e9:a5:96:f4:bc:b2:
                    93:ec:49:8c:d2:2a:6e:02:06:ab:88:b5:fb:7c:6e:
                    c2:3d:9a:e8:c5:20:f4:55:14:79:6c:74:a3:aa:4d:
                    48:3d:45:63:83:31:2f:e6:a0:65:c4:0e:f9:10:a3:
                    b4:34:b9:9f:31:42:e8:8a:b6:c2:08:35:da:03:91:
                    2f:94:2d:76:a4:2f:9d:e5:94:13:a6:e1:f4:41:10:
                    8c:f0:bc:3b:f6:95:f3:e8:03:19:7b:b1:be:e9:8b:
                    ad:0c:8e:ee:7f:d4:17:32:95:f3:99:92:7c:6b:32:
                    10:87:12:96:40:87:5c:f4:c4:bb:c1:cb:55:ec:8d:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BA:20:4B:1B:AD:88:04:0F:7B:F9:09:E1:D6:B1:ED:0E:AC:EF:6B
            X509v3 Authority Key Identifier:
                keyid:AA:E0:AF:17:A7:DC:38:EB:68:E6:2E:5A:82:80:F8:96:43:AA:CF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UmLLvx6S36nJhusNXRYANxXRHs57qy5yXHoiH5rW6w3/0/AAE0AF17A7DC38EB68E62E5A8280F89643AACF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAE0AF17A7DC38EB68E62E5A8280F89643AACF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UmLLvx6S36nJhusNXRYANxXRHs57qy5yXHoiH5rW6w3/0/3139302e322e37392e302f32342d3234203d3e203631393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:b8:fd:68:a3:72:d6:d9:f8:25:13:36:36:cf:f0:a8:a6:27:
         02:39:f8:fe:e8:3d:04:6d:d9:0d:6b:fc:c3:1f:3f:3e:85:18:
         1d:c7:b9:c9:7c:29:98:9e:c4:1c:d5:37:9f:f6:a2:14:c2:73:
         58:a8:ed:06:e2:44:d2:9e:a5:20:83:14:1b:83:b4:e9:f8:46:
         68:aa:c7:8b:c6:c8:06:4b:7d:0e:ed:93:87:bf:01:18:75:60:
         fe:c0:9d:7f:35:6a:67:48:2f:e3:9c:f0:ee:b5:83:9d:b3:e3:
         48:75:06:3f:c8:b2:81:d2:fa:2e:65:ef:0a:4b:5a:a3:26:2e:
         ee:e6:6c:82:eb:fb:65:a1:be:73:e8:a5:8d:68:bc:bd:6d:56:
         0b:a8:1c:2b:52:97:21:13:76:02:3a:de:e5:31:10:0a:a3:f6:
         ed:e9:4c:a7:f3:a6:5c:09:76:63:29:75:d5:5a:72:e5:4d:fb:
         57:d3:38:50:af:b3:f6:56:83:e9:fe:c2:24:d3:ff:16:78:ea:
         bc:ae:6e:83:1d:08:59:7a:7d:60:4a:71:9e:d9:a7:71:65:1b:
         92:0b:d8:df:cd:54:26:f6:28:ae:a5:15:60:1f:74:63:56:85:
         be:58:97:e1:c6:95:e6:fc:ac:75:a1:7d:19:38:7d:62:5d:3f:
         13:64:1b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org