Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/3139302e382e3137342e302f32332d3233203d3e20323731303131.roa
File:                     3139302e382e3137342e302f32332d3233203d3e20323731303131.roa (raw, json)
Hash identifier:          c4Ga204/yf9Z6yf3MFljRTHNaOtxytk8HKq4S2WCt1c=
Subject key identifier:   25:DB:9F:CF:E7:F2:A6:55:5D:DD:2C:C8:42:AE:B1:6E:1B:C4:FE:DD
Certificate issuer:       /CN=F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9
Certificate serial:       2165ED4CFCAF2FB4D5DF4DDA5B98E807467D8103
Authority key identifier: F6:33:EC:1D:98:41:26:CD:6B:D3:A7:EF:2F:04:BC:6E:15:F2:61:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/3139302e382e3137342e302f32332d3233203d3e20323731303131.roa
Signing time:             Thu 06 Jul 2023 19:00:00 +0000
ROA not before:           Thu 06 Jul 2023 18:55:00 +0000
ROA not after:            Thu 04 Jul 2024 19:00:00 +0000
asID:                     271011
IP address blocks:        190.8.174.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:65:ed:4c:fc:af:2f:b4:d5:df:4d:da:5b:98:e8:07:46:7d:81:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9
        Validity
            Not Before: Jul  6 18:55:00 2023 GMT
            Not After : Jul  4 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:82:78:78:ba:fd:24:79:1d:ad:3c:8d:b2:5a:
                    00:3e:3a:85:5e:b0:ff:b9:d4:b9:c6:cc:d3:29:16:
                    8d:5a:7a:be:5a:eb:17:75:c5:d7:fe:f1:a8:b2:88:
                    d8:5a:0a:59:51:d9:41:cd:39:13:54:49:87:fb:0b:
                    52:fe:93:3f:37:3b:de:7c:26:72:2c:37:32:fc:10:
                    97:ac:4a:f8:09:36:c5:6f:e9:dd:a0:e9:e5:0f:91:
                    aa:d4:9a:15:8b:e1:7c:a3:db:95:55:ab:20:64:e6:
                    ca:ca:81:2d:9d:dd:87:6e:30:35:1a:2b:47:44:9e:
                    48:21:61:7f:54:da:8d:73:e9:98:ae:b4:8c:25:d5:
                    73:c0:e6:a8:00:4f:e8:fe:51:2f:01:60:f6:6c:bd:
                    61:ec:97:20:00:15:da:05:d0:88:53:f5:ce:1d:4b:
                    31:2a:4d:01:17:b1:5b:a3:39:d1:c7:80:51:74:31:
                    f5:03:11:bf:88:fc:0b:ca:3f:d9:8b:99:8f:10:62:
                    fc:51:c6:b4:cc:3d:77:4f:67:8d:1a:eb:68:37:77:
                    d0:b7:bd:13:64:b4:24:0c:73:4c:c2:ce:25:d0:e0:
                    a0:ba:82:d5:92:24:69:59:37:16:2c:7e:bb:db:87:
                    c0:4a:14:54:99:ae:f1:36:95:29:9d:25:d4:85:8d:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DB:9F:CF:E7:F2:A6:55:5D:DD:2C:C8:42:AE:B1:6E:1B:C4:FE:DD
            X509v3 Authority Key Identifier:
                keyid:F6:33:EC:1D:98:41:26:CD:6B:D3:A7:EF:2F:04:BC:6E:15:F2:61:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/3139302e382e3137342e302f32332d3233203d3e20323731303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:25:64:5e:3e:fe:40:33:d8:29:80:12:9b:87:4c:df:75:f2:
         3e:56:63:d6:61:f1:f3:a1:9c:5f:6e:aa:35:da:54:7a:c8:82:
         e2:61:ae:42:50:e0:d0:0b:a4:3c:b7:3a:4b:f9:44:bc:92:dd:
         2a:9a:57:d9:be:ac:37:ba:fc:66:69:16:da:1f:d4:a4:60:a6:
         c5:5c:88:f4:cb:fc:f3:6c:7c:e7:a0:68:9f:1d:8b:1f:2a:ec:
         e4:ef:36:a3:9a:8c:60:9f:64:d8:f8:3c:0d:e6:37:17:0f:5f:
         7c:57:59:9b:22:86:70:57:25:0c:d4:1d:62:29:ea:a3:dd:2d:
         dc:3e:15:98:9d:0e:0f:78:d4:93:9c:2f:8f:b2:58:9e:bc:64:
         3c:f7:bd:cb:92:af:0e:6e:55:b5:94:37:4d:fb:4c:4b:9f:ce:
         b9:ac:5e:c8:b7:0a:ac:ff:57:8c:ce:cc:2c:09:ef:ea:ac:2b:
         43:49:a4:ae:40:19:72:b0:06:ae:85:23:7b:bc:57:7f:f2:b6:
         52:c8:32:fa:35:85:70:49:98:89:50:fd:ea:32:8b:92:74:49:
         ed:06:d2:28:ab:3e:8e:23:52:92:5c:0a:e4:30:7b:61:50:d1:
         21:b4:03:22:96:a7:6c:cf:fc:26:d5:5d:d7:39:7b:43:a7:f7:
         88:87:3d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org