Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/3139302e382e3137352e302f32342d3234203d3e20323731303131.roa
File:                     3139302e382e3137352e302f32342d3234203d3e20323731303131.roa (raw, json)
Hash identifier:          BEg30zwSAqm0PJio5w3pKbvwbbp2RzALQUkz61ZAa+g=
Subject key identifier:   D7:5D:6B:77:91:EC:9F:1C:F5:79:6B:C1:00:FC:D8:52:ED:CD:05:E4
Certificate issuer:       /CN=F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9
Certificate serial:       7599F1935BBB86E3622F67C812D2577859AE37FA
Authority key identifier: F6:33:EC:1D:98:41:26:CD:6B:D3:A7:EF:2F:04:BC:6E:15:F2:61:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/3139302e382e3137352e302f32342d3234203d3e20323731303131.roa
Signing time:             Thu 06 Jul 2023 19:00:00 +0000
ROA not before:           Thu 06 Jul 2023 18:55:00 +0000
ROA not after:            Thu 04 Jul 2024 19:00:00 +0000
asID:                     271011
IP address blocks:        190.8.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:99:f1:93:5b:bb:86:e3:62:2f:67:c8:12:d2:57:78:59:ae:37:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9
        Validity
            Not Before: Jul  6 18:55:00 2023 GMT
            Not After : Jul  4 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:ef:0f:b0:b8:ad:96:e3:a7:ef:b1:61:cc:
                    87:d9:6d:a2:14:8b:51:63:c1:fd:0d:15:70:bf:64:
                    98:08:b0:db:9d:55:2b:04:9e:d2:36:e7:9f:dd:27:
                    8a:20:3b:e1:44:88:c9:e4:0a:cd:ee:e8:8f:d9:12:
                    91:8c:2f:6a:3a:ab:e6:94:4b:f8:80:5b:69:4c:c5:
                    96:b8:cb:5d:1b:60:57:c5:93:0d:c8:33:39:4b:61:
                    5e:c9:9c:1c:8c:e0:c7:50:7f:0b:60:67:e3:d3:9c:
                    15:98:69:01:c9:79:b0:a8:04:36:46:1d:5b:04:d1:
                    d1:ae:c2:f2:bb:35:3c:93:62:63:70:82:43:7e:54:
                    38:26:56:ef:dd:26:67:35:e8:e3:8a:35:0f:91:fa:
                    02:61:03:5e:41:cc:1a:7a:a6:d0:7d:42:dc:9b:85:
                    bb:ca:0c:b4:08:9d:03:81:dc:87:f2:3d:63:66:f4:
                    9b:68:47:dd:ac:a9:91:08:a9:1c:6c:dd:af:c4:8b:
                    63:70:94:c6:28:f9:f2:28:bd:be:c2:3c:eb:81:5c:
                    35:bf:b7:74:57:49:73:6e:b7:c5:74:37:e7:cf:3a:
                    dc:8d:ca:c7:0a:06:7b:77:6e:01:33:e1:43:b0:92:
                    45:6e:5d:d1:29:7a:55:3d:c2:50:53:f3:9a:8e:c2:
                    3e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5D:6B:77:91:EC:9F:1C:F5:79:6B:C1:00:FC:D8:52:ED:CD:05:E4
            X509v3 Authority Key Identifier:
                keyid:F6:33:EC:1D:98:41:26:CD:6B:D3:A7:EF:2F:04:BC:6E:15:F2:61:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/3139302e382e3137352e302f32342d3234203d3e20323731303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:a6:70:aa:ff:e1:d1:3b:15:f2:89:e3:ac:61:db:9d:c9:3c:
         ba:a4:5b:79:69:ea:e2:c7:63:93:e9:76:a1:76:39:4e:c5:cc:
         77:0e:c7:cf:7f:3c:0b:99:78:f8:6c:67:14:1d:f2:d4:13:c4:
         31:b0:86:ea:2c:37:9f:e2:5b:bf:97:f9:c3:01:2e:d2:71:7a:
         d7:bd:9d:7e:3f:55:a2:14:05:c1:4b:ca:75:4f:a3:f6:69:1a:
         ab:d8:09:f7:92:8a:0a:51:b3:02:11:3e:a9:2d:f9:00:ec:80:
         99:fd:30:5f:01:ef:00:21:61:b7:ec:25:6d:17:05:a8:e0:d3:
         c4:f7:46:8d:99:4c:28:66:fd:b4:f5:d2:4e:8c:8d:c5:89:01:
         b5:af:ea:bd:81:b2:e1:23:0d:ec:b9:64:86:be:bc:01:33:b5:
         5b:14:32:d4:42:ac:90:d3:ac:bf:45:16:6e:ca:41:2d:1e:a2:
         60:c5:ce:14:9d:92:7f:f3:5f:1f:7d:1a:29:bb:3b:e6:de:b6:
         3d:c8:3b:fe:39:0f:fd:14:f2:79:54:df:e7:9a:a9:0b:95:92:
         d2:d7:ef:a2:40:17:ab:80:48:0a:54:44:10:9d:7d:df:e4:ea:
         c3:5d:0d:6f:b6:c9:e6:d6:83:8f:66:3a:8a:7a:0d:20:17:55:
         2f:be:a6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org