Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231322e302f32322d3232203d3e20323730363533.roa
File:                     3139302e31312e3231322e302f32322d3232203d3e20323730363533.roa (raw, json)
Hash identifier:          UwKxoY0YSw3xv4wTU7uDIhq63gfEDCaC3qbuFO29TqM=
Subject key identifier:   58:05:09:24:C0:F2:29:8E:6B:FE:AB:49:A8:4C:FA:8B:0B:84:FB:6B
Certificate issuer:       /CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
Certificate serial:       21E76E21E2FA82D32E916A9F7C46E027FBB8FC40
Authority key identifier: 04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231322e302f32322d3232203d3e20323730363533.roa
Signing time:             Fri 19 May 2023 20:00:00 +0000
ROA not before:           Fri 19 May 2023 19:55:00 +0000
ROA not after:            Fri 17 May 2024 20:00:00 +0000
asID:                     270653
IP address blocks:        190.11.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e7:6e:21:e2:fa:82:d3:2e:91:6a:9f:7c:46:e0:27:fb:b8:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
        Validity
            Not Before: May 19 19:55:00 2023 GMT
            Not After : May 17 20:00:00 2024 GMT
        Subject: CN=58050924C0F2298E6BFEAB49A84CFA8B0B84FB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3a:6f:40:cc:4e:8d:16:13:55:14:1c:9e:2c:
                    10:5c:a5:98:aa:4e:66:34:f3:d4:3d:78:13:bb:2d:
                    7e:c1:29:3d:ca:c8:74:a5:1e:6d:31:b9:39:3a:23:
                    39:52:e0:6f:b9:db:c0:46:dc:d1:84:1f:72:e5:d1:
                    63:db:05:f9:aa:5f:08:f5:39:4e:6a:fa:84:d7:b2:
                    73:0b:f9:d4:ab:2b:b7:3c:24:c2:aa:25:f9:ae:96:
                    bb:c4:77:ec:68:e2:e0:a5:b7:a9:27:70:a5:67:45:
                    09:01:ea:5c:aa:45:35:a2:b5:0d:23:ad:d7:58:f2:
                    b8:01:58:ec:03:7f:dd:63:94:e9:3b:55:90:c9:f1:
                    c9:52:0d:4b:bf:56:79:f8:92:f0:b9:a7:86:67:d9:
                    0a:4c:a3:d2:42:e5:76:6b:ee:e8:30:0e:a8:cc:18:
                    32:f6:05:bc:07:86:e1:90:11:c2:c9:7f:69:c8:41:
                    31:1c:5d:db:52:71:f9:5a:bf:ae:e6:b9:b4:bd:fc:
                    98:5e:f4:4a:53:c7:21:2f:c6:ab:d4:e1:4a:dd:e3:
                    b7:90:f7:1e:59:99:a8:1c:0a:7d:14:c9:fd:3e:08:
                    af:0c:c6:e5:ba:05:a0:59:ca:d0:cc:96:04:9d:a6:
                    55:3a:a2:ba:49:ad:98:47:e7:5b:d9:76:6d:0d:4b:
                    55:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:05:09:24:C0:F2:29:8E:6B:FE:AB:49:A8:4C:FA:8B:0B:84:FB:6B
            X509v3 Authority Key Identifier:
                keyid:04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231322e302f32322d3232203d3e20323730363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:6c:8d:e7:25:0a:2a:2a:e8:75:5c:e1:2e:46:e6:18:19:73:
         b5:9c:9e:d6:41:bd:6f:8b:b4:27:27:35:c5:b2:35:81:cd:69:
         02:59:07:4f:68:08:36:b3:40:e7:6b:ff:04:56:f7:1f:c0:07:
         24:6d:48:e5:ce:32:69:ad:d6:75:84:85:a5:56:cc:96:1e:a1:
         72:f4:8e:84:af:a5:ea:f1:32:01:e8:0c:73:d2:3b:8b:f9:02:
         e3:db:a9:6f:74:95:c9:18:e9:2b:da:d5:4b:f3:4c:7c:ce:32:
         5d:b9:7b:10:96:25:c9:26:0e:56:94:00:d4:a3:1e:6b:8d:0e:
         fd:30:51:30:64:9b:30:3e:91:9c:79:52:0f:87:92:97:0e:45:
         d9:13:27:9f:09:9c:28:2e:99:53:1d:36:6d:e8:dd:2f:c1:ce:
         08:3e:98:10:7f:8f:02:ec:cc:17:c3:8e:eb:2d:1c:9a:30:3f:
         50:99:0e:ab:aa:86:11:00:9d:4f:37:5c:46:02:f0:5f:b6:40:
         12:4e:b3:1b:9a:be:49:22:2c:e0:66:1b:2f:07:c8:fc:14:75:
         fe:d6:73:c8:42:ce:c1:8b:c2:75:5c:c3:d5:44:fd:61:de:dc:
         92:30:b8:8d:b6:09:49:6b:6d:8a:1e:27:43:2f:5e:55:e9:67:
         2c:0d:30:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org