Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231322e302f32322d3234203d3e20323730363533.roa
File:                     3139302e31312e3231322e302f32322d3234203d3e20323730363533.roa (raw, json)
Hash identifier:          geo+Y+i0mm2/5T+kESG6LCBuQ8JszvoZgJCgMN6itJ4=
Subject key identifier:   FF:4A:39:ED:76:67:8B:71:D0:B1:EA:58:24:D9:44:AC:A2:52:53:17
Certificate issuer:       /CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
Certificate serial:       2125C4711A7A2DA142C5A8912E26C9E2D49B9D74
Authority key identifier: 04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231322e302f32322d3234203d3e20323730363533.roa
Signing time:             Fri 23 Feb 2024 21:20:00 +0000
ROA not before:           Fri 23 Feb 2024 21:15:00 +0000
ROA not after:            Fri 21 Feb 2025 21:20:00 +0000
asID:                     270653
IP address blocks:        190.11.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:25:c4:71:1a:7a:2d:a1:42:c5:a8:91:2e:26:c9:e2:d4:9b:9d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
        Validity
            Not Before: Feb 23 21:15:00 2024 GMT
            Not After : Feb 21 21:20:00 2025 GMT
        Subject: CN=FF4A39ED76678B71D0B1EA5824D944ACA2525317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:8e:dd:da:b1:5a:ff:fc:15:db:f5:d3:a4:
                    f0:23:d7:a2:92:18:87:a9:1a:da:e7:94:67:da:71:
                    b8:14:11:bb:35:de:64:42:6e:f1:88:38:e9:dd:ee:
                    c3:0c:da:96:9e:42:27:d6:55:81:f2:fb:93:f0:fb:
                    a2:ff:a2:9e:0c:80:0f:83:6a:67:b9:53:ef:bd:cf:
                    2b:ea:2f:14:09:b1:81:a4:67:a1:6b:0c:2a:00:1e:
                    1a:57:ea:f2:e1:b2:43:20:cf:a4:ae:8c:49:02:73:
                    b4:7a:90:a0:c5:78:61:dc:22:76:4e:1b:39:01:c0:
                    06:df:eb:4e:78:17:3c:49:02:da:88:70:d8:02:bb:
                    af:de:8c:09:8c:3c:3e:7d:40:43:64:75:fb:a3:b9:
                    21:e6:80:ca:56:01:c2:b9:01:28:8b:f2:7b:32:84:
                    fa:cf:37:1c:1e:a2:4b:0f:9d:c7:a7:62:81:f3:7d:
                    31:09:d5:33:54:0b:e8:ed:1e:29:e5:7a:08:75:4e:
                    33:16:fb:cf:36:5c:66:2b:aa:8a:df:c2:41:3e:ec:
                    85:da:1d:0d:7d:30:74:b4:b0:bf:05:48:77:e2:85:
                    d3:e6:52:52:ca:ee:fe:7e:d9:f5:f2:bc:df:19:fa:
                    2c:dd:03:aa:c1:49:d0:cd:ab:46:de:d1:f1:2f:7f:
                    48:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4A:39:ED:76:67:8B:71:D0:B1:EA:58:24:D9:44:AC:A2:52:53:17
            X509v3 Authority Key Identifier:
                keyid:04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231322e302f32322d3234203d3e20323730363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:6f:e0:5b:b3:be:4d:69:e8:ae:a2:27:6f:ea:43:31:ed:83:
         78:f3:41:d6:3e:5a:b7:e5:43:ee:b2:ec:13:8b:ac:5d:7e:71:
         f8:2d:76:8e:63:7a:32:f6:02:7a:2b:b3:8b:69:0e:16:99:20:
         ca:2a:e0:7a:b1:29:8c:ab:3c:e8:45:ee:56:23:69:d8:ba:ac:
         f9:fa:8b:18:80:69:ad:1f:eb:f5:81:4f:d2:05:31:b2:08:f9:
         17:c6:66:f3:f8:7c:c9:9d:d2:5f:de:0f:20:0e:e5:a1:4a:02:
         19:7f:79:44:4c:3f:4e:16:46:03:d6:d3:1e:c4:c9:eb:09:9a:
         64:14:93:32:4c:e2:bb:86:0d:44:ec:b7:ef:36:aa:a7:7d:71:
         d1:bb:09:cf:92:ce:6a:e2:c3:ec:e3:41:3f:d9:11:fe:b7:ec:
         5b:24:05:7e:4b:7a:74:44:b2:60:c6:5c:e4:87:30:f5:6d:5d:
         01:09:54:44:55:8d:b3:bf:13:d4:eb:26:4e:0f:44:ad:52:04:
         fb:d9:54:a7:6c:13:e1:15:fb:aa:4b:9f:a5:2a:85:8c:22:79:
         d5:70:ca:38:2b:c1:48:e8:21:b4:d8:36:8b:34:37:1f:20:e1:
         4e:7d:3a:c6:1d:db:74:c7:cb:00:22:25:d2:5d:7d:13:fb:ee:
         69:2c:15:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org