Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231322e302f32332d3233203d3e20323730363533.roa
File:                     3139302e31312e3231322e302f32332d3233203d3e20323730363533.roa (raw, json)
Hash identifier:          Hdf4DJLNwTkzUwOKE9LY0Bg08K1A5sWv/vdrGvsN2Ig=
Subject key identifier:   EB:54:82:B5:32:4C:98:B0:46:3C:9F:41:7C:26:15:2E:FA:88:9C:0B
Certificate issuer:       /CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
Certificate serial:       4DD4212F045FCAEFFDB0B381A241EE373919070B
Authority key identifier: 04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231322e302f32332d3233203d3e20323730363533.roa
Signing time:             Fri 19 May 2023 20:00:00 +0000
ROA not before:           Fri 19 May 2023 19:55:00 +0000
ROA not after:            Fri 17 May 2024 20:00:00 +0000
asID:                     270653
IP address blocks:        190.11.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d4:21:2f:04:5f:ca:ef:fd:b0:b3:81:a2:41:ee:37:39:19:07:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
        Validity
            Not Before: May 19 19:55:00 2023 GMT
            Not After : May 17 20:00:00 2024 GMT
        Subject: CN=EB5482B5324C98B0463C9F417C26152EFA889C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:97:c5:e5:1f:88:ed:2e:f2:64:31:aa:9c:40:
                    d1:e9:6d:ed:31:b3:72:14:d0:b2:ed:ec:d2:dd:95:
                    13:e2:6e:25:54:a4:d3:44:8b:4a:e7:ae:0b:7f:91:
                    60:54:16:cb:b5:67:13:be:56:7a:d3:26:6a:dc:f5:
                    ca:97:ab:40:fe:ea:df:60:6d:2e:da:fb:4f:80:82:
                    db:05:d8:c3:4e:13:ae:8e:16:72:ba:2a:c1:29:c0:
                    ba:af:3b:99:75:dd:70:4f:29:a7:64:b8:2f:46:ce:
                    0a:91:67:2e:a4:59:15:42:45:5f:e7:1d:ef:8f:72:
                    ee:9a:9c:e1:e9:f5:b6:11:cf:d7:00:ae:e1:4a:75:
                    5c:66:08:f0:ac:88:a9:ce:f2:60:b2:ea:51:f5:31:
                    2c:fe:39:ed:b6:fa:e7:7e:7a:a2:31:1b:f3:18:66:
                    f9:f6:22:91:a1:15:e0:e1:52:f6:ee:e8:ce:99:34:
                    c6:3a:14:57:d6:4b:d2:56:3a:9d:95:03:ea:3b:bc:
                    e4:ae:99:7e:95:e2:45:86:cd:67:af:15:96:f3:96:
                    55:1d:ef:87:2b:10:f8:90:c8:43:cf:87:0c:59:f5:
                    92:d7:82:a7:fb:5a:c9:51:14:d1:96:78:aa:0e:8d:
                    0b:2d:5c:51:78:e3:16:bb:a8:a2:aa:71:7e:1b:7f:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:54:82:B5:32:4C:98:B0:46:3C:9F:41:7C:26:15:2E:FA:88:9C:0B
            X509v3 Authority Key Identifier:
                keyid:04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231322e302f32332d3233203d3e20323730363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:bf:e8:d5:53:3b:94:30:1c:0a:2c:8e:09:fa:99:5c:15:cb:
         6d:8a:7f:5d:e1:95:9e:dd:a6:ba:7b:c9:5e:47:da:42:d0:0c:
         38:a4:af:3e:80:d6:5f:fa:24:c4:21:9a:19:fe:18:88:31:3a:
         10:5c:38:98:dd:eb:4c:12:20:0f:f1:bc:08:9a:e9:1c:af:f7:
         10:58:15:45:2b:c2:21:29:e5:d3:6c:12:2d:d1:db:0a:0f:8e:
         2c:a1:55:49:1d:3d:6c:60:76:a4:7c:df:90:1a:55:07:e9:67:
         6d:eb:ca:33:77:ea:0f:d2:58:28:6f:3f:85:1e:e7:d2:ec:f7:
         40:22:10:d9:7b:49:80:94:2c:73:49:46:6a:5d:5b:b5:77:ac:
         24:4c:3a:e4:98:24:cb:2a:22:ea:d6:d5:0f:34:64:ec:ed:49:
         7a:b8:03:3a:4c:bc:c3:0e:e4:76:35:66:94:41:b9:15:06:42:
         fe:5b:79:94:cd:2d:d8:ef:3e:77:18:b0:9b:c4:4e:9e:29:ef:
         1a:38:d2:19:c6:56:8d:10:32:5a:ad:f3:94:2d:41:2e:7c:ef:
         17:f0:10:44:28:74:1a:7f:68:63:72:00:8c:9c:62:ff:91:aa:
         fc:e5:1b:aa:e0:32:28:77:85:5e:08:73:8b:d1:ef:f2:81:b4:
         62:85:8f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org