Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231322e302f32342d3234203d3e20323730363533.roa
File:                     3139302e31312e3231322e302f32342d3234203d3e20323730363533.roa (raw, json)
Hash identifier:          cSrJzszwwQJ8yQB+hAcXwMXncb6ddSN85NkQS9vt61Q=
Subject key identifier:   69:A0:4D:42:6C:2A:69:9E:5E:F8:56:39:E6:7A:E7:DA:F0:46:C6:0C
Certificate issuer:       /CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
Certificate serial:       4313AF347D33F20917D7BF39468EF467EA49340D
Authority key identifier: 04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231322e302f32342d3234203d3e20323730363533.roa
Signing time:             Fri 19 May 2023 20:00:00 +0000
ROA not before:           Fri 19 May 2023 19:55:00 +0000
ROA not after:            Fri 17 May 2024 20:00:00 +0000
asID:                     270653
IP address blocks:        190.11.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:13:af:34:7d:33:f2:09:17:d7:bf:39:46:8e:f4:67:ea:49:34:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
        Validity
            Not Before: May 19 19:55:00 2023 GMT
            Not After : May 17 20:00:00 2024 GMT
        Subject: CN=69A04D426C2A699E5EF85639E67AE7DAF046C60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:c4:e2:93:d5:b0:da:2b:20:d1:bd:1d:74:
                    c1:8d:fe:77:d1:b9:2b:0c:7f:a9:ec:54:5c:a2:08:
                    3f:b6:a9:fe:97:0e:08:25:27:03:f0:54:e0:5d:90:
                    b7:b7:8c:f0:51:d9:c6:85:a0:51:fc:df:54:99:21:
                    35:a2:af:71:98:0e:82:17:cd:fa:15:6d:12:95:99:
                    95:76:f1:15:50:4a:4e:3b:65:f8:cd:85:22:7a:c5:
                    06:c8:cb:f9:b9:8e:1b:c5:2c:f8:85:a4:75:4c:0c:
                    17:41:a1:ae:dc:f4:fa:ca:29:7c:c6:53:66:bb:4a:
                    c6:7a:d3:13:73:0c:2d:a1:d7:9d:87:41:21:1b:2c:
                    b7:d2:1e:67:3b:e6:a7:5d:31:5c:d5:98:cd:60:a8:
                    90:79:d7:19:df:74:39:fc:f2:e0:39:b2:11:c2:06:
                    02:6f:83:25:e0:b5:cb:3a:52:25:a3:0e:b0:c8:bc:
                    d3:5c:31:7a:e6:17:cb:12:63:d3:5b:e9:95:01:55:
                    3b:06:1d:8c:80:66:a4:cc:6d:50:f5:a8:34:a1:72:
                    8a:ba:f0:c6:c6:75:36:7d:c5:7b:91:e7:de:b6:bb:
                    ff:cd:39:83:53:20:10:49:35:23:ad:40:c0:aa:9d:
                    85:cb:fe:02:2e:28:76:30:b6:ac:ed:23:82:37:1d:
                    03:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A0:4D:42:6C:2A:69:9E:5E:F8:56:39:E6:7A:E7:DA:F0:46:C6:0C
            X509v3 Authority Key Identifier:
                keyid:04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231322e302f32342d3234203d3e20323730363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:40:2a:60:74:fd:90:74:d4:13:67:82:78:be:14:15:5a:4d:
         17:47:55:5e:9b:5b:1c:06:44:9c:ba:be:4f:dd:7a:59:24:34:
         be:1c:06:db:45:d1:5a:1c:84:4c:15:ba:6c:7c:8b:ce:c7:ad:
         0f:98:cd:07:29:7b:de:97:f8:55:05:33:96:30:40:d3:25:ba:
         e4:28:f8:23:ca:b8:cb:4d:59:98:03:d2:78:c8:46:d7:bf:c3:
         07:d1:a0:21:bd:95:44:15:1e:2e:96:53:aa:96:d0:0e:8d:47:
         b1:1b:7c:9f:48:c3:aa:fb:c2:cc:17:92:f4:e9:91:59:2b:50:
         6c:cd:52:c7:e6:98:89:b7:f8:4a:f4:48:71:da:6f:7f:1d:0a:
         8d:f5:cc:ab:9f:e8:ff:b3:4d:84:da:ae:29:10:26:db:f5:dd:
         2a:16:c3:e4:03:ed:7b:9b:3b:c3:51:74:b1:11:f3:42:e2:1a:
         a6:ef:b9:bd:68:71:72:f0:01:87:e7:31:1f:da:42:34:6a:d8:
         71:76:1b:b0:2f:05:ed:56:3b:4f:69:80:c5:27:de:43:24:86:
         cf:59:c2:e8:43:da:61:0d:dd:7a:a4:a5:fc:b9:c7:a1:03:b5:
         18:d0:6b:1d:ff:31:a2:8b:a0:11:d9:82:4d:60:8e:2d:6e:71:
         4c:8e:55:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org