Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231332e302f32342d3234203d3e20323730363533.roa
File:                     3139302e31312e3231332e302f32342d3234203d3e20323730363533.roa (raw, json)
Hash identifier:          DwzzMbmNeW2WyaFyYenoHll73zwr1GX2t3n+02kMcz8=
Subject key identifier:   B0:E6:30:83:E9:27:67:7C:E3:2F:36:35:4B:B8:D9:94:29:05:30:8B
Certificate issuer:       /CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
Certificate serial:       4B827B44CC4181D2DB8504022ED666BC92340BFE
Authority key identifier: 04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231332e302f32342d3234203d3e20323730363533.roa
Signing time:             Fri 19 May 2023 20:00:01 +0000
ROA not before:           Fri 19 May 2023 19:55:01 +0000
ROA not after:            Fri 17 May 2024 20:00:01 +0000
asID:                     270653
IP address blocks:        190.11.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:82:7b:44:cc:41:81:d2:db:85:04:02:2e:d6:66:bc:92:34:0b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
        Validity
            Not Before: May 19 19:55:01 2023 GMT
            Not After : May 17 20:00:01 2024 GMT
        Subject: CN=B0E63083E927677CE32F36354BB8D9942905308B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:93:34:b9:f5:76:3a:ad:50:a5:1d:b8:3d:
                    74:0f:38:10:88:1f:01:e0:f8:38:6a:3a:f7:72:c0:
                    c0:da:d3:f9:2d:15:ee:e2:fa:08:26:46:e8:c0:bc:
                    33:f3:b4:b3:a0:c8:5c:95:58:ee:62:bd:5b:56:4e:
                    d5:ec:2b:25:ee:32:66:36:f7:be:91:95:3c:df:55:
                    13:ce:9e:b4:57:01:8d:61:f5:4b:46:c0:7c:e0:09:
                    f6:bd:14:f2:1c:1b:bd:6a:97:c5:a3:a5:0a:cc:c2:
                    93:e1:db:a3:a5:8b:c5:8d:51:bf:76:b6:59:7f:52:
                    da:76:82:e7:27:c5:e6:c3:da:84:20:e8:21:1a:59:
                    9f:73:65:d4:40:dd:b0:10:99:92:c5:74:fd:70:b9:
                    dd:87:bd:7f:23:49:ef:42:b3:61:54:eb:ca:af:38:
                    d0:be:a3:d5:10:56:64:9d:86:ef:5e:9b:cf:d3:e3:
                    61:dc:c1:0b:75:1d:84:ed:da:4e:cc:8f:21:ff:94:
                    5f:b6:9e:43:1f:1f:5b:11:a6:32:19:b3:c4:c9:66:
                    02:ef:b6:37:05:19:c6:29:1f:9e:c3:87:31:6d:49:
                    ff:a6:3a:8c:1d:6d:bd:46:c5:56:ee:db:2f:1b:08:
                    e4:51:4a:79:a3:6f:7d:aa:67:4e:eb:61:33:f7:17:
                    17:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E6:30:83:E9:27:67:7C:E3:2F:36:35:4B:B8:D9:94:29:05:30:8B
            X509v3 Authority Key Identifier:
                keyid:04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231332e302f32342d3234203d3e20323730363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:df:59:a0:d8:24:d3:3d:ea:18:24:51:c5:2f:c7:39:7b:e9:
         2d:f7:1d:c6:e3:53:28:3c:9a:8e:06:bc:38:aa:d8:de:cc:cf:
         0e:d1:0e:83:81:f5:b1:81:dc:74:ed:cf:fc:71:b3:40:e7:68:
         8c:83:3d:48:d9:ca:d8:91:fd:a9:d3:95:db:e2:23:b7:81:a2:
         b7:ed:5d:8a:44:39:83:42:aa:e6:13:7c:b0:37:88:b3:4c:58:
         bb:89:67:c6:86:4e:45:e5:0d:5b:df:95:df:88:f4:6d:a9:8f:
         8f:09:b0:e4:73:ba:db:66:8d:c7:6d:f0:0e:3b:a7:15:b6:5e:
         d6:35:ef:7f:64:6f:fc:e0:2b:80:3a:d3:33:45:df:ad:84:7d:
         f0:4b:65:cc:4e:3b:85:2c:97:86:62:a0:32:14:68:d6:95:6e:
         77:67:bf:ae:b8:43:29:ed:bc:1e:10:63:cc:ef:da:5e:69:93:
         a4:f5:01:d6:c0:ae:04:44:b9:eb:28:5d:c1:c3:d7:6c:4a:d8:
         7c:e1:45:27:9e:10:0a:17:c5:5b:78:58:53:98:0d:7f:77:aa:
         53:69:82:07:11:d2:e3:33:2d:09:90:4c:d5:95:f2:be:c4:f4:
         48:e8:12:3b:52:27:13:ab:82:4e:fe:52:e4:77:be:78:c8:a6:
         ac:e5:97:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org