Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231342e302f32332d3233203d3e20323730363533.roa
File:                     3139302e31312e3231342e302f32332d3233203d3e20323730363533.roa (raw, json)
Hash identifier:          IWQclx0cMIxt2bviyjOR85Zg1vuPLoJd+3+A/umCl8s=
Subject key identifier:   CD:2D:66:86:B3:57:07:59:62:FD:18:66:F1:B9:85:32:4F:05:ED:B8
Certificate issuer:       /CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
Certificate serial:       534CCA7AB04EDBCF5980873B1D7BBF58A6358325
Authority key identifier: 04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231342e302f32332d3233203d3e20323730363533.roa
Signing time:             Fri 19 May 2023 20:00:01 +0000
ROA not before:           Fri 19 May 2023 19:55:01 +0000
ROA not after:            Fri 17 May 2024 20:00:01 +0000
asID:                     270653
IP address blocks:        190.11.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4c:ca:7a:b0:4e:db:cf:59:80:87:3b:1d:7b:bf:58:a6:35:83:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
        Validity
            Not Before: May 19 19:55:01 2023 GMT
            Not After : May 17 20:00:01 2024 GMT
        Subject: CN=CD2D6686B357075962FD1866F1B985324F05EDB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6d:34:db:5f:22:42:71:b0:60:7c:0f:a2:62:
                    62:d8:27:4a:96:97:53:e4:61:f4:7f:f3:15:ea:f7:
                    c7:60:f9:17:c3:85:d4:8c:e6:c7:58:5f:c6:8f:c2:
                    1c:ee:2b:b2:89:01:b2:bf:71:d9:2d:77:26:cc:ab:
                    7f:5c:94:d3:a0:90:c4:03:d0:f6:4a:f3:07:9e:5f:
                    50:96:20:7b:38:8f:59:ea:61:9c:c7:e9:ca:a0:4b:
                    a5:06:76:20:58:9c:13:5f:76:06:63:6e:d5:a4:89:
                    88:48:f0:4b:86:da:a9:0f:49:fa:68:8d:1c:2a:f6:
                    19:ec:16:79:d8:24:8b:43:e2:e4:d6:7a:c2:aa:53:
                    81:f2:8a:8b:1e:46:be:44:57:d6:78:dc:ec:99:e7:
                    94:dc:f9:a9:04:6d:3c:ea:7c:a1:18:c6:55:b4:f5:
                    1d:52:ab:54:9d:41:ee:0d:51:ca:95:95:93:43:ac:
                    25:3a:28:ab:cc:40:aa:80:bd:7b:2f:f6:99:66:c8:
                    56:14:4d:29:47:a9:31:af:ce:1d:b2:7a:fd:5a:81:
                    6a:69:1b:68:51:bc:7c:a6:40:c2:96:48:af:f6:f1:
                    b0:6c:23:eb:39:fd:1f:7d:b6:27:22:f3:3a:91:f0:
                    33:5b:35:ad:13:2f:40:92:c0:10:3b:83:48:65:e8:
                    d5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2D:66:86:B3:57:07:59:62:FD:18:66:F1:B9:85:32:4F:05:ED:B8
            X509v3 Authority Key Identifier:
                keyid:04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/3139302e31312e3231342e302f32332d3233203d3e20323730363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:f3:6b:70:a1:f3:7a:37:c1:f7:1d:2a:05:b1:00:72:f8:c2:
         12:b5:ff:68:f2:5d:eb:4f:08:71:07:b5:48:42:94:91:56:73:
         21:32:05:55:c1:2c:c5:d7:1c:0d:90:f8:ea:2d:59:47:3a:f5:
         63:15:5c:f8:b7:b3:50:9c:73:6c:6e:44:82:6b:3a:5e:1d:d1:
         d7:2c:c5:f6:ff:f6:ce:cb:a3:c1:69:35:72:6c:8c:6d:58:56:
         f7:02:5b:ec:b3:22:e7:73:06:7f:29:88:54:33:70:54:4d:14:
         43:00:8a:54:75:42:7f:04:67:67:85:de:25:be:a0:e9:cf:f5:
         b3:ec:b4:4d:1c:b1:09:dd:38:32:80:6f:03:4f:a2:13:48:88:
         35:a6:09:4f:b1:d4:90:4c:fd:ce:46:34:5d:eb:aa:cd:d2:46:
         25:ec:31:e1:f3:9e:53:cc:05:ff:d7:0e:8a:14:7f:00:36:1b:
         7b:a9:95:04:d8:cb:21:7b:b8:29:cc:ff:44:20:99:4b:be:3c:
         d2:e1:a4:a8:ef:aa:01:83:9d:ad:74:7a:7d:6e:cf:98:38:60:
         35:89:38:9c:48:52:a9:39:69:fc:15:c3:9e:f4:8b:f4:d9:f8:
         f3:2e:ed:35:e7:df:ef:31:b4:fc:82:1d:2f:ed:1a:31:31:cf:
         18:1e:b0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org