Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3130382e302f32342d3234203d3e20323730343137.roa
File:                     3139302e3131312e3130382e302f32342d3234203d3e20323730343137.roa (raw, json)
Hash identifier:          dvvbQTIBeOZdpYvo9D5CDMsk1rJf/1CEKv08KuxK3oQ=
Subject key identifier:   A9:8D:76:18:BB:79:E7:3D:57:88:94:E3:B2:D3:B8:F7:3E:79:EA:3A
Certificate issuer:       /CN=310672B50EA040A5BA0DD2CCF119E1D0E71D1075
Certificate serial:       432B371EDB501B699AB02EABC2952AA8F1F8F5B0
Authority key identifier: 31:06:72:B5:0E:A0:40:A5:BA:0D:D2:CC:F1:19:E1:D0:E7:1D:10:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3130382e302f32342d3234203d3e20323730343137.roa
Signing time:             Tue 07 Nov 2023 18:19:22 +0000
ROA not before:           Tue 07 Nov 2023 18:14:22 +0000
ROA not after:            Tue 05 Nov 2024 18:19:22 +0000
asID:                     270417
IP address blocks:        190.111.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:2b:37:1e:db:50:1b:69:9a:b0:2e:ab:c2:95:2a:a8:f1:f8:f5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310672B50EA040A5BA0DD2CCF119E1D0E71D1075
        Validity
            Not Before: Nov  7 18:14:22 2023 GMT
            Not After : Nov  5 18:19:22 2024 GMT
        Subject: CN=A98D7618BB79E73D578894E3B2D3B8F73E79EA3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cc:b6:5c:79:fb:e7:0e:74:36:fe:1e:3e:39:
                    d2:29:c6:6e:de:ca:88:19:d6:1f:bc:53:7a:54:62:
                    e0:16:46:63:b4:93:21:ce:29:e1:13:6f:c4:c3:1d:
                    ab:f4:d8:b0:9e:25:79:c3:2f:5b:df:55:a4:43:bd:
                    c8:51:d9:28:8b:4b:3c:eb:88:b0:02:4c:6e:2d:65:
                    d8:81:6f:39:2c:bd:52:d1:95:91:59:ca:f4:81:48:
                    cb:8a:5a:a5:4b:3f:09:2c:4e:bc:ae:91:fd:0b:58:
                    bb:b9:38:e1:24:e7:4d:2c:78:3b:cc:b0:52:f3:52:
                    31:a3:b8:1a:8a:60:46:ad:49:cf:de:a3:2b:f9:fd:
                    1e:da:23:ad:61:0a:80:e5:3b:4f:1d:52:b4:87:c7:
                    de:5b:e2:2d:ff:f6:4c:cc:c4:ce:3e:4a:41:a7:62:
                    ad:4b:86:e5:0b:a3:9c:78:20:28:6b:f2:ce:f4:8c:
                    f8:a4:9a:ed:5b:ca:76:b3:19:5a:41:6a:06:13:5a:
                    3f:fa:4f:24:e9:4f:6b:97:b2:c9:e1:8d:90:91:b0:
                    30:17:64:c7:c5:f2:77:47:a7:c1:27:56:cc:64:bb:
                    68:79:80:b1:65:44:7a:38:2f:6a:8c:07:a1:4b:7c:
                    43:8b:a2:0a:66:c7:e5:69:3a:1f:0f:47:ff:e1:5d:
                    38:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8D:76:18:BB:79:E7:3D:57:88:94:E3:B2:D3:B8:F7:3E:79:EA:3A
            X509v3 Authority Key Identifier:
                keyid:31:06:72:B5:0E:A0:40:A5:BA:0D:D2:CC:F1:19:E1:D0:E7:1D:10:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3130382e302f32342d3234203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:d0:19:4d:1a:8a:21:fb:46:ac:d0:19:a6:bc:6d:00:37:bc:
         ce:e8:d6:b9:f9:56:b6:2a:be:0f:bf:fb:ed:5a:3e:bb:0a:bd:
         af:a2:0d:66:e5:f2:ac:25:7c:0c:b8:4e:a5:52:31:e8:53:2f:
         1e:0d:2d:d1:b6:77:40:06:2e:a2:72:3f:74:44:a5:a8:23:47:
         ae:28:a3:3b:2a:bb:10:68:09:37:9f:1b:7f:02:9b:96:ca:8b:
         df:0b:c2:ed:8c:89:f6:28:73:c6:b8:bf:36:73:43:51:43:74:
         64:a3:c2:df:d1:2a:0b:51:22:e0:02:63:d6:03:ea:50:d1:ec:
         85:7a:9e:72:d1:bc:47:2a:62:a8:86:bb:19:38:55:c7:75:06:
         d1:6f:f5:0c:b9:7a:34:8a:95:c5:7d:97:8f:86:66:d0:eb:62:
         bc:ac:f0:d0:fe:61:5e:57:4f:ba:30:75:0c:bf:7f:95:40:05:
         0e:31:38:ec:80:e1:d7:55:4b:22:13:ad:3b:58:7c:b2:12:21:
         c3:59:53:ff:1b:af:31:4f:3f:8d:c3:03:37:6a:cb:a8:3e:0f:
         a4:71:1d:7a:f8:ec:cd:ed:c3:1d:ee:6b:9f:2b:ae:03:aa:5e:
         ef:76:fe:c2:97:d1:9b:2e:e8:55:a3:f3:58:28:97:c1:09:a6:
         c3:ff:42:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org