Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3131302e302f32342d3234203d3e20323730343137.roa
File:                     3139302e3131312e3131302e302f32342d3234203d3e20323730343137.roa (raw, json)
Hash identifier:          JBslCY7TCwNQBotYhwvASLKppxZ9JtENAOQumoFcwmU=
Subject key identifier:   97:6D:5A:51:28:E7:85:7B:52:45:C4:06:61:88:96:19:74:03:4E:F2
Certificate issuer:       /CN=310672B50EA040A5BA0DD2CCF119E1D0E71D1075
Certificate serial:       34D3F76C202121EC70A910CA6D093D1EFA379A2A
Authority key identifier: 31:06:72:B5:0E:A0:40:A5:BA:0D:D2:CC:F1:19:E1:D0:E7:1D:10:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3131302e302f32342d3234203d3e20323730343137.roa
Signing time:             Tue 07 Nov 2023 18:19:22 +0000
ROA not before:           Tue 07 Nov 2023 18:14:22 +0000
ROA not after:            Tue 05 Nov 2024 18:19:22 +0000
asID:                     270417
IP address blocks:        190.111.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d3:f7:6c:20:21:21:ec:70:a9:10:ca:6d:09:3d:1e:fa:37:9a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310672B50EA040A5BA0DD2CCF119E1D0E71D1075
        Validity
            Not Before: Nov  7 18:14:22 2023 GMT
            Not After : Nov  5 18:19:22 2024 GMT
        Subject: CN=976D5A5128E7857B5245C4066188961974034EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:d0:e1:27:9e:23:af:fd:51:da:60:f9:2c:
                    b6:03:61:db:1b:cf:6e:11:4e:53:55:99:2d:bc:07:
                    e5:51:4e:85:f3:e2:f1:c8:9e:6f:e4:b0:73:81:c3:
                    72:19:94:b8:c4:ec:2b:df:cc:73:18:de:30:5d:12:
                    b7:87:22:64:00:da:48:2b:9b:0b:36:5a:11:75:91:
                    18:99:0a:2b:82:27:9b:da:82:b5:57:20:2d:bd:d1:
                    7c:6f:a7:50:f8:cd:b7:36:bb:38:22:24:a9:c1:1c:
                    95:40:84:29:d1:86:1e:41:dc:4d:b1:4e:7c:33:57:
                    39:81:64:af:db:02:05:90:ff:bf:8b:c1:24:8b:31:
                    c7:a8:2a:41:e9:d5:33:fc:9e:43:d9:22:bc:40:c9:
                    01:6b:d6:fb:bc:f9:a3:3b:26:cf:98:24:07:f3:b5:
                    25:d7:fe:5a:c5:ff:6f:58:98:11:fe:38:00:33:1f:
                    8d:3b:23:d0:30:a3:23:a1:00:69:68:be:e7:a6:9e:
                    73:75:38:22:1b:14:92:76:f2:e1:97:26:d7:2e:ef:
                    67:12:ff:0a:a9:ae:ab:4f:c1:88:16:45:7f:94:53:
                    16:32:01:f0:00:44:09:4a:3f:40:44:b3:cb:9f:51:
                    83:a1:a7:07:64:8a:f7:72:26:79:b8:56:29:f5:e4:
                    23:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6D:5A:51:28:E7:85:7B:52:45:C4:06:61:88:96:19:74:03:4E:F2
            X509v3 Authority Key Identifier:
                keyid:31:06:72:B5:0E:A0:40:A5:BA:0D:D2:CC:F1:19:E1:D0:E7:1D:10:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3131302e302f32342d3234203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ae:cc:9f:73:c0:75:a4:65:56:a7:2a:79:67:92:5c:71:d5:
         f0:31:65:f1:d7:b6:1a:db:44:e0:9d:58:ec:8b:c5:69:cd:f5:
         ec:0f:63:a5:2c:9d:af:b5:3a:32:a4:9f:9d:21:18:d6:5a:ea:
         16:1a:8c:4a:54:ff:e5:9d:6a:fa:6e:d1:94:4a:27:8c:78:ba:
         6a:59:8a:48:ba:9c:12:3c:dc:40:73:0c:6c:23:21:0b:5d:be:
         81:d2:22:b1:46:86:55:40:da:d3:cf:a7:ed:e1:63:55:9f:eb:
         1e:a1:cf:cc:ae:25:44:9b:dd:4d:e2:f4:ac:67:46:a4:55:c8:
         d6:9a:d7:fa:da:a3:94:70:dd:f8:ff:dc:be:ff:a0:da:1b:34:
         e6:11:5a:a2:1b:ad:77:75:d3:90:34:79:9f:e4:bb:83:32:76:
         63:d2:88:f5:1d:3e:d6:35:69:c0:e3:ba:72:36:ad:58:df:73:
         2c:08:cf:e0:49:c9:da:50:9e:fa:59:0a:cf:6e:19:72:3e:06:
         9a:a6:5c:ea:65:7b:a4:a9:a3:bf:83:29:14:d6:80:ad:1e:a6:
         e5:3a:c4:76:51:5e:94:30:2f:37:79:88:2d:b5:5e:12:00:5c:
         61:1e:33:a4:44:b0:e0:0d:22:c4:dd:29:83:cc:4c:c8:6c:ab:
         d6:20:fe:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org