Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3131312e302f32342d3234203d3e20323730343137.roa
File:                     3139302e3131312e3131312e302f32342d3234203d3e20323730343137.roa (raw, json)
Hash identifier:          lItxg5paqHSqbl3qUt61T1MEY9Zu2Qt6CRNAzL5LCAY=
Subject key identifier:   8B:EF:84:E2:6D:49:C6:74:91:7C:61:DE:45:B8:D6:E3:3B:80:53:97
Certificate issuer:       /CN=310672B50EA040A5BA0DD2CCF119E1D0E71D1075
Certificate serial:       045313C0DDD204EA59EF26E3D60738A3BC9FC80F
Authority key identifier: 31:06:72:B5:0E:A0:40:A5:BA:0D:D2:CC:F1:19:E1:D0:E7:1D:10:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3131312e302f32342d3234203d3e20323730343137.roa
Signing time:             Wed 08 Nov 2023 21:19:52 +0000
ROA not before:           Wed 08 Nov 2023 21:14:52 +0000
ROA not after:            Wed 06 Nov 2024 21:19:52 +0000
asID:                     270417
IP address blocks:        190.111.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:53:13:c0:dd:d2:04:ea:59:ef:26:e3:d6:07:38:a3:bc:9f:c8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310672B50EA040A5BA0DD2CCF119E1D0E71D1075
        Validity
            Not Before: Nov  8 21:14:52 2023 GMT
            Not After : Nov  6 21:19:52 2024 GMT
        Subject: CN=8BEF84E26D49C674917C61DE45B8D6E33B805397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:cc:c5:7f:8b:8f:16:20:e9:8c:19:80:a3:
                    fa:a9:0d:70:f0:aa:53:ac:31:7b:64:a7:f1:91:f6:
                    d5:e8:4e:1e:de:4b:9e:fc:02:51:a5:e9:c9:ba:86:
                    91:bd:1b:e1:33:7d:e4:e5:62:37:33:9f:cc:69:d1:
                    7f:f4:80:b3:1d:3d:04:22:fb:7e:8d:7c:65:02:18:
                    2c:97:e9:fd:e4:b6:c9:af:37:8a:7a:8d:e8:5d:11:
                    d2:80:29:3b:08:30:71:fc:13:06:68:75:dd:b4:8d:
                    a9:08:41:ec:cd:c2:99:64:c3:68:f4:7f:38:35:3a:
                    f3:f2:37:f2:05:48:37:10:43:22:79:fe:67:a9:1d:
                    03:e4:a5:00:8e:e4:a2:e1:7e:0d:c3:26:dc:ef:2e:
                    77:84:32:a7:6e:c4:e1:69:c1:bb:73:51:63:cd:ee:
                    02:6c:c2:12:52:b0:16:f9:a9:e2:41:73:a1:cf:28:
                    6d:dd:b8:87:72:cb:76:c0:5a:75:1b:18:f6:73:98:
                    28:e9:93:9a:9b:42:f8:5c:07:e0:3f:f6:35:4c:22:
                    61:d1:c9:bf:04:b2:82:2a:43:d2:fd:8d:e0:cc:81:
                    84:92:19:97:48:24:ed:1b:a6:95:8f:68:29:6c:6d:
                    b9:59:fa:5d:61:9e:cc:ee:a0:dd:2c:3e:4d:dc:1d:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EF:84:E2:6D:49:C6:74:91:7C:61:DE:45:B8:D6:E3:3B:80:53:97
            X509v3 Authority Key Identifier:
                keyid:31:06:72:B5:0E:A0:40:A5:BA:0D:D2:CC:F1:19:E1:D0:E7:1D:10:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3131312e302f32342d3234203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ed:2b:36:79:fc:73:a2:f9:eb:43:7f:65:ef:68:65:e6:8c:
         b7:b1:a1:7c:a1:da:e0:1f:34:34:41:8b:6f:3d:a5:f9:2c:f4:
         1d:c5:af:4d:2a:64:8b:68:ac:0f:34:18:f1:14:77:6d:fb:4e:
         2f:96:0d:e4:88:80:70:ae:d7:48:8f:45:ef:61:96:2f:61:46:
         d4:9a:73:ef:32:d8:4d:7d:ad:16:c0:a4:b3:71:0f:51:72:8f:
         41:2c:68:cc:f7:aa:ba:6b:e5:ec:f2:85:0e:c8:3d:56:45:65:
         6b:34:bd:8f:0c:8c:e3:09:46:a8:71:6a:b8:74:66:43:3f:f2:
         e8:56:ec:82:c0:7f:3b:d5:5e:29:91:3f:f6:49:ba:89:94:70:
         d7:f6:84:e2:c3:21:f6:54:23:0b:81:38:92:ef:eb:77:b0:0f:
         70:0e:9b:53:64:38:68:11:39:9c:cf:fa:83:c1:04:0f:83:aa:
         db:ef:31:1e:93:d7:43:28:d5:8d:de:70:55:32:21:3f:7a:6c:
         21:25:01:53:4a:df:56:56:38:85:c6:4e:1e:28:f0:19:6a:f4:
         46:92:a4:08:8d:ed:48:76:a3:1d:5d:d0:50:f8:96:00:e9:76:
         99:67:7f:c8:c4:85:dc:86:93:06:30:e9:94:b7:07:85:23:ee:
         aa:75:00:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org