Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135372e302f32342d3234203d3e20323639373132.roa
File:                     3139302e3131322e3135372e302f32342d3234203d3e20323639373132.roa (raw, json)
Hash identifier:          1G4PTC+fZJHw3jGrp9bQ5Q8XgHXty2uDQ/QVEfFibB4=
Subject key identifier:   01:04:78:B5:B9:0D:85:8C:41:61:7C:92:E5:84:FC:A9:F7:B5:AD:AF
Certificate issuer:       /CN=9F6CAAB00E7B77388E82F39831FB778453932941
Certificate serial:       4D177EA8A278CF073F72102E4E2F3062DEDDECCF
Authority key identifier: 9F:6C:AA:B0:0E:7B:77:38:8E:82:F3:98:31:FB:77:84:53:93:29:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F6CAAB00E7B77388E82F39831FB778453932941.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135372e302f32342d3234203d3e20323639373132.roa
Signing time:             Mon 19 Feb 2024 18:20:31 +0000
ROA not before:           Mon 19 Feb 2024 18:15:31 +0000
ROA not after:            Mon 17 Feb 2025 18:20:31 +0000
asID:                     269712
IP address blocks:        190.112.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:17:7e:a8:a2:78:cf:07:3f:72:10:2e:4e:2f:30:62:de:dd:ec:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F6CAAB00E7B77388E82F39831FB778453932941
        Validity
            Not Before: Feb 19 18:15:31 2024 GMT
            Not After : Feb 17 18:20:31 2025 GMT
        Subject: CN=010478B5B90D858C41617C92E584FCA9F7B5ADAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:1b:50:28:6d:ba:ed:fc:ae:03:48:15:d4:
                    c7:69:c0:f2:09:bb:90:90:32:5a:d9:cb:d8:23:7e:
                    e8:bf:19:10:81:47:ba:43:12:91:2b:63:00:62:da:
                    ea:59:8b:80:48:9c:4d:00:95:e5:2e:6a:d0:5c:7a:
                    c1:e5:e5:01:e8:81:40:ed:25:38:f3:d1:8c:25:1e:
                    72:b9:91:98:01:ba:9d:83:1a:0e:be:6a:d6:8f:2a:
                    2c:31:ac:40:ae:d8:f2:1c:34:be:3f:80:58:e3:1b:
                    80:44:49:d2:f2:19:b1:19:c4:0e:b9:5a:80:62:fd:
                    11:60:2b:43:f7:58:17:8a:a6:c9:9b:4a:b4:27:69:
                    1a:0a:45:e1:ae:e0:ef:ee:7c:49:6f:ab:72:08:e3:
                    9f:94:9d:5c:b9:1a:a2:be:a9:e8:83:e9:9a:87:2c:
                    a5:75:71:4a:89:43:0b:83:ee:ae:f4:0b:2b:a5:13:
                    ca:31:0c:64:f5:52:13:bf:0f:6b:ed:3c:76:c4:5f:
                    4c:c2:70:34:29:58:3b:99:d7:70:bb:63:56:d6:1f:
                    f2:7a:37:ee:17:60:ec:b7:2f:e3:9e:35:e4:2c:cb:
                    37:66:be:9a:2c:73:e5:7a:49:a3:0e:7e:30:bc:03:
                    73:db:79:56:92:1e:1c:0a:f2:ce:aa:15:65:cc:11:
                    6a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:04:78:B5:B9:0D:85:8C:41:61:7C:92:E5:84:FC:A9:F7:B5:AD:AF
            X509v3 Authority Key Identifier:
                keyid:9F:6C:AA:B0:0E:7B:77:38:8E:82:F3:98:31:FB:77:84:53:93:29:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9F6CAAB00E7B77388E82F39831FB778453932941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F6CAAB00E7B77388E82F39831FB778453932941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135372e302f32342d3234203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:af:25:2d:fe:e6:62:ea:6a:0f:49:ac:b1:d2:db:d1:ed:01:
         7c:37:df:aa:cb:18:f7:33:4a:6a:8f:c5:20:56:5d:45:35:52:
         4c:03:39:b8:df:2d:cd:00:e8:27:db:59:07:71:cf:8f:b7:58:
         44:af:e0:63:4c:0e:f1:b1:d8:06:6f:43:78:55:a2:9e:e9:b3:
         06:fe:07:a2:f0:6e:4c:9c:65:bf:49:37:13:2a:cf:62:17:fa:
         5a:98:80:29:f7:4b:d2:49:89:47:26:1d:1f:32:8e:af:59:00:
         48:8e:ca:f0:98:4f:9a:41:e6:4e:df:d1:a1:6f:7e:1b:c5:15:
         f2:25:67:67:f2:3c:e7:0b:d6:47:c7:4e:ac:d5:48:cd:0c:ab:
         2d:a2:19:b8:fd:da:cc:47:f1:0e:db:90:b4:ef:9b:0e:c9:f2:
         00:19:4b:2c:77:b5:93:7d:d8:d6:9c:c7:d5:82:46:04:e5:ba:
         a6:4a:97:74:b1:66:47:c1:bd:97:de:2b:0e:73:ff:35:01:a5:
         d7:dd:2d:9a:aa:ed:e2:42:d4:a7:ae:65:68:02:7c:5f:b8:34:
         48:f3:3b:4a:ad:c8:1f:a5:81:56:16:86:d7:a9:3e:61:73:b3:
         ca:aa:aa:d6:09:a1:35:f9:93:78:94:bd:63:b8:ad:0f:dc:a1:
         c4:0a:51:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org