Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/3139302e3131322e3135362e302f32342d3234203d3e20323639373132.roa
File:                     3139302e3131322e3135362e302f32342d3234203d3e20323639373132.roa (raw, json)
Hash identifier:          0z3aPWCSrYFobzuQOXf78lSqBasmW72HpaKxULmFYxc=
Subject key identifier:   00:3D:97:2D:7E:E4:34:6E:23:23:29:42:3A:62:7D:1F:D1:82:33:69
Certificate issuer:       /CN=26D31A8C73C47EAB403D78A3D37CBA859CC99B69
Certificate serial:       14136E6BF5C5E1410B4ECEFD29C2540E9ADD9993
Authority key identifier: 26:D3:1A:8C:73:C4:7E:AB:40:3D:78:A3:D3:7C:BA:85:9C:C9:9B:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26D31A8C73C47EAB403D78A3D37CBA859CC99B69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/3139302e3131322e3135362e302f32342d3234203d3e20323639373132.roa
Signing time:             Wed 03 Apr 2024 18:44:29 +0000
ROA not before:           Wed 03 Apr 2024 18:39:29 +0000
ROA not after:            Wed 02 Apr 2025 18:44:29 +0000
asID:                     269712
IP address blocks:        190.112.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:13:6e:6b:f5:c5:e1:41:0b:4e:ce:fd:29:c2:54:0e:9a:dd:99:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26D31A8C73C47EAB403D78A3D37CBA859CC99B69
        Validity
            Not Before: Apr  3 18:39:29 2024 GMT
            Not After : Apr  2 18:44:29 2025 GMT
        Subject: CN=003D972D7EE4346E232329423A627D1FD1823369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:06:35:24:cd:1a:54:27:8a:c1:97:9d:b6:
                    54:a9:61:aa:4b:03:8f:b6:91:0d:d3:0f:9a:10:4f:
                    8a:0c:a3:fa:9a:91:4c:07:2c:82:43:b9:10:25:8a:
                    7c:f6:f7:1b:3a:12:36:d2:c5:5a:f8:8d:5c:f2:d4:
                    71:6d:df:cd:cf:34:30:a7:ca:e6:b0:8b:88:ce:20:
                    86:35:82:12:62:fb:70:5a:ff:6a:72:8b:c3:c5:6a:
                    27:0a:b2:a5:10:ac:66:e5:85:f6:06:f5:8b:9d:c0:
                    34:04:a7:05:f0:5e:51:98:06:8c:30:09:9b:8c:92:
                    cb:2b:a6:48:b8:90:f7:d9:40:74:f6:1d:2b:f2:c8:
                    66:ba:46:be:44:35:c9:19:16:1f:2a:05:fd:aa:61:
                    b8:4b:29:41:14:c8:72:17:4f:4b:c5:08:13:51:30:
                    6a:d8:2d:24:fd:70:dc:3e:f9:2d:3a:c2:9c:f2:1d:
                    d0:2a:da:6e:1b:98:a3:28:67:09:b8:97:b0:bd:da:
                    a9:9c:a4:34:ad:d4:48:e4:24:7f:50:01:20:19:9d:
                    ea:a6:fd:a1:a3:0f:94:b4:75:ef:19:27:08:79:98:
                    59:22:f0:32:6d:7a:5b:e9:8b:fa:c9:22:57:bc:1b:
                    5d:ec:5f:06:a6:e4:13:7b:d5:4e:cd:58:f6:13:4c:
                    35:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3D:97:2D:7E:E4:34:6E:23:23:29:42:3A:62:7D:1F:D1:82:33:69
            X509v3 Authority Key Identifier:
                keyid:26:D3:1A:8C:73:C4:7E:AB:40:3D:78:A3:D3:7C:BA:85:9C:C9:9B:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/26D31A8C73C47EAB403D78A3D37CBA859CC99B69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26D31A8C73C47EAB403D78A3D37CBA859CC99B69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/1/3139302e3131322e3135362e302f32342d3234203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:8d:3c:3a:eb:66:96:11:34:31:98:46:bb:1b:c9:f9:0d:e8:
         13:2a:36:82:a2:1a:25:31:2b:0c:41:df:f3:b7:c4:71:83:1b:
         76:d6:6e:d4:34:b9:9d:ad:b6:85:a1:e0:10:61:1f:81:68:41:
         ae:b2:b1:6f:fe:a0:a7:0f:d3:22:6b:25:41:4b:4b:71:a8:96:
         93:45:ea:0c:08:c6:ef:2e:d1:59:00:7f:21:46:2f:bf:f9:af:
         f4:8d:33:56:71:82:45:9e:df:ed:07:cf:9a:32:c6:b5:34:d7:
         0f:ad:87:56:6b:db:be:9a:5d:12:5c:83:dc:22:ff:f2:da:cc:
         54:0d:86:87:f5:28:e1:bf:75:2c:3b:ba:de:68:81:50:b7:39:
         ca:19:0f:10:78:bb:11:93:cc:56:00:2f:31:30:07:c5:17:a3:
         c1:29:a4:9a:75:49:df:98:ef:69:6c:fc:bf:06:4c:6b:55:f7:
         7f:a8:2f:7a:69:08:8e:4c:a5:03:6b:58:3b:bf:43:63:d5:fc:
         87:c4:1d:96:cb:b2:af:a1:18:3d:a6:0e:0a:73:fa:74:0e:dd:
         df:14:f2:b8:18:ef:54:a2:f8:47:03:75:f2:75:c3:c0:4d:20:
         ce:3e:82:de:33:17:79:6f:f8:5a:10:a5:6f:27:bd:af:c6:a8:
         54:29:48:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org