Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130362e302f32342d3234203d3e20323730353139.roa
File:                     32342e3135322e3130362e302f32342d3234203d3e20323730353139.roa (raw, json)
Hash identifier:          DoJOWrRl/TzuzVXHl7joP/YliIEmP/OHLdsCx01F0Js=
Subject key identifier:   9B:18:81:B9:C1:5F:09:F8:C3:55:85:EA:6E:F3:D3:32:BA:BD:A6:02
Certificate issuer:       /CN=C5947EE3BA954E287A1F49DF78F43E881DA0A1B8
Certificate serial:       2B8C7DD6A9BF48DAA6FDE452336E0816E9659E4B
Authority key identifier: C5:94:7E:E3:BA:95:4E:28:7A:1F:49:DF:78:F4:3E:88:1D:A0:A1:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130362e302f32342d3234203d3e20323730353139.roa
Signing time:             Wed 29 Nov 2023 19:52:39 +0000
ROA not before:           Wed 29 Nov 2023 19:47:39 +0000
ROA not after:            Wed 27 Nov 2024 19:52:39 +0000
asID:                     270519
IP address blocks:        24.152.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8c:7d:d6:a9:bf:48:da:a6:fd:e4:52:33:6e:08:16:e9:65:9e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5947EE3BA954E287A1F49DF78F43E881DA0A1B8
        Validity
            Not Before: Nov 29 19:47:39 2023 GMT
            Not After : Nov 27 19:52:39 2024 GMT
        Subject: CN=9B1881B9C15F09F8C35585EA6EF3D332BABDA602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:bb:52:07:e1:92:d4:b7:74:2d:a5:43:d9:
                    0c:01:c0:84:5f:6c:6b:06:75:ef:82:11:e3:a7:72:
                    11:47:54:1c:b8:75:dc:05:24:0d:e1:91:6b:b1:7a:
                    1d:39:2a:4d:f0:67:86:a5:90:e7:0d:e6:7b:0c:43:
                    24:fa:a5:86:61:fe:db:ff:d9:f0:3d:7a:cd:14:c8:
                    ba:a1:70:39:d8:32:0a:17:f5:bc:48:df:d4:e6:51:
                    32:30:15:42:d1:c8:8b:8c:d1:4b:54:c5:b1:99:29:
                    5d:6c:df:09:3f:d9:1c:6b:6d:95:fc:42:ba:48:95:
                    14:1e:ac:cc:28:15:9e:1e:57:aa:5e:2d:ab:16:9f:
                    93:5e:e3:8d:e6:ce:32:b2:65:64:7e:a9:39:ca:0a:
                    e8:07:c4:d4:1f:99:55:40:df:fd:0c:c9:3a:1f:f1:
                    6c:25:30:55:91:db:3d:31:9b:c3:86:e3:51:51:8e:
                    06:61:af:6f:90:c5:50:81:89:74:db:1f:c8:a8:dd:
                    7a:8c:3e:96:9c:c7:19:13:3b:59:23:1c:5c:b5:74:
                    ce:68:51:66:a4:10:89:fc:d1:eb:bf:4e:9a:3d:de:
                    af:de:44:16:6a:d9:ff:f9:1b:73:5d:74:67:d7:2b:
                    b1:c7:2c:33:71:44:cd:0e:5b:7d:3d:44:5c:ac:a7:
                    c5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:18:81:B9:C1:5F:09:F8:C3:55:85:EA:6E:F3:D3:32:BA:BD:A6:02
            X509v3 Authority Key Identifier:
                keyid:C5:94:7E:E3:BA:95:4E:28:7A:1F:49:DF:78:F4:3E:88:1D:A0:A1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130362e302f32342d3234203d3e20323730353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:13:34:e8:3d:5f:87:6b:d0:79:f3:e6:ad:78:37:96:29:13:
         97:74:da:ac:d6:c9:c8:3a:24:61:3c:3f:ad:12:10:a9:fe:50:
         06:e5:7a:ac:af:1e:30:01:34:d1:fc:d9:9c:bf:8b:f4:e2:a8:
         2d:a8:5a:aa:6c:18:b8:36:ff:dd:8e:48:ca:35:19:1f:65:45:
         bb:c4:bb:d3:b5:59:ba:54:c1:51:3b:df:c2:98:7d:76:66:f4:
         a2:ac:86:5b:71:9c:1f:24:b3:48:b5:2a:3d:0d:59:60:1f:9c:
         e8:d0:f5:05:8a:f2:4e:ae:55:56:dc:f0:98:e3:b7:50:84:67:
         0d:f6:e7:84:46:95:c1:b1:2e:93:3d:cb:7c:76:5b:3b:6d:37:
         ba:69:2d:53:5c:87:01:5a:44:4e:41:eb:89:9d:9f:22:a6:4b:
         c3:93:19:fb:88:2f:39:de:d3:9c:15:b2:86:50:c2:5c:33:8a:
         b2:eb:9a:41:37:88:6a:6d:bc:d4:52:67:ed:23:45:ce:00:df:
         0d:3b:5e:b6:5b:42:97:1e:12:f7:1c:d1:bc:ba:a6:ea:12:47:
         3c:ce:5e:ad:e6:b5:62:c7:63:42:82:b0:78:1d:d3:56:32:4b:
         f2:35:4f:4e:68:1f:8c:05:4a:99:9d:53:0c:db:31:57:74:18:
         aa:c0:91:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org