Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/3139302e3131312e3130302e302f32322d3232203d3e20323730343036.roa
File:                     3139302e3131312e3130302e302f32322d3232203d3e20323730343036.roa (raw, json)
Hash identifier:          YPSwyJuA6H09jwL0PkvDrQhuw9yJXkUHGLGQppEUbGU=
Subject key identifier:   C5:E0:4E:41:5A:E5:2F:7A:62:20:6A:C1:D7:69:19:DA:81:AC:7E:39
Certificate issuer:       /CN=5FF0AF706C62B5250221CAAA58C63419A81F3472
Certificate serial:       7FB53583C68008670DF276678154DF952593E862
Authority key identifier: 5F:F0:AF:70:6C:62:B5:25:02:21:CA:AA:58:C6:34:19:A8:1F:34:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF0AF706C62B5250221CAAA58C63419A81F3472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/3139302e3131312e3130302e302f32322d3232203d3e20323730343036.roa
Signing time:             Wed 03 Apr 2024 20:36:10 +0000
ROA not before:           Wed 03 Apr 2024 20:31:10 +0000
ROA not after:            Wed 02 Apr 2025 20:36:10 +0000
asID:                     270406
IP address blocks:        190.111.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b5:35:83:c6:80:08:67:0d:f2:76:67:81:54:df:95:25:93:e8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF0AF706C62B5250221CAAA58C63419A81F3472
        Validity
            Not Before: Apr  3 20:31:10 2024 GMT
            Not After : Apr  2 20:36:10 2025 GMT
        Subject: CN=C5E04E415AE52F7A62206AC1D76919DA81AC7E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:32:54:e8:63:73:04:e8:4a:3e:33:9e:40:20:
                    78:b8:da:78:33:69:74:f7:be:5a:0c:fc:5b:4a:f5:
                    f0:be:5f:66:58:9a:39:5e:0c:e2:60:fd:94:c8:05:
                    da:d6:5d:0d:ba:6e:df:49:9b:35:eb:3f:52:02:7f:
                    c0:3b:d4:56:9a:b9:eb:67:5a:b0:49:38:4d:19:1b:
                    09:52:52:84:63:89:74:d6:f6:17:bc:72:70:e6:95:
                    ed:78:7d:0f:96:2e:da:46:de:52:77:1f:72:36:01:
                    9f:81:89:75:e9:98:7c:b8:65:c0:f8:78:61:ea:72:
                    8e:c5:70:37:b4:f9:7b:ac:3b:af:c5:c2:28:d7:38:
                    e1:06:e7:b8:1f:1d:79:96:41:5e:1e:59:bb:66:cd:
                    28:07:4e:8d:9f:d1:b7:39:ec:27:eb:99:80:3b:4b:
                    f1:03:c8:89:de:1f:35:29:12:18:c0:80:82:7d:a6:
                    3a:5b:7f:3d:59:e5:6e:39:2a:6f:98:63:d1:a8:10:
                    b1:48:5a:ba:d7:4e:6d:ab:26:f5:d2:0e:85:2c:49:
                    fe:de:35:51:e3:98:e5:2d:cb:4b:5a:dc:2a:bc:f4:
                    ec:6e:7a:88:b7:21:d5:eb:45:ba:66:05:47:6a:ee:
                    6d:24:8f:c4:92:46:34:7c:58:77:ce:15:2b:11:68:
                    ee:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E0:4E:41:5A:E5:2F:7A:62:20:6A:C1:D7:69:19:DA:81:AC:7E:39
            X509v3 Authority Key Identifier:
                keyid:5F:F0:AF:70:6C:62:B5:25:02:21:CA:AA:58:C6:34:19:A8:1F:34:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/5FF0AF706C62B5250221CAAA58C63419A81F3472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF0AF706C62B5250221CAAA58C63419A81F3472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/3139302e3131312e3130302e302f32322d3232203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:2f:b4:ff:0c:99:ba:90:8e:53:1d:dc:8b:84:f0:04:d3:ab:
         64:fe:bf:b6:9e:2e:fb:87:ed:89:25:8d:8a:8d:4d:84:c1:92:
         b9:ee:3e:ba:c3:b2:c7:aa:fe:cb:79:b7:a0:11:e5:39:c9:ea:
         76:29:4e:8b:3a:2c:0a:bb:b7:ef:aa:ee:7c:79:ab:d7:66:fc:
         c6:83:ba:f0:ec:41:aa:e1:93:df:3e:14:cf:37:a1:59:7d:a8:
         eb:13:25:be:ff:0c:0d:f3:96:4b:9f:8b:f2:b6:5e:4c:56:28:
         d6:9a:15:fa:b6:83:86:1c:8a:af:d5:6e:e0:a1:36:00:36:30:
         65:ca:d9:e6:25:55:d1:82:c3:da:b7:1a:5a:6e:15:f4:89:6e:
         1c:40:88:00:b0:85:55:95:6b:1f:5e:36:4a:b7:99:42:81:3b:
         e0:dd:5e:5b:c7:f0:4d:a5:cf:3d:e3:27:e0:63:84:5e:83:ad:
         c5:b6:8c:af:2b:15:56:f2:bb:bd:56:d5:3c:ce:dc:0f:80:51:
         6e:13:e5:ce:cb:9e:a6:f3:cf:be:b2:c6:ef:78:5a:06:d0:69:
         8e:27:7f:95:29:7a:25:a1:96:4c:e8:33:c1:e5:85:81:d8:b9:
         69:21:a7:70:32:02:77:dd:91:c2:a5:cc:6e:f9:a1:da:3a:27:
         c3:db:56:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org