Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/3139302e3131312e3130322e302f32332d3233203d3e20323730343036.roa
File:                     3139302e3131312e3130322e302f32332d3233203d3e20323730343036.roa (raw, json)
Hash identifier:          bNWdw9rnZo0Ijsf4NtffDvp7IH5YIx9vjzXHymmnT2M=
Subject key identifier:   71:26:AE:4C:99:74:6D:68:60:66:43:40:DA:FC:25:22:FA:14:9F:FF
Certificate issuer:       /CN=5FF0AF706C62B5250221CAAA58C63419A81F3472
Certificate serial:       73843793CD5206D3B32CB196275B9DFB8B5DFEB2
Authority key identifier: 5F:F0:AF:70:6C:62:B5:25:02:21:CA:AA:58:C6:34:19:A8:1F:34:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF0AF706C62B5250221CAAA58C63419A81F3472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/3139302e3131312e3130322e302f32332d3233203d3e20323730343036.roa
Signing time:             Wed 03 Apr 2024 20:36:08 +0000
ROA not before:           Wed 03 Apr 2024 20:31:08 +0000
ROA not after:            Wed 02 Apr 2025 20:36:08 +0000
asID:                     270406
IP address blocks:        190.111.102.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:84:37:93:cd:52:06:d3:b3:2c:b1:96:27:5b:9d:fb:8b:5d:fe:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF0AF706C62B5250221CAAA58C63419A81F3472
        Validity
            Not Before: Apr  3 20:31:08 2024 GMT
            Not After : Apr  2 20:36:08 2025 GMT
        Subject: CN=7126AE4C99746D6860664340DAFC2522FA149FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:04:4e:01:08:a5:4c:8c:83:f3:ce:90:62:c1:
                    11:f0:53:15:7a:93:1f:7f:f1:c0:51:90:eb:43:4a:
                    0c:12:fe:17:49:40:27:af:44:2a:54:55:68:95:f9:
                    3e:9e:98:34:e1:3b:0b:68:c6:98:67:cd:9a:29:3b:
                    e9:9f:af:6f:30:8e:0f:93:e2:c8:0a:a1:b5:30:83:
                    61:8c:7a:55:d3:98:8b:cd:c3:f9:67:6c:88:5d:0f:
                    e9:08:73:8f:ed:77:e0:9b:ed:0d:48:f0:bd:9c:c4:
                    e3:56:3b:b3:42:05:c9:8a:ef:c1:73:f6:3f:47:f4:
                    74:41:da:8e:80:a5:e7:bd:55:83:b4:e1:2a:f7:a3:
                    e0:5a:87:44:26:29:1f:43:8c:41:6e:e2:06:f2:66:
                    28:0f:5d:49:1f:94:48:55:b3:98:c2:7e:c5:29:7b:
                    67:10:a0:1c:a1:23:75:dd:ef:b1:9b:87:37:7c:83:
                    eb:c7:1f:c4:92:51:99:13:1a:bf:fc:33:3e:60:bc:
                    36:03:4e:84:c9:65:4f:21:ce:84:69:ef:57:e8:cd:
                    8c:2e:04:ec:9f:93:03:ce:71:97:e7:e1:65:5d:92:
                    5c:ea:ce:95:e5:19:14:20:21:0e:d0:53:a9:61:c2:
                    12:c8:90:6b:a9:c7:0c:fc:e9:88:d5:26:79:42:97:
                    76:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:26:AE:4C:99:74:6D:68:60:66:43:40:DA:FC:25:22:FA:14:9F:FF
            X509v3 Authority Key Identifier:
                keyid:5F:F0:AF:70:6C:62:B5:25:02:21:CA:AA:58:C6:34:19:A8:1F:34:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/5FF0AF706C62B5250221CAAA58C63419A81F3472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF0AF706C62B5250221CAAA58C63419A81F3472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/3139302e3131312e3130322e302f32332d3233203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:53:70:f4:bb:49:7b:ba:ac:77:ec:7f:3d:52:a2:69:1a:fc:
         87:15:9e:d4:61:cb:d8:fa:1c:c6:f9:7c:e4:2f:27:5a:67:e3:
         17:3e:2c:71:a7:8d:9f:00:f5:c8:cf:61:cb:c3:b7:b7:15:d9:
         f9:57:91:0d:1f:c0:bd:2f:a5:47:f1:fb:ee:98:93:3a:20:cc:
         d1:d4:16:c5:70:1d:60:2e:18:c3:ad:ff:a0:7a:6b:37:02:c6:
         46:ed:38:9e:aa:bb:6f:54:b6:4d:a1:7f:3e:7c:e1:6a:68:ef:
         7d:1d:2a:e3:7a:53:ee:e5:da:e4:e2:6a:bd:2f:39:88:26:2c:
         b0:87:82:66:22:6d:26:57:b9:5b:b9:7e:57:0f:65:ad:59:3e:
         25:e2:dd:38:85:17:d7:4c:27:14:e9:e2:73:e2:20:fe:df:4b:
         e9:4a:ba:d7:a8:d4:be:08:45:9e:e1:ce:a1:2a:fd:a0:23:16:
         43:e9:72:69:f8:d3:96:1b:c1:b7:e7:e9:55:8e:d4:44:1d:5a:
         7e:9b:c3:92:68:b1:c7:f8:ed:4b:2c:2f:12:ab:9d:23:fb:69:
         fe:16:fc:6e:42:3b:8f:87:cf:bc:61:d5:e8:7c:2b:a1:e3:d4:
         e2:ba:b6:bd:7e:a7:98:4f:06:6a:b4:44:32:ef:b2:bc:b0:21:
         09:2b:e0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org