Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/3139302e3131312e3130302e302f32322d3232203d3e20323730343036.roa
File:                     3139302e3131312e3130302e302f32322d3232203d3e20323730343036.roa (raw, json)
Hash identifier:          rivAO810chsgSyoDWfsXQo5ujFfqRrEMwLrcwq+dRtM=
Subject key identifier:   C0:7D:35:E1:0E:00:FD:AF:84:3B:78:E4:71:F3:12:D1:9A:11:8D:15
Certificate issuer:       /CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
Certificate serial:       515643DBCE03AB2D636169987112B7CAFA558E3A
Authority key identifier: 55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/3139302e3131312e3130302e302f32322d3232203d3e20323730343036.roa
Signing time:             Wed 03 Apr 2024 20:36:13 +0000
ROA not before:           Wed 03 Apr 2024 20:31:13 +0000
ROA not after:            Wed 02 Apr 2025 20:36:13 +0000
asID:                     270406
IP address blocks:        190.111.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:56:43:db:ce:03:ab:2d:63:61:69:98:71:12:b7:ca:fa:55:8e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
        Validity
            Not Before: Apr  3 20:31:13 2024 GMT
            Not After : Apr  2 20:36:13 2025 GMT
        Subject: CN=C07D35E10E00FDAF843B78E471F312D19A118D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:93:17:cd:ce:4e:0d:a9:b3:88:3d:82:d7:11:
                    38:55:58:75:75:32:80:ae:1f:80:22:40:a6:59:ad:
                    81:93:26:9d:bc:19:da:27:7a:3a:a1:d1:bb:42:c3:
                    e0:d2:b9:71:e7:78:bd:86:9c:db:21:65:95:11:11:
                    9d:50:24:b6:79:1b:db:0c:4e:74:64:c7:5d:52:94:
                    47:7d:9e:bf:85:58:63:e2:2d:e3:fb:bb:da:aa:87:
                    72:3a:cc:47:26:a2:d1:c5:00:cb:59:2b:2f:9b:74:
                    64:04:f4:b1:50:10:a1:86:04:ec:bc:ef:ef:83:a6:
                    8f:09:44:1b:aa:89:2e:ff:b5:19:2e:55:e0:48:62:
                    18:fd:2f:be:3c:3a:21:a9:28:ed:11:8c:b2:7f:28:
                    4b:e4:88:e8:8c:07:cc:fb:e5:a2:1e:89:5a:cd:c8:
                    f7:08:d4:90:4d:45:d5:b3:03:cf:bd:a9:a4:97:5e:
                    eb:2f:f3:fa:98:f7:42:14:86:86:5e:85:57:83:f2:
                    9f:c6:1d:9f:15:07:d6:1e:d2:ae:33:53:5d:d7:46:
                    56:f8:43:e1:5e:69:38:63:6b:52:2e:ac:40:bc:0e:
                    ec:1c:0c:5c:80:89:11:d9:a4:c9:4e:22:15:a0:1f:
                    39:30:72:63:74:eb:03:83:9a:b9:79:10:ec:d8:5d:
                    7e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7D:35:E1:0E:00:FD:AF:84:3B:78:E4:71:F3:12:D1:9A:11:8D:15
            X509v3 Authority Key Identifier:
                keyid:55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/3139302e3131312e3130302e302f32322d3232203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:32:98:bf:db:10:b0:79:58:24:f5:ef:55:f0:3c:44:b0:07:
         57:8e:c8:12:4e:35:26:8f:09:73:75:ad:f9:bb:7b:11:4d:71:
         4c:84:88:9a:ae:c8:c7:a7:b2:67:3a:aa:8a:18:e1:78:43:97:
         d5:69:13:1e:5a:20:b3:80:cb:64:9d:48:f6:a8:19:f2:c9:c0:
         e7:fc:f5:a1:9b:da:26:eb:42:06:04:5a:94:81:d3:4f:1d:a3:
         9a:81:a3:51:a7:25:90:77:a9:6f:5e:03:4c:c1:07:2a:52:87:
         d2:c6:1a:16:35:a4:ad:93:dc:db:29:33:3e:54:0b:ef:8c:2a:
         62:f9:71:d6:aa:73:24:c6:03:1d:dd:63:6a:49:a5:d7:b0:49:
         14:a4:8c:e9:d7:1a:c2:5b:a3:05:cc:61:9e:51:12:63:5c:bd:
         70:49:18:53:61:e3:52:d4:d0:2d:da:76:d5:b6:79:08:01:39:
         0a:04:2f:e3:12:6c:bd:31:b2:bb:95:77:22:4d:f8:4f:7a:6a:
         c6:65:bb:e7:92:17:79:a2:5a:5b:e6:cb:8a:9e:e5:04:3d:2a:
         98:69:ed:36:a1:9a:7d:73:86:b8:05:39:bf:18:7b:6b:f9:01:
         ed:fa:28:93:9c:8c:12:ed:7b:14:74:d5:b5:b4:50:3c:e1:8e:
         0a:24:5a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org