Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/3139302e3131312e3130322e302f32332d3233203d3e20323730343036.roa
File:                     3139302e3131312e3130322e302f32332d3233203d3e20323730343036.roa (raw, json)
Hash identifier:          SxkuQjYZjge8FUANTQysSaWlVbtwoBeO7GKaAMb5kro=
Subject key identifier:   F5:18:B8:0D:64:E2:8E:46:25:A1:6C:9E:B9:6E:01:68:6A:06:91:0A
Certificate issuer:       /CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
Certificate serial:       2CB04E3B6CFD12EB45E3EE349023BB99E26C55DA
Authority key identifier: 55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/3139302e3131312e3130322e302f32332d3233203d3e20323730343036.roa
Signing time:             Wed 03 Apr 2024 20:36:12 +0000
ROA not before:           Wed 03 Apr 2024 20:31:12 +0000
ROA not after:            Wed 02 Apr 2025 20:36:12 +0000
asID:                     270406
IP address blocks:        190.111.102.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b0:4e:3b:6c:fd:12:eb:45:e3:ee:34:90:23:bb:99:e2:6c:55:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
        Validity
            Not Before: Apr  3 20:31:12 2024 GMT
            Not After : Apr  2 20:36:12 2025 GMT
        Subject: CN=F518B80D64E28E4625A16C9EB96E01686A06910A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:e4:72:1a:a7:bb:cc:99:e7:54:73:20:e1:
                    8f:72:22:ca:90:b8:85:11:44:81:a6:fd:37:af:e8:
                    61:7d:61:76:59:3c:8d:9b:b7:a0:85:da:fc:0c:c4:
                    94:e0:0e:b8:2c:b6:8b:78:7b:a2:fb:21:aa:09:3d:
                    8e:bc:4e:ad:38:16:75:f2:93:d6:21:8b:eb:ec:84:
                    97:8f:8c:cc:14:ca:b2:1b:f0:a1:79:8e:6d:63:e2:
                    1e:6b:87:06:2a:53:67:cd:8b:0c:04:03:4c:aa:8d:
                    61:1a:d4:0d:61:2e:ab:7c:12:d3:7d:3f:ef:1a:76:
                    e1:40:57:b9:b8:12:86:2c:17:d5:d7:a0:e3:90:e8:
                    ef:0d:ef:07:85:3c:87:e5:b1:81:e1:e0:3a:64:a3:
                    df:6d:b1:75:1d:29:8a:8e:9a:f3:6c:05:dd:09:fb:
                    29:86:54:8d:b8:eb:bf:43:6f:9d:79:ad:f2:ae:04:
                    84:e7:fa:67:48:41:8b:7f:fe:2f:52:e9:8d:94:d7:
                    ec:bd:e6:57:70:e8:36:00:47:23:ae:62:da:b8:7e:
                    8d:b4:5f:d3:cc:63:0a:26:59:8d:8f:6d:ea:6f:e9:
                    06:a6:00:d6:86:0d:c9:fd:79:43:bc:b4:53:53:e8:
                    04:0d:f9:3c:39:dc:09:c8:fa:22:08:3c:2c:6d:35:
                    4a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:18:B8:0D:64:E2:8E:46:25:A1:6C:9E:B9:6E:01:68:6A:06:91:0A
            X509v3 Authority Key Identifier:
                keyid:55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/3139302e3131312e3130322e302f32332d3233203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:ec:3d:1a:d3:9a:dc:1f:fe:de:6e:19:33:99:f3:29:23:04:
         e0:2d:74:1b:c6:1a:ba:43:4c:f6:f6:49:2b:1a:20:3f:86:67:
         ca:53:6b:c1:93:11:41:2d:7a:32:01:83:2d:8b:57:2b:a7:fb:
         ad:0d:0c:d0:c9:b2:9c:f1:18:36:65:4c:0c:d0:b3:14:c5:81:
         08:16:73:18:5b:cf:57:c8:54:67:7a:9d:e8:19:7a:21:25:bc:
         a1:dd:fb:46:80:17:3c:36:4a:6a:d5:67:71:92:7a:3b:45:30:
         f5:57:c0:e4:e5:a6:93:4f:a1:72:74:36:82:e4:fe:54:ee:70:
         c7:60:4e:46:13:de:bd:8b:cc:b1:28:43:fa:22:d3:df:81:ad:
         8f:e8:86:dd:d7:9d:7f:0d:f3:84:78:30:40:b7:44:91:c8:bd:
         6a:fc:73:e9:d7:1a:d9:f7:db:0a:d2:9f:69:85:56:61:d4:8a:
         c9:10:e7:5d:98:55:55:54:07:00:7d:6b:2a:02:5c:b5:26:30:
         79:f3:83:5b:8b:b7:28:ca:08:6a:0b:91:5b:f1:b6:ea:43:3d:
         50:8c:01:d9:cc:0c:7e:57:90:92:23:3b:b6:c1:2d:b1:81:7c:
         6e:d4:23:52:a6:d9:e9:78:56:7c:04:0d:0f:48:fd:a8:1a:12:
         0b:ad:d4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org