Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/3139302e3131312e3130332e302f32342d3234203d3e20323730343036.roa
File:                     3139302e3131312e3130332e302f32342d3234203d3e20323730343036.roa (raw, json)
Hash identifier:          ciE7lO/9inW/KXpyYOC2G62PynTNgWIYqCEb13U6180=
Subject key identifier:   32:B8:4B:B2:93:B8:04:64:B2:81:B1:07:B8:D3:78:7C:AC:BD:C6:A2
Certificate issuer:       /CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
Certificate serial:       214852A44BD13AB6E9F7275673BE7F16DE6BB02F
Authority key identifier: 55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/3139302e3131312e3130332e302f32342d3234203d3e20323730343036.roa
Signing time:             Wed 03 Apr 2024 20:36:11 +0000
ROA not before:           Wed 03 Apr 2024 20:31:11 +0000
ROA not after:            Wed 02 Apr 2025 20:36:11 +0000
asID:                     270406
IP address blocks:        190.111.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:48:52:a4:4b:d1:3a:b6:e9:f7:27:56:73:be:7f:16:de:6b:b0:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
        Validity
            Not Before: Apr  3 20:31:11 2024 GMT
            Not After : Apr  2 20:36:11 2025 GMT
        Subject: CN=32B84BB293B80464B281B107B8D3787CACBDC6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:81:91:45:0c:52:6a:8d:8a:e8:8d:36:32:
                    03:39:2f:d6:6c:65:21:e8:fe:7b:fa:ad:89:94:d6:
                    3f:35:7b:ca:e3:31:a0:ce:b4:f9:a0:c8:9e:6b:09:
                    30:28:85:bc:cc:0c:19:9a:78:5b:d0:74:23:20:b5:
                    c0:c4:0c:4c:c4:00:fe:ec:a6:46:8f:e1:36:de:f2:
                    58:76:b1:06:d6:de:e0:fe:af:c9:e7:81:0a:81:35:
                    b5:71:ed:b0:d7:3f:17:0b:6f:b4:ae:0e:2b:c3:6c:
                    55:2e:e3:e0:ae:15:fe:11:8c:a1:59:dd:b0:04:e4:
                    1f:d6:bd:52:10:6e:ee:5d:a5:27:a4:42:b1:c0:0f:
                    ba:9e:7b:e8:83:ef:2e:ae:a3:b6:9e:f9:af:c3:6e:
                    9a:df:fe:71:43:14:19:71:94:3f:68:48:40:d1:f2:
                    04:e0:9d:d5:12:9a:44:e8:b7:18:86:c2:82:56:6d:
                    ba:bc:d2:e2:3b:b7:70:94:22:26:60:bc:b4:98:d4:
                    96:02:47:f9:ef:2c:d6:c1:61:56:9c:1b:8c:ad:50:
                    ca:c1:b8:f0:ab:fe:21:ef:01:f7:73:66:1e:1f:96:
                    c2:c0:5c:71:b1:dd:df:fc:5b:c2:20:c2:78:e8:b6:
                    17:ed:f6:81:6d:58:85:63:48:9e:0c:ef:0a:60:e0:
                    a7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B8:4B:B2:93:B8:04:64:B2:81:B1:07:B8:D3:78:7C:AC:BD:C6:A2
            X509v3 Authority Key Identifier:
                keyid:55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/3139302e3131312e3130332e302f32342d3234203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:de:72:7a:b3:1b:e6:4c:ff:1a:20:22:32:ab:b9:24:03:6e:
         34:4d:56:8c:7c:10:f9:60:f0:57:54:82:ee:2d:50:c8:6d:fa:
         d3:dd:1e:4f:15:69:6d:43:52:ad:28:da:90:67:50:85:bf:72:
         92:96:f8:b8:de:3f:21:f8:e2:9f:32:9d:5b:4b:03:b6:fe:d3:
         66:82:44:c0:9c:8c:db:a4:b6:44:67:56:ad:c8:9d:d2:90:88:
         0e:33:52:fa:a4:2f:55:fd:cf:f4:6f:91:04:24:ad:6c:8f:cd:
         b6:d7:05:b6:03:fc:3e:ba:eb:8f:23:3f:44:33:6f:1d:e4:04:
         71:d9:c7:1b:7b:9b:0d:92:a0:f8:6b:c6:bf:b8:ed:87:b8:2d:
         9b:4a:5a:ed:ef:c2:2a:66:fd:ad:3f:01:dd:00:01:2b:84:90:
         44:93:3b:c1:a7:f8:9c:57:c2:71:20:3f:80:ec:c1:e7:e0:47:
         fe:cc:9e:90:1d:b8:45:f6:75:f3:5a:0c:60:42:dc:a9:4f:68:
         70:c2:d8:10:52:92:a0:d6:f4:dd:60:a9:df:03:28:6c:79:d1:
         c9:d9:f0:ed:5c:cb:b3:c1:e6:89:a8:9a:f7:5f:96:00:d1:5a:
         00:20:3b:45:fe:f6:75:05:8a:44:bc:a9:00:6b:b5:90:b5:5a:
         60:34:fe:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org