Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32322d3232203d3e20323731363037.roa
File:                     3139302e392e3130342e302f32322d3232203d3e20323731363037.roa (raw, json)
Hash identifier:          piyLeItpHtCjN2AwjpWY06Bg/fQkn3DBTmekhxo1YNw=
Subject key identifier:   FC:4A:58:DA:B9:84:0A:C0:5A:61:CA:4E:CC:CE:9E:C6:FC:DB:EF:AE
Certificate issuer:       /CN=0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D
Certificate serial:       5D52EE8F1AF783B6F11F0609A41D7CED5380305B
Authority key identifier: 0F:BA:AE:57:3C:A8:C9:5B:A8:E1:A3:EF:36:4C:2A:02:1A:4F:D2:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32322d3232203d3e20323731363037.roa
Signing time:             Mon 18 Dec 2023 19:31:21 +0000
ROA not before:           Mon 18 Dec 2023 19:26:21 +0000
ROA not after:            Mon 16 Dec 2024 19:31:21 +0000
asID:                     271607
IP address blocks:        190.9.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:52:ee:8f:1a:f7:83:b6:f1:1f:06:09:a4:1d:7c:ed:53:80:30:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D
        Validity
            Not Before: Dec 18 19:26:21 2023 GMT
            Not After : Dec 16 19:31:21 2024 GMT
        Subject: CN=FC4A58DAB9840AC05A61CA4ECCCE9EC6FCDBEFAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6f:ee:a9:01:a6:80:ba:b1:6d:24:32:3f:3b:
                    98:ab:92:75:c2:8d:b8:94:e0:d0:f1:ba:b0:32:19:
                    15:65:66:d9:e5:d8:f6:b1:d4:50:ec:79:02:f4:fa:
                    1a:1b:f2:94:ab:e0:ff:c1:51:19:27:09:bb:17:7a:
                    b2:b4:b8:bd:f2:4f:76:ca:e1:ef:77:54:94:95:5b:
                    d3:14:19:02:4b:b9:ee:28:ee:98:c0:95:2a:e7:b7:
                    7b:6c:fd:a7:cc:77:40:b5:e5:cd:0a:c3:56:a4:1b:
                    ee:4b:24:c8:d7:f5:a5:8a:42:1f:92:4f:6b:0e:84:
                    42:a0:0d:eb:12:72:96:eb:ca:c4:e6:e9:38:1d:73:
                    8c:d2:86:31:08:83:76:27:d0:e3:40:62:5e:15:48:
                    92:bd:49:e2:0c:91:93:3a:2f:44:bf:a2:82:dc:f2:
                    80:67:c0:8d:9d:eb:ea:20:cc:a6:86:6f:3a:da:1d:
                    b0:94:df:7b:e2:0f:24:a8:48:08:0b:38:e3:25:52:
                    f6:86:f1:e2:88:c0:9d:25:23:3f:97:b6:50:0a:67:
                    75:a5:14:4e:02:cf:e5:14:ba:f0:df:3f:f4:a3:59:
                    12:16:23:49:95:d5:2f:d1:04:66:ab:a5:f2:0a:15:
                    d2:82:69:cb:a1:8a:66:85:a3:6b:b7:0c:4d:9c:95:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4A:58:DA:B9:84:0A:C0:5A:61:CA:4E:CC:CE:9E:C6:FC:DB:EF:AE
            X509v3 Authority Key Identifier:
                keyid:0F:BA:AE:57:3C:A8:C9:5B:A8:E1:A3:EF:36:4C:2A:02:1A:4F:D2:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32322d3232203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:92:4e:51:7b:0a:c8:61:40:fb:f1:49:f7:46:f2:6c:23:a0:
         ca:dc:c6:58:97:fd:70:13:36:39:54:9d:74:c2:35:47:c1:63:
         8d:53:6a:8c:a2:40:d2:a9:b8:13:4a:c1:3c:bc:5f:88:b6:a1:
         14:c4:e0:f9:78:e4:75:c9:12:9e:e3:bf:ad:4f:82:3b:c8:1a:
         89:0c:38:93:26:7a:98:da:79:37:31:6b:20:0d:d4:5f:54:b2:
         a5:2a:62:82:9d:1f:56:8c:e0:42:25:33:f6:d3:e1:6c:5d:83:
         58:c9:43:35:3b:7c:f8:67:86:11:02:e9:75:bb:a7:35:12:db:
         f0:78:f4:ac:26:78:f4:d4:d9:f1:05:7e:03:19:a8:24:c7:02:
         d0:24:00:55:0b:68:2c:89:f5:c2:5b:86:5e:87:9e:1b:53:9f:
         f2:f9:de:cc:c3:bc:37:38:f8:e2:3f:ac:02:bd:f7:25:1f:5e:
         a0:e9:6b:75:39:20:9c:e9:9e:39:b1:46:3c:0e:5c:6d:c1:34:
         6d:06:7d:73:b4:12:1e:53:e8:59:67:dc:5f:15:36:05:6c:09:
         7c:16:ff:c1:69:7d:6b:24:2b:ca:bc:3f:24:b7:d3:60:e2:72:
         5d:c3:99:77:3d:19:a2:51:1e:8c:25:78:07:4d:cc:c7:58:d1:
         e8:d3:22:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org