Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa
File:                     3139302e392e3130362e302f32332d3233203d3e20323731363037.roa (raw, json)
Hash identifier:          boVkv6gdVHB4wUwIs8sHCRm7LbAHqu3XQX606kUXPI4=
Subject key identifier:   73:9B:C2:2B:79:9B:F7:0B:A1:BE:1A:8B:3E:D6:67:40:06:B5:21:28
Certificate issuer:       /CN=0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D
Certificate serial:       1F84E89FA4D999461CE8B3DDCAEBFCB33236D585
Authority key identifier: 0F:BA:AE:57:3C:A8:C9:5B:A8:E1:A3:EF:36:4C:2A:02:1A:4F:D2:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa
Signing time:             Mon 18 Dec 2023 19:31:21 +0000
ROA not before:           Mon 18 Dec 2023 19:26:21 +0000
ROA not after:            Mon 16 Dec 2024 19:31:21 +0000
asID:                     271607
IP address blocks:        190.9.106.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:84:e8:9f:a4:d9:99:46:1c:e8:b3:dd:ca:eb:fc:b3:32:36:d5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D
        Validity
            Not Before: Dec 18 19:26:21 2023 GMT
            Not After : Dec 16 19:31:21 2024 GMT
        Subject: CN=739BC22B799BF70BA1BE1A8B3ED6674006B52128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:68:7a:39:33:d4:1c:3c:da:c8:d5:27:76:
                    b2:f6:1a:48:69:e3:03:4a:e6:3d:da:44:83:09:36:
                    d3:6e:6f:87:00:f1:9d:cb:8e:61:f8:a5:8f:ea:e1:
                    b2:0f:da:b3:b7:41:f9:ea:d4:8a:f2:cd:0f:8c:f9:
                    c3:00:2c:8f:b5:1c:70:c2:1e:c9:ab:4a:31:28:70:
                    d1:dd:a4:41:9e:f4:b9:f1:a1:a2:da:59:ca:1f:52:
                    69:63:52:d3:18:7b:49:d5:04:02:9b:23:9e:07:c7:
                    41:c8:ce:fa:c6:6a:8f:4c:dc:5b:d6:25:5b:be:e6:
                    7c:cf:aa:69:b4:25:58:b5:67:86:70:17:03:c1:08:
                    c7:e0:f3:78:04:69:08:14:cf:e5:a9:a2:87:a5:de:
                    23:ee:3b:59:b7:c0:a0:9e:79:55:76:ec:01:bf:e8:
                    41:09:01:08:2f:b6:70:bb:dc:25:82:be:b2:7a:98:
                    f5:0e:04:be:d7:73:d4:cf:5c:04:b3:75:67:63:0a:
                    c8:94:48:17:41:64:da:1f:69:b5:04:e0:8b:c9:5a:
                    8e:cf:da:36:b9:2f:75:84:b4:e7:f8:b4:25:2d:c1:
                    fe:6b:69:c8:8c:39:f8:07:9d:0e:86:b2:68:b9:18:
                    be:31:f6:76:84:c0:dc:10:c2:50:8c:12:87:61:18:
                    ea:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9B:C2:2B:79:9B:F7:0B:A1:BE:1A:8B:3E:D6:67:40:06:B5:21:28
            X509v3 Authority Key Identifier:
                keyid:0F:BA:AE:57:3C:A8:C9:5B:A8:E1:A3:EF:36:4C:2A:02:1A:4F:D2:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130362e302f32332d3233203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:78:ff:5b:97:5b:09:2b:13:f3:00:e6:71:2f:1d:8c:10:c1:
         db:a8:0b:96:45:98:bd:98:29:50:c9:d7:fd:18:f9:83:ce:bb:
         b7:8d:d9:4e:8e:62:1f:8d:d4:f0:f3:fe:fe:3e:62:8e:80:0c:
         f1:92:8c:6a:fc:ed:95:f1:15:00:ed:44:b1:73:b3:fb:80:f6:
         da:a3:4e:15:18:57:8b:90:15:69:9e:3d:19:e2:66:b1:ce:91:
         fa:59:77:2e:c2:59:d9:76:81:54:c4:72:b0:74:1d:64:9e:9a:
         cc:d9:7e:52:a4:09:2d:47:c9:df:d2:6d:3a:81:cc:12:37:d3:
         52:75:9f:78:09:7c:2f:61:57:dc:41:80:8e:76:9f:dc:9f:4e:
         1f:a0:df:e1:ca:7e:b4:49:04:fb:0c:b2:c4:8b:3f:c8:2f:51:
         c3:8f:b9:76:eb:f0:3f:1a:f2:82:dc:36:4c:a0:78:a6:a3:91:
         6c:99:24:0e:fe:b9:38:87:a2:18:29:0b:34:ab:5a:41:af:b0:
         d3:d5:97:a4:22:4c:25:25:01:7a:fd:c5:12:fe:9c:fc:a5:9e:
         7c:8b:1b:49:da:45:fd:3c:98:c8:fe:37:86:da:7d:86:7c:a3:
         64:b4:ea:34:a8:50:6a:30:f7:6e:0b:d1:02:ef:f0:8a:4d:c0:
         7f:81:ba:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org