Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/1/3139302e3137312e38342e302f32332d3233203d3e20323731323630.roa
File:                     3139302e3137312e38342e302f32332d3233203d3e20323731323630.roa (raw, json)
Hash identifier:          34phBrGEBee/8aF4rX+Bzmqe59+ZUoV2LkTDoq8Xz7I=
Subject key identifier:   65:8F:2A:57:76:6C:F6:CE:4C:79:8E:D3:D1:38:A1:28:7E:44:58:F4
Certificate issuer:       /CN=B71C93C16FDC0FE76F88D7DD7A8A0FCFEB9D7A35
Certificate serial:       5D23A2EA31DF3C48D0BF97DE13A8FC118FCB25A0
Authority key identifier: B7:1C:93:C1:6F:DC:0F:E7:6F:88:D7:DD:7A:8A:0F:CF:EB:9D:7A:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B71C93C16FDC0FE76F88D7DD7A8A0FCFEB9D7A35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/1/3139302e3137312e38342e302f32332d3233203d3e20323731323630.roa
Signing time:             Fri 15 Mar 2024 11:43:27 +0000
ROA not before:           Fri 15 Mar 2024 11:38:27 +0000
ROA not after:            Fri 14 Mar 2025 11:43:27 +0000
asID:                     271260
IP address blocks:        190.171.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:23:a2:ea:31:df:3c:48:d0:bf:97:de:13:a8:fc:11:8f:cb:25:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B71C93C16FDC0FE76F88D7DD7A8A0FCFEB9D7A35
        Validity
            Not Before: Mar 15 11:38:27 2024 GMT
            Not After : Mar 14 11:43:27 2025 GMT
        Subject: CN=658F2A57766CF6CE4C798ED3D138A1287E4458F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:54:4e:43:8b:cf:c2:4f:1c:fa:47:2f:a8:09:
                    b2:42:68:08:59:9f:2e:04:5e:29:b8:02:91:41:e8:
                    d6:08:d7:dc:31:8e:70:05:fc:bb:a1:14:8a:f1:82:
                    7d:12:dd:55:26:b5:7b:b8:aa:d5:6a:e3:ac:6f:20:
                    1e:67:a2:41:54:57:15:14:d7:96:d8:ab:6c:74:e7:
                    4b:6b:d4:c9:a7:c9:75:e7:67:e5:e9:5b:57:73:90:
                    68:bb:96:8a:d2:fa:54:fb:30:fd:57:23:37:17:e8:
                    77:44:62:d2:2e:fa:c9:c0:b5:ed:5c:c4:60:f5:cf:
                    df:f3:7e:95:03:d7:be:13:35:d2:c5:b8:a4:e0:b0:
                    f9:be:ac:91:aa:d6:46:5d:b3:7d:8a:b7:60:d5:ce:
                    c4:4c:08:6c:b9:8a:8d:c2:e1:11:93:a5:fb:e6:a6:
                    5e:1b:bf:9b:44:73:81:7e:8f:18:ae:b6:9e:db:a6:
                    92:6c:f0:4d:cb:03:c5:75:1e:7f:f5:d5:55:c9:01:
                    2c:16:84:6e:4d:b1:e0:5e:da:54:69:3c:d4:82:79:
                    d1:21:91:72:ff:b9:f4:b5:95:1a:3f:48:f0:25:e5:
                    3e:31:d1:b0:4a:d6:8a:41:33:31:a7:0b:e7:35:d7:
                    7a:a5:ad:29:b5:29:b9:64:49:f5:ac:7d:13:59:50:
                    28:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8F:2A:57:76:6C:F6:CE:4C:79:8E:D3:D1:38:A1:28:7E:44:58:F4
            X509v3 Authority Key Identifier:
                keyid:B7:1C:93:C1:6F:DC:0F:E7:6F:88:D7:DD:7A:8A:0F:CF:EB:9D:7A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/1/B71C93C16FDC0FE76F88D7DD7A8A0FCFEB9D7A35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B71C93C16FDC0FE76F88D7DD7A8A0FCFEB9D7A35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/1/3139302e3137312e38342e302f32332d3233203d3e20323731323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:e7:67:e0:32:81:90:aa:ae:a3:34:0c:fe:7f:31:d9:09:72:
         40:c0:e9:7c:45:e3:a0:fc:a1:0d:fa:04:8d:11:91:ec:ae:ac:
         8e:b2:fc:04:b9:9a:3b:86:4c:e7:5b:2e:89:fd:a3:1a:b2:cb:
         97:04:1b:56:ac:03:ec:f1:f5:e5:25:37:92:63:31:87:4a:96:
         69:4b:d5:ac:ec:6e:71:d1:0e:51:45:32:d9:17:f0:cb:ac:60:
         bc:98:82:1c:55:7e:b2:82:4b:7d:90:00:15:bf:fe:90:da:9f:
         0c:fc:e3:61:5a:28:81:50:a8:f1:58:fe:a7:11:fd:cd:e8:aa:
         24:5d:dd:ff:41:32:b4:fa:d6:67:e8:f6:53:ac:a1:e1:4b:4a:
         a2:1d:54:4d:2c:ae:ba:df:5a:d6:76:78:19:43:d1:8f:e2:17:
         21:31:9e:e8:ea:01:be:97:75:fc:5b:f8:00:3e:19:2e:e5:4e:
         2c:6a:7d:83:45:0d:d7:d7:a0:0c:a8:7e:17:b1:b1:6f:ce:b6:
         42:11:5a:71:95:ed:eb:90:f6:66:fd:fc:97:e2:fd:a6:86:0b:
         c8:a4:55:30:39:02:a9:1d:bd:14:52:c0:1b:9e:db:5d:d9:54:
         8d:e7:d4:cd:f7:42:d9:5c:48:e1:74:99:4a:a8:c5:2a:c5:76:
         db:cd:ea:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org