Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/2/3139302e3131312e3133312e302f32342d3234203d3e20323730333832.roa
File:                     3139302e3131312e3133312e302f32342d3234203d3e20323730333832.roa (raw, json)
Hash identifier:          eBnIanWtkRTDSB8ELi9ptwn+rV61sJgEEe/z+ruD6yA=
Subject key identifier:   20:B0:C7:F9:3D:54:8C:9D:19:5A:B8:2E:1D:49:D3:0C:13:5B:92:98
Certificate issuer:       /CN=1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE
Certificate serial:       310C66CD0D1A43CA0C475632A9EA098DF16F9A4A
Authority key identifier: 1C:15:C3:9C:0C:AD:61:2E:A9:07:C3:6F:3F:AF:EC:6B:8A:78:CE:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/2/3139302e3131312e3133312e302f32342d3234203d3e20323730333832.roa
Signing time:             Wed 13 Sep 2023 21:36:42 +0000
ROA not before:           Wed 13 Sep 2023 21:31:42 +0000
ROA not after:            Wed 11 Sep 2024 21:36:42 +0000
asID:                     270382
IP address blocks:        190.111.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0c:66:cd:0d:1a:43:ca:0c:47:56:32:a9:ea:09:8d:f1:6f:9a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE
        Validity
            Not Before: Sep 13 21:31:42 2023 GMT
            Not After : Sep 11 21:36:42 2024 GMT
        Subject: CN=20B0C7F93D548C9D195AB82E1D49D30C135B9298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:e0:02:fd:1a:da:dd:a9:e6:df:61:aa:a8:
                    01:f8:23:a9:09:be:48:f8:a5:cd:66:78:34:8d:68:
                    79:9c:ea:b8:3e:10:ac:d2:66:3e:b9:1a:d6:33:58:
                    50:f6:eb:ec:e1:9a:e9:91:12:34:a8:14:83:85:46:
                    30:3e:92:bd:c2:22:3e:8f:13:56:b9:a5:f4:b0:e7:
                    d7:02:f9:ac:01:a2:96:27:46:6e:33:f4:60:a4:ac:
                    4d:29:ab:08:8d:33:ca:3b:e7:bc:72:d9:09:c9:d2:
                    3b:c1:59:14:9c:50:3f:fc:07:d8:fa:bc:59:7a:e5:
                    a6:60:39:14:97:23:55:60:78:aa:23:7b:43:a0:26:
                    b7:8b:7c:6b:ab:bc:0a:b3:59:48:a1:43:38:87:2b:
                    0a:23:53:5c:d8:00:91:ae:21:c3:b3:89:08:b6:a3:
                    bb:a9:44:99:90:fa:d0:e1:86:7d:f5:bf:1f:03:65:
                    06:80:1f:bb:f8:46:d0:d1:3e:fe:15:bf:6f:ba:fa:
                    44:a4:a8:c9:71:0a:cb:02:1c:af:ae:ba:c4:b4:a7:
                    ae:d4:6d:92:47:a6:c9:9f:0d:f2:a3:04:69:ae:cf:
                    8e:5d:d1:63:7c:a5:b3:e7:f0:7e:33:87:70:40:60:
                    1f:84:f7:6a:67:cb:63:5d:14:06:47:97:f0:bd:f3:
                    bd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B0:C7:F9:3D:54:8C:9D:19:5A:B8:2E:1D:49:D3:0C:13:5B:92:98
            X509v3 Authority Key Identifier:
                keyid:1C:15:C3:9C:0C:AD:61:2E:A9:07:C3:6F:3F:AF:EC:6B:8A:78:CE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/2/1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/2/3139302e3131312e3133312e302f32342d3234203d3e20323730333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:73:08:a4:28:ce:0a:f4:f8:12:6b:eb:db:8d:9a:8b:c9:ed:
         8d:73:7f:64:45:e8:a8:9d:eb:ed:9c:a8:95:ec:9d:54:2a:b8:
         be:1e:47:e0:00:84:ab:57:a3:d1:78:96:92:5e:a7:bd:e3:48:
         c4:d5:b8:0f:be:52:11:f2:14:2c:e5:b0:cf:7e:92:1b:d8:f8:
         a0:e0:e6:02:b6:30:45:65:02:76:ac:1d:95:af:82:6a:15:69:
         2e:f6:10:4c:c5:2c:e2:36:ff:e2:10:f1:ac:55:ef:dd:ec:3a:
         11:1a:49:08:6d:06:7a:61:39:d5:55:cb:ad:98:72:e7:f5:6e:
         d3:29:f9:af:ca:43:c4:a9:c2:19:db:84:01:f7:da:bc:78:1e:
         23:0b:43:dd:66:87:4f:a7:d9:17:16:89:0b:1c:ce:66:ea:84:
         bd:7e:a9:d4:aa:50:e8:30:df:d9:fc:63:84:17:15:60:6d:7a:
         03:04:4d:3a:dc:31:da:fa:42:82:94:6f:30:da:1e:01:16:89:
         49:a4:11:3e:c2:39:e2:9a:6e:8e:8a:a5:fa:ac:69:6c:0f:66:
         89:8a:17:87:a1:75:70:30:48:ce:74:49:d4:ea:18:a1:79:62:
         d7:64:85:a2:73:4b:35:6c:6b:d7:53:57:67:3a:96:ab:c1:64:
         01:72:37:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org