Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/3139302e3138342e3231362e302f32342d3234203d3e20323730393539.roa
File:                     3139302e3138342e3231362e302f32342d3234203d3e20323730393539.roa (raw, json)
Hash identifier:          w9qJ0egAVIvcL66/Iqliy0nyU0qNbdBT+Z8gzr5rloU=
Subject key identifier:   63:5B:98:F0:73:86:3E:D4:1D:53:CA:23:4C:FD:6E:C8:EC:7B:69:E2
Certificate issuer:       /CN=87DFE1FA2E8610A76E6C36A3C1CBE32AE4012307
Certificate serial:       2546DC03C4FA78F8DCE3AA9BFCCB5A7B572B6142
Authority key identifier: 87:DF:E1:FA:2E:86:10:A7:6E:6C:36:A3:C1:CB:E3:2A:E4:01:23:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87DFE1FA2E8610A76E6C36A3C1CBE32AE4012307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/3139302e3138342e3231362e302f32342d3234203d3e20323730393539.roa
Signing time:             Wed 15 Mar 2023 08:48:13 +0000
ROA not before:           Wed 15 Mar 2023 08:43:13 +0000
ROA not after:            Wed 13 Mar 2024 08:48:13 +0000
asID:                     270959
IP address blocks:        190.184.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:46:dc:03:c4:fa:78:f8:dc:e3:aa:9b:fc:cb:5a:7b:57:2b:61:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87DFE1FA2E8610A76E6C36A3C1CBE32AE4012307
        Validity
            Not Before: Mar 15 08:43:13 2023 GMT
            Not After : Mar 13 08:48:13 2024 GMT
        Subject: CN=635B98F073863ED41D53CA234CFD6EC8EC7B69E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:91:ec:c6:60:88:e5:58:0d:1b:b7:67:ad:
                    8d:68:a4:08:eb:de:55:5d:1a:ea:b5:8d:11:55:6e:
                    cf:d7:fe:6f:6c:f3:11:ac:f2:a6:e0:79:65:5d:62:
                    d9:6e:ec:3f:62:55:25:2a:75:33:2b:55:25:b3:b0:
                    60:2e:5e:1b:6d:fb:a8:24:56:51:8f:2f:28:01:5e:
                    fa:64:6a:fb:60:42:eb:f0:67:72:02:2e:a5:0e:da:
                    9d:62:18:57:64:44:e1:d9:b8:f2:0f:7a:b6:80:c8:
                    6b:a5:1e:cb:f4:9e:fa:59:ed:e6:c6:9f:71:ef:9a:
                    2c:f6:29:3b:d1:ff:ca:ee:8e:66:57:2c:1b:48:cc:
                    00:df:8b:9b:c4:09:91:97:15:40:6d:b6:fb:5b:f1:
                    60:d5:e8:58:15:3f:2c:48:67:bb:bf:d7:f4:37:ea:
                    91:f6:4b:90:10:af:9c:25:d2:bd:67:70:4a:73:e3:
                    57:30:a2:c5:d8:e2:56:6d:f1:57:11:7d:6d:5c:46:
                    b7:4a:ec:d1:82:40:1d:00:97:f7:f3:87:45:51:3f:
                    83:18:7b:18:66:cb:a9:c1:3a:61:5c:c7:07:9a:59:
                    e1:a6:a5:42:53:5c:1d:d5:4e:b2:b9:73:e2:32:c9:
                    7e:26:87:a3:6c:da:45:99:dc:60:bf:26:38:bb:5e:
                    6d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5B:98:F0:73:86:3E:D4:1D:53:CA:23:4C:FD:6E:C8:EC:7B:69:E2
            X509v3 Authority Key Identifier:
                keyid:87:DF:E1:FA:2E:86:10:A7:6E:6C:36:A3:C1:CB:E3:2A:E4:01:23:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/87DFE1FA2E8610A76E6C36A3C1CBE32AE4012307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87DFE1FA2E8610A76E6C36A3C1CBE32AE4012307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/3139302e3138342e3231362e302f32342d3234203d3e20323730393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:f9:7c:38:45:a9:a4:ca:95:cb:17:e4:03:6e:d1:bd:80:d3:
         9c:72:1b:87:2b:77:96:5e:a3:4b:15:3d:1f:09:d9:a9:29:3e:
         d7:64:d5:d5:15:3c:25:5b:80:88:1b:f4:dc:b2:23:f7:58:26:
         da:95:cf:6c:fa:12:90:9a:22:99:4d:47:a8:8d:39:c8:4a:e4:
         1b:f5:10:6e:bc:b0:0d:5f:2b:f2:f8:8d:70:b3:9a:22:e3:37:
         34:ee:fd:a3:51:d5:71:1e:88:9c:1a:75:2a:39:78:a2:b6:11:
         c4:4b:4d:b9:a6:1e:b2:af:5e:c7:36:53:ee:f8:ca:bc:ca:f4:
         58:e4:9a:de:61:09:db:f5:f3:91:ec:d9:33:0f:e2:f5:69:c1:
         a2:9b:d2:24:8f:d5:8b:6d:d0:4c:5c:3a:62:f8:70:64:b1:33:
         52:c7:1c:3f:bc:fc:47:58:54:d8:f7:d9:8c:94:8b:3a:df:30:
         ec:4b:75:1c:12:ab:55:bc:a5:65:95:69:7d:b3:17:38:b1:af:
         9d:3f:bc:0e:ae:fd:a2:d4:e7:d8:3e:b6:f4:34:30:63:5d:3c:
         5d:c7:6d:25:9a:7b:6e:dc:3b:e9:0e:d3:56:6a:63:fc:a9:7b:
         50:ef:f1:1c:78:f6:ac:61:c8:3b:10:c8:21:10:da:5e:c4:55:
         57:f0:d4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org