Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/3139302e3138342e3231392e302f32342d3234203d3e20323730393539.roa
File:                     3139302e3138342e3231392e302f32342d3234203d3e20323730393539.roa (raw, json)
Hash identifier:          jAHXSlL2EswLoRCC3ogEh119zgoAh4EH1vR7piGxjFc=
Subject key identifier:   1B:83:96:77:EC:6A:CF:2C:75:D8:27:1C:69:B0:EB:E2:3B:CD:15:AA
Certificate issuer:       /CN=87DFE1FA2E8610A76E6C36A3C1CBE32AE4012307
Certificate serial:       25C36F8B92BEBBC7E7B8DB6BBF2B82900A776CD1
Authority key identifier: 87:DF:E1:FA:2E:86:10:A7:6E:6C:36:A3:C1:CB:E3:2A:E4:01:23:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87DFE1FA2E8610A76E6C36A3C1CBE32AE4012307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/3139302e3138342e3231392e302f32342d3234203d3e20323730393539.roa
Signing time:             Wed 15 Mar 2023 08:48:31 +0000
ROA not before:           Wed 15 Mar 2023 08:43:31 +0000
ROA not after:            Wed 13 Mar 2024 08:48:31 +0000
asID:                     270959
IP address blocks:        190.184.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c3:6f:8b:92:be:bb:c7:e7:b8:db:6b:bf:2b:82:90:0a:77:6c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87DFE1FA2E8610A76E6C36A3C1CBE32AE4012307
        Validity
            Not Before: Mar 15 08:43:31 2023 GMT
            Not After : Mar 13 08:48:31 2024 GMT
        Subject: CN=1B839677EC6ACF2C75D8271C69B0EBE23BCD15AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:f3:b1:34:b3:8b:33:fe:eb:39:bb:1f:36:
                    fd:55:c4:c8:40:7c:ba:97:6b:d7:fc:7d:3f:89:57:
                    dd:80:23:d1:86:42:aa:26:ae:ad:05:dc:13:80:fc:
                    3d:21:30:96:3a:de:af:4c:98:dd:f7:50:5f:2d:00:
                    9c:0c:49:ac:13:82:62:b0:4d:45:c1:fb:d5:0c:76:
                    be:c0:c3:cf:c1:c2:eb:4f:e6:fb:0d:87:b3:e9:67:
                    c3:f6:13:d2:d6:a1:6b:69:fe:10:68:8c:cd:32:5f:
                    1d:8c:3a:d2:b5:3f:15:3b:f2:d4:f5:68:81:64:e6:
                    35:cf:5b:d3:05:eb:4c:57:c9:b5:27:a7:64:9c:94:
                    a3:e2:f6:bd:a8:27:48:c3:fd:68:4d:d2:c8:a9:b3:
                    aa:ec:bf:70:d4:ad:4d:3a:7e:e1:54:36:9d:3a:d8:
                    1e:26:ca:b9:64:40:2d:f6:df:65:ae:58:b7:fc:84:
                    b4:80:13:24:11:e3:8a:91:34:97:fe:75:6c:8e:fd:
                    b8:3e:72:67:b7:f6:5c:1d:ee:53:40:38:fe:39:c4:
                    0a:7f:17:4d:3b:01:15:c7:aa:f2:bf:55:b0:c9:58:
                    fb:7f:c6:ac:84:89:75:2c:66:bd:5c:b1:66:0a:a3:
                    57:0e:2a:02:40:3e:97:3a:10:a4:24:21:a0:20:27:
                    37:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:83:96:77:EC:6A:CF:2C:75:D8:27:1C:69:B0:EB:E2:3B:CD:15:AA
            X509v3 Authority Key Identifier:
                keyid:87:DF:E1:FA:2E:86:10:A7:6E:6C:36:A3:C1:CB:E3:2A:E4:01:23:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/87DFE1FA2E8610A76E6C36A3C1CBE32AE4012307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87DFE1FA2E8610A76E6C36A3C1CBE32AE4012307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/3139302e3138342e3231392e302f32342d3234203d3e20323730393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:61:92:f3:83:8c:33:e3:74:48:3c:ce:ad:b4:4f:fc:10:76:
         a3:8f:31:39:73:df:46:e2:85:b2:65:f7:14:31:95:c7:6d:99:
         90:9d:32:3f:9f:5a:ca:9b:42:54:e0:a0:4e:09:4f:51:50:c0:
         aa:30:1a:b1:2b:74:27:94:f8:2a:41:e9:60:72:3a:f8:b5:11:
         a3:00:14:14:cc:cf:74:57:11:97:a3:c0:ae:b3:b4:2e:c2:b0:
         4d:16:10:f2:6e:72:6e:7b:9b:17:de:da:b8:88:43:6d:8c:58:
         01:a7:e1:f3:b6:ec:24:53:2e:f9:de:07:9d:28:4f:ca:2f:fd:
         a2:52:d8:8e:9b:99:66:62:dc:43:31:d8:6e:20:93:7e:67:e7:
         d9:4a:7c:bc:06:59:04:03:96:ab:dc:50:8c:35:22:6e:73:2f:
         64:03:cf:fe:fd:93:7c:e4:9f:c7:e7:0a:cf:09:33:54:57:59:
         ce:44:1c:10:4a:a3:ad:cd:b6:38:4e:e9:e4:2f:3e:94:ba:cc:
         34:23:04:7d:93:21:37:33:e6:b2:0e:5e:8c:11:ae:c7:b5:70:
         37:b9:90:41:22:37:19:92:f8:11:d3:eb:80:1b:22:6b:ac:1c:
         97:b7:f3:eb:9d:f9:c2:a5:38:0e:14:90:88:41:6a:10:7a:2a:
         71:22:58:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org