Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/3139302e3131352e3232302e302f32322d3232203d3e20323730383238.roa
File:                     3139302e3131352e3232302e302f32322d3232203d3e20323730383238.roa (raw, json)
Hash identifier:          HwJ/tEUtVZAro9d1dzN+auHUtJFDomoZUOhda3+R8Ao=
Subject key identifier:   1B:5A:65:0F:43:0E:E3:A7:1B:A8:B8:C3:F8:FC:25:69:1F:5F:B4:2A
Certificate issuer:       /CN=11A59D7FC58DD93FD839E36B666F0A5295F98E5F
Certificate serial:       421F37D31EDFE380F95FB95B58C2CAFFBE52AB0F
Authority key identifier: 11:A5:9D:7F:C5:8D:D9:3F:D8:39:E3:6B:66:6F:0A:52:95:F9:8E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/3139302e3131352e3232302e302f32322d3232203d3e20323730383238.roa
Signing time:             Wed 03 Apr 2024 20:17:39 +0000
ROA not before:           Wed 03 Apr 2024 20:12:39 +0000
ROA not after:            Wed 02 Apr 2025 20:17:39 +0000
asID:                     270828
IP address blocks:        190.115.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1f:37:d3:1e:df:e3:80:f9:5f:b9:5b:58:c2:ca:ff:be:52:ab:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A59D7FC58DD93FD839E36B666F0A5295F98E5F
        Validity
            Not Before: Apr  3 20:12:39 2024 GMT
            Not After : Apr  2 20:17:39 2025 GMT
        Subject: CN=1B5A650F430EE3A71BA8B8C3F8FC25691F5FB42A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:47:b4:d9:80:16:0d:7e:22:2c:42:23:2f:
                    c4:4a:12:72:f4:59:11:46:ec:e5:c1:67:50:bc:b5:
                    6f:ea:c4:3e:70:55:57:b6:43:b0:1b:be:b8:87:c4:
                    59:66:bb:e6:0e:b6:d3:39:14:53:54:44:bc:f7:25:
                    bb:cf:1b:26:94:0d:e5:f6:9b:8b:ee:3d:33:8f:16:
                    9b:72:01:a5:4b:19:46:7f:f8:4c:a7:2a:57:02:30:
                    df:f4:ac:0c:5b:1f:82:a6:33:00:08:50:00:39:59:
                    35:68:72:62:7a:90:31:dd:f6:e6:ca:04:34:25:23:
                    29:06:5e:c0:04:4f:cf:69:5a:df:f5:d5:f5:25:11:
                    20:ba:bd:e2:49:38:ef:0b:63:f0:54:1f:8c:6f:0d:
                    89:62:98:dc:7f:f4:88:d9:0e:87:4a:1f:82:aa:45:
                    b4:dd:91:ec:da:31:a3:cb:9a:1f:ac:9e:b4:d7:e1:
                    9c:2c:e4:02:47:9a:fb:15:6c:2d:12:67:6b:3b:0b:
                    27:80:7a:d4:8d:dd:e0:3e:3b:b1:97:7f:30:18:a7:
                    2c:e8:b4:ca:c9:a3:c1:27:f1:a8:e0:74:f5:37:21:
                    28:b7:3f:8f:12:95:d8:c8:f9:51:31:a6:81:37:f8:
                    3c:5a:89:ae:c5:e7:e4:6a:e0:9f:c7:95:67:34:34:
                    be:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5A:65:0F:43:0E:E3:A7:1B:A8:B8:C3:F8:FC:25:69:1F:5F:B4:2A
            X509v3 Authority Key Identifier:
                keyid:11:A5:9D:7F:C5:8D:D9:3F:D8:39:E3:6B:66:6F:0A:52:95:F9:8E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/3139302e3131352e3232302e302f32322d3232203d3e20323730383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:4b:09:9e:59:18:24:9b:e7:15:8b:e0:5c:46:47:0e:36:46:
         36:b8:1c:5a:44:a2:4b:55:d7:1d:2b:34:9d:dc:82:ae:d9:3b:
         cb:fd:2a:b1:c1:a1:2e:58:20:47:78:a4:db:01:82:a4:86:52:
         6e:c5:b3:f9:a0:27:e1:d4:a7:dd:b0:f8:f4:62:7a:ed:be:fa:
         4a:3b:0f:3d:b3:a7:20:5b:89:8e:6b:7f:ac:47:94:80:e6:08:
         96:8a:f8:aa:e2:25:83:72:42:2b:dc:b2:4a:d6:37:fd:39:21:
         e6:70:aa:38:33:91:b5:57:ed:e1:5e:cf:5c:20:de:6b:51:6d:
         0d:cd:17:52:89:61:55:3d:7f:9e:c0:5f:c7:7b:2a:53:d4:50:
         b0:1c:4b:73:29:e8:a1:21:e1:e8:9f:fa:5b:0c:3e:e6:2b:0c:
         6c:90:ba:6a:1a:0a:36:c4:38:4d:93:ab:44:bf:02:3a:23:52:
         6d:58:75:6c:09:99:23:ab:83:d6:33:92:78:8c:cf:c1:eb:c4:
         e2:68:6c:7b:1f:53:0a:e4:f9:4e:81:15:62:3f:ff:0e:b1:64:
         9d:ca:11:ed:b2:08:e3:cc:06:1d:d0:c1:b4:87:89:43:82:2b:
         5f:cb:14:4d:99:fb:5d:f9:ed:b7:7d:42:f5:16:d3:4c:fd:c4:
         70:03:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org