Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/3139302e3131352e3232302e302f32332d3233203d3e20323730383238.roa
File:                     3139302e3131352e3232302e302f32332d3233203d3e20323730383238.roa (raw, json)
Hash identifier:          AOjpcf3lO0bdhL8Wn6LRJ6LNNn/er2/3rw809WHnNRM=
Subject key identifier:   6E:B7:40:91:40:00:F1:19:50:71:C3:F9:B9:60:FF:A9:A7:0B:F3:15
Certificate issuer:       /CN=11A59D7FC58DD93FD839E36B666F0A5295F98E5F
Certificate serial:       6A84B64FC26846A9AE15DE797C8159E2F748FA3F
Authority key identifier: 11:A5:9D:7F:C5:8D:D9:3F:D8:39:E3:6B:66:6F:0A:52:95:F9:8E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/3139302e3131352e3232302e302f32332d3233203d3e20323730383238.roa
Signing time:             Wed 03 Apr 2024 20:17:39 +0000
ROA not before:           Wed 03 Apr 2024 20:12:39 +0000
ROA not after:            Wed 02 Apr 2025 20:17:39 +0000
asID:                     270828
IP address blocks:        190.115.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:84:b6:4f:c2:68:46:a9:ae:15:de:79:7c:81:59:e2:f7:48:fa:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A59D7FC58DD93FD839E36B666F0A5295F98E5F
        Validity
            Not Before: Apr  3 20:12:39 2024 GMT
            Not After : Apr  2 20:17:39 2025 GMT
        Subject: CN=6EB740914000F1195071C3F9B960FFA9A70BF315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:91:89:3e:a3:0e:73:d9:b9:22:9e:ff:94:7a:
                    77:8c:26:bf:1e:aa:15:70:90:4d:41:50:44:01:15:
                    b1:c3:79:ee:44:90:47:55:4e:7d:db:16:48:40:34:
                    8b:44:50:c8:d5:8e:4b:0a:10:ba:bc:b0:f1:f2:c7:
                    76:9f:7a:97:08:db:f3:05:1a:3f:82:b3:51:6c:74:
                    5b:77:64:f8:b5:69:d8:2b:92:6d:40:2e:5d:56:57:
                    0a:8e:99:05:ac:6c:41:cd:d9:84:c4:45:9b:dc:73:
                    50:f1:4f:f1:d7:cf:ec:a7:02:64:75:4e:64:0e:25:
                    e6:ea:e2:29:c5:1d:70:e6:28:47:e7:d1:f3:b1:0b:
                    c9:66:21:5e:49:f5:6b:2f:33:42:7b:bc:52:73:0f:
                    0f:87:61:8c:b3:f9:43:ff:82:23:af:6e:72:06:e6:
                    38:d3:30:26:81:6c:ba:06:35:5d:2c:8a:17:ff:89:
                    12:e8:1d:5b:dd:73:d1:fb:fb:a8:5f:42:81:88:54:
                    81:37:c9:a8:9e:83:e3:dd:f3:99:de:a0:1e:f6:6b:
                    a0:6f:dc:55:07:09:78:6c:08:72:a8:2f:62:19:3b:
                    40:d0:16:4e:cc:4a:40:81:6d:42:b7:d2:90:97:9d:
                    d8:1b:32:e5:51:92:77:1c:12:ba:59:15:e6:67:f6:
                    ec:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B7:40:91:40:00:F1:19:50:71:C3:F9:B9:60:FF:A9:A7:0B:F3:15
            X509v3 Authority Key Identifier:
                keyid:11:A5:9D:7F:C5:8D:D9:3F:D8:39:E3:6B:66:6F:0A:52:95:F9:8E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/3139302e3131352e3232302e302f32332d3233203d3e20323730383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:fc:38:32:0f:c0:fe:1a:38:46:79:ce:4e:7b:11:f1:26:b4:
         ca:91:7e:4a:a8:8e:76:c9:67:b1:f9:06:ca:92:87:9e:f7:16:
         7c:c1:22:fe:ac:96:22:07:e1:90:3a:33:ca:2d:78:bb:2c:8f:
         9e:a1:86:7c:d3:1c:2d:e6:06:d4:4b:6f:4e:27:e7:35:69:24:
         df:13:9e:79:09:20:a0:f4:6e:dc:89:e7:32:af:2c:ee:cb:f1:
         c9:aa:85:b2:a0:74:e6:df:eb:f1:24:26:08:96:f2:88:fe:93:
         28:0c:eb:a1:55:2e:b9:2e:22:22:e8:66:cb:35:7d:ba:16:4c:
         c2:c0:f2:d8:1d:fc:a2:61:49:25:43:38:4e:5c:67:4e:b7:c8:
         03:7f:30:da:5f:55:a8:1b:fa:8c:7d:a3:9f:21:b9:be:43:25:
         a4:47:82:2f:f5:66:8d:dc:b7:91:69:43:d6:4c:ad:b3:65:d5:
         fd:f0:ff:93:c3:ea:bf:84:e2:94:1e:2c:4e:f0:ff:ae:7f:5a:
         43:e4:be:12:97:5d:9f:10:54:c9:89:b3:a7:88:1b:0e:1b:9c:
         e3:c0:14:87:3c:63:43:41:f1:1c:ba:1d:c9:19:52:bc:ab:d5:
         d0:91:ef:c9:de:36:aa:51:37:83:71:d8:82:bb:3d:94:99:f2:
         de:49:c1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org