Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/3139302e3131352e3232302e302f32342d3234203d3e20323730383238.roa
File:                     3139302e3131352e3232302e302f32342d3234203d3e20323730383238.roa (raw, json)
Hash identifier:          vjWLyHuAhQlB5NQJh9eC7YdDzOy5ihuMXSes27TawkU=
Subject key identifier:   74:50:19:66:0B:0B:8B:86:36:C9:E7:8D:36:6B:5E:83:DF:26:07:CF
Certificate issuer:       /CN=11A59D7FC58DD93FD839E36B666F0A5295F98E5F
Certificate serial:       04077CC2B9C8A326190EFD398D71114D5EF0C2F7
Authority key identifier: 11:A5:9D:7F:C5:8D:D9:3F:D8:39:E3:6B:66:6F:0A:52:95:F9:8E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/3139302e3131352e3232302e302f32342d3234203d3e20323730383238.roa
Signing time:             Wed 03 Apr 2024 20:17:39 +0000
ROA not before:           Wed 03 Apr 2024 20:12:39 +0000
ROA not after:            Wed 02 Apr 2025 20:17:39 +0000
asID:                     270828
IP address blocks:        190.115.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:07:7c:c2:b9:c8:a3:26:19:0e:fd:39:8d:71:11:4d:5e:f0:c2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A59D7FC58DD93FD839E36B666F0A5295F98E5F
        Validity
            Not Before: Apr  3 20:12:39 2024 GMT
            Not After : Apr  2 20:17:39 2025 GMT
        Subject: CN=745019660B0B8B8636C9E78D366B5E83DF2607CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:b6:e5:46:40:2b:3a:54:1f:2e:47:4b:f9:
                    ad:60:55:8d:02:91:39:09:97:51:b1:09:51:3d:ce:
                    a9:83:67:82:2f:be:48:27:d0:a5:23:16:31:c8:66:
                    25:3e:80:dc:64:8e:d6:cf:10:f9:55:ed:1d:b2:2a:
                    42:21:af:47:31:67:c2:14:d2:c6:a2:ad:c1:8a:39:
                    0c:b6:be:54:27:2b:58:80:c3:e6:38:55:31:e2:b4:
                    8b:c2:0b:8b:3e:8e:5b:74:25:0d:c0:ca:26:bf:8b:
                    8d:76:9e:84:b7:02:c4:68:ca:aa:ff:d9:3c:32:89:
                    c9:4f:32:b4:35:cc:2d:ab:06:cf:dd:68:17:fb:43:
                    49:af:91:aa:0c:c9:a5:69:65:68:c2:59:b0:a1:68:
                    ac:33:da:0f:7b:0d:0f:70:8f:23:18:f1:30:40:e0:
                    ee:02:1a:b3:bd:de:10:b4:aa:b9:bd:f9:75:e6:30:
                    4b:bf:f8:9a:72:b2:31:fd:a9:e0:9e:78:1f:79:ff:
                    fe:22:b7:58:2f:a6:66:92:53:74:0c:4b:27:89:79:
                    49:33:a1:a9:9e:a3:8e:77:99:35:5f:4c:a3:20:1b:
                    e6:7f:90:3d:04:dc:52:98:03:fe:6a:3c:78:f1:44:
                    e6:01:90:9b:e1:d5:83:77:b6:a6:55:5b:c2:c9:71:
                    3e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:50:19:66:0B:0B:8B:86:36:C9:E7:8D:36:6B:5E:83:DF:26:07:CF
            X509v3 Authority Key Identifier:
                keyid:11:A5:9D:7F:C5:8D:D9:3F:D8:39:E3:6B:66:6F:0A:52:95:F9:8E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/3139302e3131352e3232302e302f32342d3234203d3e20323730383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:b8:5c:5a:bf:08:8f:6a:03:d8:61:a1:38:fc:86:99:2f:3f:
         c9:f2:a6:67:82:54:ab:91:a3:cd:fb:2a:c5:0b:2c:7e:43:99:
         57:6b:c4:87:d0:f2:13:42:bf:5b:35:c7:2b:a2:16:e0:5c:61:
         28:81:d6:89:60:73:49:ab:bf:c7:c4:95:e5:25:2a:77:26:19:
         47:ae:fe:f9:45:08:30:e8:f4:9c:6e:58:16:8e:20:65:71:3b:
         b7:11:9f:b7:27:fa:82:11:13:fb:aa:9c:8e:63:62:f8:fd:37:
         6f:2e:10:3b:52:03:57:51:e3:99:30:c1:0c:93:f7:7a:74:67:
         1b:97:e7:68:4c:f0:58:f2:34:7b:dc:bf:69:2a:0c:44:28:3e:
         2a:09:6c:44:1a:41:f7:2f:4b:29:8d:b2:fe:0e:70:ff:6f:18:
         42:11:b2:67:42:9f:5b:43:2f:1b:b9:8a:bb:da:15:36:d3:f9:
         29:66:61:53:e0:43:70:58:2a:e3:6a:b9:b0:da:5c:9a:dd:b5:
         21:d4:96:40:d4:d1:c9:7b:9e:67:bc:99:c7:82:3a:20:b8:02:
         b6:56:0f:75:4f:55:1f:66:b5:2b:7b:58:03:2d:30:b3:25:e3:
         c6:39:46:01:8d:3f:14:3b:d7:1c:a8:c1:4b:8c:7a:1b:03:46:
         1a:38:88:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org