Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/3139302e3131352e3232332e302f32342d3234203d3e20323730383238.roa
File:                     3139302e3131352e3232332e302f32342d3234203d3e20323730383238.roa (raw, json)
Hash identifier:          5XVwJDRbE41shiZq2mXYP+cS2p4d16cpnHv+FtDO9ks=
Subject key identifier:   8F:AC:0F:2C:A8:C9:F2:91:8D:C9:EC:C5:1C:38:C4:59:72:21:6E:D1
Certificate issuer:       /CN=11A59D7FC58DD93FD839E36B666F0A5295F98E5F
Certificate serial:       1C9F6EEEC8B32DF3056A4A98C13130A3375617F9
Authority key identifier: 11:A5:9D:7F:C5:8D:D9:3F:D8:39:E3:6B:66:6F:0A:52:95:F9:8E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/3139302e3131352e3232332e302f32342d3234203d3e20323730383238.roa
Signing time:             Wed 03 Apr 2024 20:17:39 +0000
ROA not before:           Wed 03 Apr 2024 20:12:39 +0000
ROA not after:            Wed 02 Apr 2025 20:17:39 +0000
asID:                     270828
IP address blocks:        190.115.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9f:6e:ee:c8:b3:2d:f3:05:6a:4a:98:c1:31:30:a3:37:56:17:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A59D7FC58DD93FD839E36B666F0A5295F98E5F
        Validity
            Not Before: Apr  3 20:12:39 2024 GMT
            Not After : Apr  2 20:17:39 2025 GMT
        Subject: CN=8FAC0F2CA8C9F2918DC9ECC51C38C45972216ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:92:4a:fe:8b:75:df:cb:7c:06:82:6a:40:8d:
                    6a:93:2b:9a:c6:9b:34:86:ea:48:b4:60:53:11:d4:
                    be:e5:0d:ce:09:9b:08:6a:d3:2c:c5:84:39:20:95:
                    93:cb:f3:cd:57:3c:52:b6:9c:1e:d6:e6:f2:f6:ac:
                    51:99:5b:a0:32:94:f2:57:32:ed:ff:76:9e:17:24:
                    81:8e:1a:00:df:bf:ca:b2:f0:c0:93:90:28:32:96:
                    b9:0c:52:0f:1e:21:ed:41:55:14:be:f8:0b:b1:c1:
                    05:16:69:e9:7e:8d:83:86:a1:dc:c6:5d:b1:cd:c9:
                    8b:d7:c2:13:38:2a:c4:6c:ec:7e:b4:32:68:f5:e5:
                    96:1a:90:be:15:e7:cc:ba:7e:71:34:7a:83:9f:4a:
                    8f:57:5d:9c:dd:8c:d7:fb:65:bb:3f:f6:f9:f5:08:
                    1f:d9:fe:31:ae:cf:93:ec:8e:13:dd:be:d2:b6:41:
                    b3:63:ec:dc:c5:0d:65:03:99:65:28:0d:9c:00:87:
                    72:00:46:42:1e:cb:27:37:3a:0b:b2:57:2e:82:8e:
                    0b:d9:0d:3c:ef:35:97:68:94:e3:76:44:e1:24:6c:
                    c1:d4:a9:c7:0c:d5:d9:e7:10:57:dc:fd:f6:e4:62:
                    30:f9:1e:85:ed:5d:68:38:12:b1:29:10:c6:3e:40:
                    c0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AC:0F:2C:A8:C9:F2:91:8D:C9:EC:C5:1C:38:C4:59:72:21:6E:D1
            X509v3 Authority Key Identifier:
                keyid:11:A5:9D:7F:C5:8D:D9:3F:D8:39:E3:6B:66:6F:0A:52:95:F9:8E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/3139302e3131352e3232332e302f32342d3234203d3e20323730383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:0d:a9:4f:cc:aa:f5:ff:34:c3:97:cf:d3:cf:c4:ba:85:6a:
         e3:51:df:df:39:e9:53:24:2d:79:7b:60:3a:97:fd:6a:64:23:
         7c:d1:7e:e2:1f:6b:91:ee:01:45:3a:d0:86:71:17:3f:c7:38:
         96:b5:d6:08:ec:a9:6c:8f:a4:57:d9:f0:c4:74:df:c8:73:7d:
         ef:05:f0:2f:52:28:0f:65:c6:d3:b4:20:15:23:36:e1:7c:3e:
         5b:90:cd:7e:9b:90:72:cf:de:47:fa:da:5b:b5:ee:36:7d:6c:
         a2:c2:fc:6c:bc:99:fb:7c:6b:2b:7d:75:6f:bf:18:1a:cc:f9:
         9a:93:d7:8c:66:1e:9a:40:92:29:2d:41:af:63:40:f8:de:92:
         36:08:13:86:19:2f:e4:ae:c1:36:f4:3c:ea:ec:27:cf:3c:c5:
         fc:9a:80:e0:c0:69:04:49:b2:1d:f1:5b:5d:b7:a4:d7:be:34:
         e5:61:7e:81:d0:10:0a:3a:7c:91:b0:78:3b:2f:1f:50:4e:5c:
         f9:ef:f7:aa:83:e5:dc:7a:fe:75:6e:00:f8:4e:07:a0:7d:8f:
         b8:cf:bb:1f:9c:f2:92:d2:58:e4:e8:7d:45:a2:21:d6:41:0c:
         21:76:a7:3c:c5:fa:b1:fd:33:99:de:e7:a5:06:56:47:01:18:
         47:31:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org