Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/3139302e3131352e3232302e302f32332d3233203d3e20323730383238.roa
File:                     3139302e3131352e3232302e302f32332d3233203d3e20323730383238.roa (raw, json)
Hash identifier:          Uq5xUywgnuUKXGyYd2Qr6BEs9bNZk0g+BJZiC8Nykjw=
Subject key identifier:   10:8E:5C:17:DD:D1:2D:0D:77:22:7B:20:9C:E4:B0:DF:44:6D:2B:73
Certificate issuer:       /CN=9524EE8472B5FC7B7954627809F56CFEB45E6323
Certificate serial:       13B49473616EA97BFEFA16F90E163BE218AE02A9
Authority key identifier: 95:24:EE:84:72:B5:FC:7B:79:54:62:78:09:F5:6C:FE:B4:5E:63:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/3139302e3131352e3232302e302f32332d3233203d3e20323730383238.roa
Signing time:             Wed 03 Apr 2024 20:17:57 +0000
ROA not before:           Wed 03 Apr 2024 20:12:57 +0000
ROA not after:            Wed 02 Apr 2025 20:17:57 +0000
asID:                     270828
IP address blocks:        190.115.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b4:94:73:61:6e:a9:7b:fe:fa:16:f9:0e:16:3b:e2:18:ae:02:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9524EE8472B5FC7B7954627809F56CFEB45E6323
        Validity
            Not Before: Apr  3 20:12:57 2024 GMT
            Not After : Apr  2 20:17:57 2025 GMT
        Subject: CN=108E5C17DDD12D0D77227B209CE4B0DF446D2B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:96:eb:44:32:71:2b:82:d1:f7:d7:68:52:
                    5d:d1:6f:19:b6:f6:0c:c4:a7:ae:d4:95:75:f1:d0:
                    90:3e:00:32:90:b9:03:85:37:92:4e:df:9f:6b:cb:
                    96:9b:79:18:fe:3a:f0:3a:d3:1f:aa:21:57:18:ab:
                    5f:67:00:9d:ed:34:3d:93:e8:72:c4:aa:25:6c:a5:
                    ef:07:f8:2f:0a:c8:42:74:86:cb:b1:88:6b:d2:f6:
                    9e:1f:24:73:0f:04:60:91:38:28:e6:02:16:cf:4d:
                    5f:04:40:af:30:39:d9:7e:43:84:4b:82:4d:52:9f:
                    26:39:42:c2:4a:6b:1f:6a:d9:c3:b4:48:b6:cc:16:
                    6b:ac:3a:62:56:68:c6:1b:66:f8:8c:23:87:34:24:
                    87:23:8d:83:85:17:19:33:92:55:fa:4d:fc:fb:6f:
                    da:84:b3:9b:ce:02:6b:b3:1d:5b:21:d5:86:59:29:
                    70:f3:21:8c:da:9d:35:70:5b:c9:c4:1c:7c:fe:79:
                    7b:c7:2a:2b:f1:df:9a:ee:d2:78:bc:40:07:e6:cd:
                    15:3b:41:82:bd:34:8a:1c:51:22:c9:00:f6:d7:f5:
                    8f:0e:62:95:e4:91:f5:2e:48:0f:4e:04:82:fe:64:
                    53:67:df:57:4b:f8:78:2f:75:4d:c9:ce:b1:01:99:
                    b0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8E:5C:17:DD:D1:2D:0D:77:22:7B:20:9C:E4:B0:DF:44:6D:2B:73
            X509v3 Authority Key Identifier:
                keyid:95:24:EE:84:72:B5:FC:7B:79:54:62:78:09:F5:6C:FE:B4:5E:63:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/3139302e3131352e3232302e302f32332d3233203d3e20323730383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:17:4a:b1:a6:a2:e5:02:f5:b1:9b:e1:4e:83:01:f0:da:18:
         91:ca:e0:f3:07:ff:4a:ab:73:11:40:dd:b4:c0:42:63:fc:06:
         5e:37:74:cf:67:8d:35:f1:7c:8b:a9:52:aa:86:ac:1a:e9:a2:
         2b:fb:2e:90:a6:f5:b5:2c:89:e5:48:39:1a:1e:21:4b:de:7c:
         b2:04:c1:02:44:87:a9:40:4d:90:d4:dd:8e:a0:f0:94:e9:98:
         66:e7:95:5d:cc:77:9d:33:a4:85:b9:98:ed:e7:d9:f4:1a:8a:
         11:1b:1d:f5:88:e0:c5:e5:35:f3:c1:af:e1:29:4d:40:63:9a:
         ed:2d:9c:48:30:84:ae:0d:3a:2a:c5:02:4d:75:7b:67:74:d6:
         e2:b9:d1:37:31:50:c1:69:39:6f:e1:77:c2:e0:45:cf:49:36:
         cc:53:35:41:11:3f:29:4a:fc:a7:28:c9:dd:98:9b:35:40:e2:
         d0:3e:e6:ae:80:84:41:36:75:59:f7:3b:17:3b:e7:3d:f3:6a:
         f5:25:09:d2:45:c3:b3:d1:a5:3c:ea:85:f4:36:97:33:03:4c:
         83:de:53:28:cd:bd:6d:0e:2e:28:7e:41:8b:e8:78:3a:b2:73:
         8c:cb:03:de:8e:dd:c7:59:fa:52:1c:f8:fd:e4:e7:43:04:bb:
         fa:06:01:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org