Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/3139302e3131352e3232312e302f32342d3234203d3e20323730383238.roa
File:                     3139302e3131352e3232312e302f32342d3234203d3e20323730383238.roa (raw, json)
Hash identifier:          fMG1jx3yZavJ7eUFX2yLnRNDAlw2lV1Rfm/M0Ob/8J0=
Subject key identifier:   3E:2D:35:F9:79:FB:8E:91:B1:EA:3B:8A:3B:E0:76:B2:26:59:76:67
Certificate issuer:       /CN=9524EE8472B5FC7B7954627809F56CFEB45E6323
Certificate serial:       700B202778DD52682A9CAC3BEF6C1FB1AD83488C
Authority key identifier: 95:24:EE:84:72:B5:FC:7B:79:54:62:78:09:F5:6C:FE:B4:5E:63:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/3139302e3131352e3232312e302f32342d3234203d3e20323730383238.roa
Signing time:             Wed 03 Apr 2024 20:17:56 +0000
ROA not before:           Wed 03 Apr 2024 20:12:56 +0000
ROA not after:            Wed 02 Apr 2025 20:17:56 +0000
asID:                     270828
IP address blocks:        190.115.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0b:20:27:78:dd:52:68:2a:9c:ac:3b:ef:6c:1f:b1:ad:83:48:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9524EE8472B5FC7B7954627809F56CFEB45E6323
        Validity
            Not Before: Apr  3 20:12:56 2024 GMT
            Not After : Apr  2 20:17:56 2025 GMT
        Subject: CN=3E2D35F979FB8E91B1EA3B8A3BE076B226597667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:d2:81:36:ab:0c:df:a9:c0:5c:e0:c3:b7:
                    27:43:59:77:91:8d:f9:36:92:c5:2c:d4:65:93:01:
                    95:c4:cc:bd:e2:1f:64:26:47:92:5f:22:ed:24:57:
                    f6:7f:30:89:90:56:28:c7:25:f9:1c:30:ed:ca:5f:
                    79:7d:01:bc:41:74:bc:88:55:ce:6e:43:4a:35:f7:
                    a5:2a:6f:e3:7a:e9:c6:13:8c:1f:71:d5:2c:1b:47:
                    fd:fc:1b:42:7e:e8:e8:ed:f0:71:4a:bd:a0:e1:cf:
                    61:73:d0:6d:89:7e:38:89:e5:57:3f:0d:4c:f5:19:
                    54:ac:c5:7c:07:ba:f8:90:da:58:74:b4:d1:24:e7:
                    f2:bb:fa:85:d8:7d:e5:d3:77:61:0b:68:c0:87:9e:
                    34:f4:25:e9:72:dc:78:66:85:b2:67:1b:af:64:7d:
                    5b:00:3e:ad:e9:47:f4:bc:c5:c4:1d:f0:fa:bd:24:
                    04:2a:a9:93:55:e1:0d:41:80:f8:40:9b:2b:ad:bf:
                    bd:e1:6e:72:76:e8:46:a6:75:ce:12:57:0a:a8:27:
                    44:99:7b:29:7a:b8:fb:20:15:3d:c0:7d:ea:2e:4f:
                    05:ea:11:52:46:3f:af:e0:89:9e:27:f7:6f:e1:bc:
                    89:0c:a3:b6:7c:9d:fa:95:46:da:d7:2b:09:a3:76:
                    97:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2D:35:F9:79:FB:8E:91:B1:EA:3B:8A:3B:E0:76:B2:26:59:76:67
            X509v3 Authority Key Identifier:
                keyid:95:24:EE:84:72:B5:FC:7B:79:54:62:78:09:F5:6C:FE:B4:5E:63:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/3139302e3131352e3232312e302f32342d3234203d3e20323730383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:45:c4:94:a2:36:a7:72:a0:0d:50:4a:a2:3d:c8:20:cb:89:
         cb:cf:24:7c:62:f2:50:9e:ff:bf:f4:03:73:85:61:43:0a:ae:
         60:6f:4b:6e:5e:2b:6e:14:6f:3d:1b:ab:21:f7:00:f4:f5:37:
         27:14:7a:d6:91:2f:40:bb:ed:7c:82:5b:a6:63:ee:1f:d2:ea:
         69:a2:2d:b3:04:fd:09:99:24:be:80:11:8c:54:0e:8f:fe:62:
         bf:b0:f9:69:3e:c1:86:c5:84:76:07:6f:db:49:df:1a:95:3f:
         44:c9:7a:0c:12:ff:ce:9f:e1:9e:17:36:90:31:18:23:d1:dc:
         9a:f9:44:fa:87:f6:4d:df:3d:d0:73:8c:d8:95:d1:fb:fa:ba:
         37:a7:9c:15:dc:2c:0f:c8:70:23:f7:f5:bb:13:9d:aa:79:68:
         3d:e4:d4:30:e4:81:8c:b1:04:b3:7c:46:17:9e:41:96:1e:4f:
         57:cb:d0:af:6c:70:79:a4:87:12:c0:ac:e5:32:aa:8d:c4:a1:
         fe:d9:b2:2b:3e:15:3f:19:a2:f8:4d:16:15:88:a7:0e:c2:da:
         24:f9:c6:0f:03:e0:46:a2:df:e1:14:27:bc:0e:62:68:c6:68:
         94:86:d0:65:85:8c:19:4e:7c:9a:cf:6f:db:04:17:ea:73:a1:
         d7:0b:29:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org