Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/3139302e3131352e3232332e302f32342d3234203d3e20323730383238.roa
File:                     3139302e3131352e3232332e302f32342d3234203d3e20323730383238.roa (raw, json)
Hash identifier:          eWe++1Fz/2njsxV+pG0dTOYD+34AJtcBEVNDeOC7X4s=
Subject key identifier:   7E:41:AA:86:CE:61:A6:53:90:8E:ED:7E:07:90:E6:C7:6D:A3:A8:B6
Certificate issuer:       /CN=9524EE8472B5FC7B7954627809F56CFEB45E6323
Certificate serial:       0144C1CA0939007CA4FB8870A0BF172A2FA3C4FA
Authority key identifier: 95:24:EE:84:72:B5:FC:7B:79:54:62:78:09:F5:6C:FE:B4:5E:63:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/3139302e3131352e3232332e302f32342d3234203d3e20323730383238.roa
Signing time:             Wed 03 Apr 2024 20:17:56 +0000
ROA not before:           Wed 03 Apr 2024 20:12:56 +0000
ROA not after:            Wed 02 Apr 2025 20:17:56 +0000
asID:                     270828
IP address blocks:        190.115.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:44:c1:ca:09:39:00:7c:a4:fb:88:70:a0:bf:17:2a:2f:a3:c4:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9524EE8472B5FC7B7954627809F56CFEB45E6323
        Validity
            Not Before: Apr  3 20:12:56 2024 GMT
            Not After : Apr  2 20:17:56 2025 GMT
        Subject: CN=7E41AA86CE61A653908EED7E0790E6C76DA3A8B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8b:c4:01:d8:b2:9d:79:40:32:d3:6d:8c:06:
                    cf:e2:65:46:96:c7:45:d1:f6:38:f6:20:91:90:3c:
                    51:14:6a:37:60:66:82:21:b9:93:3f:22:0c:96:b3:
                    6e:38:8f:c3:5b:fc:d5:54:97:9f:2c:5e:68:db:b2:
                    41:d4:30:5b:7b:88:d9:2c:84:1f:a0:61:a0:8a:e9:
                    df:3f:16:b6:8f:80:d5:ce:84:9e:b2:1e:92:c0:11:
                    e4:13:ac:4e:4c:39:1c:c3:df:42:f5:09:e3:c0:fa:
                    63:8c:58:8a:7b:99:88:6c:5c:39:06:79:39:ef:7e:
                    8b:7c:a6:6c:d5:74:13:28:18:30:36:fb:6e:89:ff:
                    7f:e5:03:13:70:86:4f:dc:19:4f:f6:b1:84:dd:15:
                    30:e5:54:82:35:83:72:98:0c:0a:be:9b:4f:70:77:
                    3d:b8:21:cd:24:a4:cb:27:9f:6a:19:8b:10:4d:a5:
                    71:fc:0a:37:c8:c1:da:2d:66:8a:d6:b3:c9:74:74:
                    84:0a:4c:f7:8a:32:5c:5c:33:ea:06:b4:f2:0e:30:
                    cf:68:d8:a7:17:d2:f0:64:02:e9:d8:0f:75:31:42:
                    c7:1b:48:24:b4:ac:f6:c5:8d:d9:67:8b:d5:04:fe:
                    23:3b:84:93:f3:c3:f2:73:72:1b:95:f6:17:b3:0a:
                    4a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:41:AA:86:CE:61:A6:53:90:8E:ED:7E:07:90:E6:C7:6D:A3:A8:B6
            X509v3 Authority Key Identifier:
                keyid:95:24:EE:84:72:B5:FC:7B:79:54:62:78:09:F5:6C:FE:B4:5E:63:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/3139302e3131352e3232332e302f32342d3234203d3e20323730383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:21:29:15:85:61:90:8c:23:87:0b:63:2d:d6:e6:5c:9f:d3:
         e1:cb:f6:7c:b1:c1:92:54:15:a1:99:0d:af:95:80:9d:16:03:
         ac:2b:09:c4:0a:82:75:21:f8:0f:ee:c4:e0:58:ae:bf:35:5b:
         47:35:cc:f4:3f:31:8d:bf:cf:1e:1d:9e:f3:7a:a2:1a:9e:1f:
         54:5a:61:42:2c:89:31:e4:56:d0:31:4a:76:1b:47:5b:aa:24:
         5c:1b:d2:61:ea:84:96:66:75:c6:ee:49:ac:e5:04:29:68:de:
         65:cd:6a:9d:f3:60:e7:85:bb:76:e6:af:7b:2a:7f:a2:56:c5:
         48:58:06:99:ff:a8:ff:88:a4:b3:01:9b:4b:1b:f1:23:15:c0:
         57:00:04:09:7f:9c:de:87:7a:8b:41:25:ec:51:09:be:c3:75:
         ce:3f:41:49:8b:23:1d:a4:2d:8c:80:df:68:e0:c4:31:f7:65:
         63:ae:f8:85:84:1c:51:a7:cf:c6:b6:60:cd:48:58:fe:db:93:
         4b:01:d2:d8:0b:a5:28:32:d0:03:d6:ec:e7:6e:f9:8f:93:2d:
         2b:19:92:23:0d:04:80:49:a3:13:a7:72:be:d5:9b:ec:79:2a:
         ef:b9:3f:2c:be:07:ef:e2:8a:10:6f:40:67:e6:ea:cd:e7:f9:
         02:6c:20:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org