Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3130382e302f32322d3234203d3e20323730333732.roa
File:                     3139302e38392e3130382e302f32322d3234203d3e20323730333732.roa (raw, json)
Hash identifier:          bAGZYtb7Kjv2+FU9qf9no5W4cpJpLn337gQ9GaVi1X0=
Subject key identifier:   47:A0:07:2C:7D:D3:56:FA:A9:72:E9:84:A7:E2:CF:5A:AA:16:98:D1
Certificate issuer:       /CN=2D7D054EC0EA14BF7017E2F0D1306132D9F375AD
Certificate serial:       46E2079CE6035642773A08102883FFEFE81C9B6B
Authority key identifier: 2D:7D:05:4E:C0:EA:14:BF:70:17:E2:F0:D1:30:61:32:D9:F3:75:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D7D054EC0EA14BF7017E2F0D1306132D9F375AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3130382e302f32322d3234203d3e20323730333732.roa
Signing time:             Mon 11 Dec 2023 21:00:00 +0000
ROA not before:           Mon 11 Dec 2023 20:55:00 +0000
ROA not after:            Mon 09 Dec 2024 21:00:00 +0000
asID:                     270372
IP address blocks:        190.89.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e2:07:9c:e6:03:56:42:77:3a:08:10:28:83:ff:ef:e8:1c:9b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7D054EC0EA14BF7017E2F0D1306132D9F375AD
        Validity
            Not Before: Dec 11 20:55:00 2023 GMT
            Not After : Dec  9 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:7d:34:4b:96:d1:ed:54:72:a6:15:99:ca:
                    2e:73:9a:c1:ef:c5:91:66:8e:8b:32:99:e8:13:ef:
                    2f:45:b8:0f:45:75:c4:74:b4:fd:6a:db:53:4a:d1:
                    68:6d:ce:b3:ee:c5:42:af:e1:c9:64:e2:82:e3:3a:
                    01:df:4b:0e:90:df:54:06:5b:5b:a4:f0:b3:d7:4d:
                    aa:67:6a:fb:8e:f8:7a:66:07:d2:62:46:44:0c:b6:
                    ea:e4:75:31:5b:83:fe:d0:27:c1:d8:4c:81:30:02:
                    42:5c:f8:fe:5d:4a:21:5c:0b:67:59:25:12:90:19:
                    ae:2a:b8:95:98:74:19:99:28:12:02:fe:91:d8:2d:
                    c0:8c:9a:7a:14:aa:e1:cd:80:ca:45:54:f4:ab:30:
                    5c:12:b2:17:ab:5c:c8:6f:f6:b0:ca:83:27:12:b0:
                    f6:8d:ff:06:e9:4a:66:f3:76:41:46:97:da:f5:55:
                    e0:9f:5d:4e:b4:b1:42:b2:60:2a:03:07:70:b0:6c:
                    4b:45:00:24:10:32:26:ea:29:15:6f:96:27:98:68:
                    ed:64:2b:1f:98:51:97:4b:b4:c6:bd:02:54:8c:bc:
                    5a:53:2c:b5:69:cf:4d:e2:f3:74:3b:c3:59:44:3b:
                    cd:88:b3:99:b9:05:05:3e:b2:3e:92:4c:08:f4:be:
                    c3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A0:07:2C:7D:D3:56:FA:A9:72:E9:84:A7:E2:CF:5A:AA:16:98:D1
            X509v3 Authority Key Identifier:
                keyid:2D:7D:05:4E:C0:EA:14:BF:70:17:E2:F0:D1:30:61:32:D9:F3:75:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/2D7D054EC0EA14BF7017E2F0D1306132D9F375AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D7D054EC0EA14BF7017E2F0D1306132D9F375AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3130382e302f32322d3234203d3e20323730333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:39:8b:2f:86:44:81:62:b9:68:a8:c8:63:93:f6:72:23:9e:
         2f:e9:87:75:0b:09:b6:63:81:12:c5:dc:0e:ad:f6:7a:dc:46:
         87:f2:8e:44:16:8b:57:b1:f8:70:db:0c:09:50:d2:17:2a:b0:
         76:31:61:31:ea:61:0d:c9:a5:1d:f0:43:c8:d2:a8:34:78:69:
         1f:f2:8b:8b:68:4b:ba:c5:5d:d3:5c:e5:a0:3d:37:93:7c:ce:
         90:c3:d2:16:30:cd:77:81:be:f1:cd:39:a9:44:6e:5e:7b:3f:
         dd:71:4a:37:79:1f:ad:40:be:db:3e:84:1f:f0:9d:4d:d0:b3:
         d5:cd:7a:c6:39:fa:c9:97:f6:0a:34:aa:65:f6:03:b1:22:0b:
         4e:4a:12:8f:93:7e:ab:81:db:28:56:34:aa:94:59:97:bb:b0:
         f6:1b:58:da:3e:83:4f:e3:e4:a8:48:af:c8:aa:b3:d1:79:23:
         ff:06:8d:50:3d:a7:6a:6d:c0:c0:c2:5d:3a:13:ab:98:29:29:
         19:5f:11:21:b3:37:49:f5:ad:c2:90:91:c2:16:b3:d2:45:19:
         94:c4:c2:26:ec:36:20:a8:4e:59:32:da:8d:f9:4a:20:cf:9c:
         0e:5d:24:7d:2b:8a:2c:d6:99:1b:9c:18:33:d6:2c:63:38:08:
         02:4a:5d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org