Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3134332e302f32342d3234203d3e203532393330.roa
File:                     3139302e3138302e3134332e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          BXxdkg2iywrkbDW5abOTbMNGJHHOw7apE0hvFP+7eLc=
Subject key identifier:   6D:BC:7C:30:83:64:1B:99:2D:16:03:91:9B:2D:4B:E3:10:F7:5D:43
Certificate issuer:       /CN=9F447BDED8BDE868DC45F27E97C658F459051FB1
Certificate serial:       5FABF5DEA21414F74AB662AD25EBB194D10D47E4
Authority key identifier: 9F:44:7B:DE:D8:BD:E8:68:DC:45:F2:7E:97:C6:58:F4:59:05:1F:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F447BDED8BDE868DC45F27E97C658F459051FB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3134332e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 14 Jul 2023 20:33:58 +0000
ROA not before:           Fri 14 Jul 2023 20:28:58 +0000
ROA not after:            Fri 12 Jul 2024 20:33:58 +0000
asID:                     52930
IP address blocks:        190.180.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ab:f5:de:a2:14:14:f7:4a:b6:62:ad:25:eb:b1:94:d1:0d:47:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F447BDED8BDE868DC45F27E97C658F459051FB1
        Validity
            Not Before: Jul 14 20:28:58 2023 GMT
            Not After : Jul 12 20:33:58 2024 GMT
        Subject: CN=6DBC7C3083641B992D1603919B2D4BE310F75D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:81:a9:af:ed:75:9d:a5:b9:49:10:f0:a2:f5:
                    04:7a:32:91:9e:39:ac:18:88:97:20:49:ac:2b:ae:
                    38:88:56:13:2e:9d:bf:06:97:6f:94:88:c5:1a:96:
                    53:61:24:ee:72:60:63:77:1b:dc:36:98:23:55:a6:
                    02:79:c7:2f:ea:d9:5a:d3:4d:26:0b:ed:9f:6d:31:
                    8d:e0:b1:40:9c:bd:ca:ab:fa:61:27:ba:4c:9b:16:
                    d4:4f:b1:80:f9:91:90:ef:62:39:cc:e0:2a:1a:1e:
                    d5:fb:1c:38:54:0e:fb:0e:e2:37:99:03:c6:76:68:
                    69:3e:e3:d4:1f:1a:7f:d0:ff:d4:d9:e9:fd:ee:02:
                    9b:54:e9:a5:8f:a2:68:d8:71:55:f6:c3:3b:d6:ac:
                    b9:e2:e8:e9:5d:08:05:c8:b9:2c:26:06:84:e8:55:
                    b8:c6:7f:7a:d9:cb:fc:5c:44:d9:59:ed:20:81:0d:
                    9f:76:ad:d9:13:1d:a1:28:2e:bc:b3:15:65:e2:c3:
                    ed:3c:0b:ef:ae:2e:cb:75:4b:c0:38:c0:ee:96:e7:
                    ee:9e:05:a4:d5:68:e0:af:84:9a:48:bc:08:e3:84:
                    10:77:0e:ef:c5:b4:1f:c3:08:c8:03:df:75:0a:41:
                    c7:82:a0:4f:fa:35:eb:44:f2:af:5e:4a:2b:dd:e0:
                    4e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BC:7C:30:83:64:1B:99:2D:16:03:91:9B:2D:4B:E3:10:F7:5D:43
            X509v3 Authority Key Identifier:
                keyid:9F:44:7B:DE:D8:BD:E8:68:DC:45:F2:7E:97:C6:58:F4:59:05:1F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/9F447BDED8BDE868DC45F27E97C658F459051FB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F447BDED8BDE868DC45F27E97C658F459051FB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3134332e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:9f:25:98:2e:30:fd:2d:3e:76:3f:28:69:ff:39:c7:0b:d7:
         e1:58:98:24:5e:41:40:f3:fd:df:e8:a0:70:b9:06:53:ed:67:
         56:75:e3:8d:15:8a:f1:17:47:9b:ff:1f:b0:29:54:48:4c:19:
         c8:34:9a:81:b4:fd:aa:c8:b2:7d:71:32:72:1c:a4:84:93:75:
         37:d2:61:18:b1:9f:df:22:93:4b:98:1a:74:f5:08:cc:31:4f:
         15:81:65:e5:d4:f1:10:87:a3:ff:d2:e1:e8:a6:2c:9a:41:25:
         42:97:5b:0e:42:2c:7a:a7:cf:6d:ba:9a:03:58:d7:03:b7:99:
         45:43:8d:7c:ef:ee:5b:67:bf:ae:8b:f6:19:c6:82:01:44:b9:
         ce:8f:fa:5d:ec:62:f6:09:7e:69:46:5e:8c:1d:56:1d:68:26:
         27:33:21:2e:46:c1:e3:20:00:61:93:ad:97:3c:d8:ac:b1:b6:
         cf:21:f2:17:06:b0:6e:48:d7:88:1f:57:38:4a:ca:17:61:e2:
         88:b7:33:a8:b9:7e:d5:cc:1f:0a:0b:d9:eb:06:aa:b0:39:71:
         a0:94:96:ae:35:77:2a:d3:0d:94:76:fd:d6:59:6a:c1:05:8b:
         47:0c:45:70:f6:32:fa:2a:99:76:13:91:65:29:84:7e:7a:5d:
         75:7d:ff:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org