Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32322d3232203d3e20323633393131.roa
File:                     3139302e3130392e38382e302f32322d3232203d3e20323633393131.roa (raw, json)
Hash identifier:          mMxdFDPJNNXrnZze2kUS5/UoZxIJQAJjAC/AAZYcqbo=
Subject key identifier:   F9:75:E5:29:28:06:0A:31:C9:50:32:6F:CC:9F:DA:3A:07:C0:CA:3E
Certificate issuer:       /CN=68752CE82B908FDC8106216DC10CB548D5A5EA40
Certificate serial:       2610C947FFAA9ACC402093973F652BBF4F1A1F20
Authority key identifier: 68:75:2C:E8:2B:90:8F:DC:81:06:21:6D:C1:0C:B5:48:D5:A5:EA:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68752CE82B908FDC8106216DC10CB548D5A5EA40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32322d3232203d3e20323633393131.roa
Signing time:             Fri 10 Nov 2023 17:09:19 +0000
ROA not before:           Fri 10 Nov 2023 17:04:19 +0000
ROA not after:            Fri 08 Nov 2024 17:09:19 +0000
asID:                     263911
IP address blocks:        190.109.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:10:c9:47:ff:aa:9a:cc:40:20:93:97:3f:65:2b:bf:4f:1a:1f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68752CE82B908FDC8106216DC10CB548D5A5EA40
        Validity
            Not Before: Nov 10 17:04:19 2023 GMT
            Not After : Nov  8 17:09:19 2024 GMT
        Subject: CN=F975E52928060A31C950326FCC9FDA3A07C0CA3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c8:e1:c8:ca:b5:01:f8:66:bc:e9:e3:37:93:
                    2b:ef:88:b3:d3:81:37:d7:9b:01:84:e2:22:8c:9f:
                    21:a6:3a:2a:5d:32:8c:44:6b:ae:f6:6f:10:2c:96:
                    51:6c:2e:e9:72:5b:d2:c5:2e:9a:c9:fc:04:8d:f0:
                    85:d7:65:f5:51:41:59:30:10:6b:37:29:47:8c:64:
                    f8:93:8b:64:d7:08:b1:7c:3a:ab:46:ff:99:d8:89:
                    ac:77:0c:75:c1:b7:85:e7:4f:e3:03:96:ff:ad:c6:
                    eb:cb:b6:ab:e2:3f:d5:38:f7:0e:d7:1f:66:fa:12:
                    54:5c:48:82:36:24:bc:91:db:ff:41:83:68:b6:3b:
                    f0:23:d5:d5:de:fb:72:a1:f3:3e:1a:f0:58:a5:20:
                    4b:6e:1d:e7:7b:f0:49:1c:f8:af:3a:fc:31:f3:61:
                    76:e5:bb:bf:67:e7:24:8c:89:9d:e0:d9:2a:9c:91:
                    7a:78:46:dc:8b:49:1a:ee:cd:6a:59:af:f1:cb:93:
                    ed:17:72:36:bb:a7:47:cd:ca:b6:46:51:d3:40:59:
                    a8:01:bf:30:3c:00:34:1c:a8:c6:b5:6a:ac:9a:8f:
                    5d:1e:15:53:ed:3a:36:fa:d9:31:d4:22:31:ae:a7:
                    f3:8d:9c:a0:ac:62:82:92:8e:a8:7c:11:da:d3:6c:
                    c6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:75:E5:29:28:06:0A:31:C9:50:32:6F:CC:9F:DA:3A:07:C0:CA:3E
            X509v3 Authority Key Identifier:
                keyid:68:75:2C:E8:2B:90:8F:DC:81:06:21:6D:C1:0C:B5:48:D5:A5:EA:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/68752CE82B908FDC8106216DC10CB548D5A5EA40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68752CE82B908FDC8106216DC10CB548D5A5EA40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32322d3232203d3e20323633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:f4:0d:6d:52:7a:dc:5c:2d:22:9a:59:72:29:64:b8:bb:58:
         78:77:45:f5:47:62:34:b6:06:bc:b5:ae:69:e1:a8:99:fe:3e:
         27:2c:79:e2:13:35:c0:78:ac:15:15:49:60:06:27:c8:95:59:
         e5:52:f1:45:c0:a5:79:be:2f:dc:52:29:f6:3c:de:f7:11:b9:
         5b:33:03:55:c8:ce:10:ed:a3:84:c4:ff:80:72:23:f2:12:34:
         dd:26:3d:f5:48:aa:2d:c9:4f:18:35:e6:51:4d:54:da:09:cd:
         97:28:19:51:b7:f7:34:50:4a:c5:00:e2:5d:66:69:25:c3:5d:
         ea:41:c0:53:64:c2:1b:55:26:39:fb:c4:5e:73:88:4a:65:1a:
         56:64:94:db:fc:49:d8:d2:b9:b7:28:ea:b2:ea:8a:b3:62:ca:
         3f:78:7c:de:81:08:aa:42:69:c0:82:42:5a:b2:55:79:f7:d3:
         5a:08:70:0b:00:bd:4b:b3:b5:7d:0c:16:3d:63:4a:01:57:76:
         f1:67:39:3b:52:6c:a7:86:88:68:9b:6a:e6:c4:ba:85:6d:91:
         95:15:0a:42:1c:9c:6f:03:86:8e:8a:73:35:f0:71:57:55:1b:
         41:2d:dc:f0:f5:c3:6f:63:9d:16:59:98:95:a2:08:bf:e8:70:
         a2:66:31:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org