Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38392e302f32342d3234203d3e20323633393131.roa
File:                     3139302e3130392e38392e302f32342d3234203d3e20323633393131.roa (raw, json)
Hash identifier:          yH/zENUMhohTe7SeXbddzlxiVea0z+PNGw/2aHEzhc0=
Subject key identifier:   EF:BF:B7:BF:0B:D1:DC:C9:BF:6F:27:7A:1D:97:D5:2B:31:93:22:4D
Certificate issuer:       /CN=68752CE82B908FDC8106216DC10CB548D5A5EA40
Certificate serial:       6C9D201630EA044A87C9A3E931EC1F18C61D632C
Authority key identifier: 68:75:2C:E8:2B:90:8F:DC:81:06:21:6D:C1:0C:B5:48:D5:A5:EA:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68752CE82B908FDC8106216DC10CB548D5A5EA40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38392e302f32342d3234203d3e20323633393131.roa
Signing time:             Fri 10 Nov 2023 17:11:41 +0000
ROA not before:           Fri 10 Nov 2023 17:06:41 +0000
ROA not after:            Fri 08 Nov 2024 17:11:41 +0000
asID:                     263911
IP address blocks:        190.109.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9d:20:16:30:ea:04:4a:87:c9:a3:e9:31:ec:1f:18:c6:1d:63:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68752CE82B908FDC8106216DC10CB548D5A5EA40
        Validity
            Not Before: Nov 10 17:06:41 2023 GMT
            Not After : Nov  8 17:11:41 2024 GMT
        Subject: CN=EFBFB7BF0BD1DCC9BF6F277A1D97D52B3193224D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:60:66:1a:16:67:07:25:38:ab:79:1f:8e:
                    b1:12:1e:bd:d2:4d:30:4d:7f:0d:7e:78:6e:0e:2b:
                    cb:c6:90:90:46:79:d4:1a:9a:48:20:17:cf:25:29:
                    48:c7:39:5b:1a:86:d5:57:9a:61:f0:d3:8d:ea:db:
                    3d:b3:3a:ca:d6:9e:65:3e:6f:62:a1:7d:bb:b7:dd:
                    3c:29:3f:e8:a1:b2:85:a0:5f:5b:57:4b:1a:f4:9e:
                    e2:c2:ef:f7:27:86:8e:35:02:96:d8:38:43:c9:97:
                    dd:90:ed:88:d7:d0:ed:c4:3e:b5:09:f0:80:76:1a:
                    81:bf:d9:69:8d:6a:6e:3c:dc:ff:8f:20:20:d3:7a:
                    65:10:3c:81:d2:21:0b:6c:70:51:da:da:08:97:93:
                    8b:dd:3e:bb:32:3b:a5:5f:c3:2d:60:be:4f:40:c0:
                    04:fa:0d:65:68:33:d5:bc:f5:48:92:39:a4:1b:e9:
                    52:23:bb:04:ae:38:62:eb:94:70:18:30:af:fe:0f:
                    a3:e5:fd:18:f3:ee:6c:f3:31:82:fe:3d:03:0c:f9:
                    cc:ff:55:a7:7b:35:13:0b:bf:3d:54:75:fc:60:b5:
                    d8:87:e3:1d:b9:d2:32:07:5b:5c:fc:f0:1b:82:e2:
                    b0:96:ea:5f:cb:17:b9:3c:c2:f7:8a:b7:c9:10:7d:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BF:B7:BF:0B:D1:DC:C9:BF:6F:27:7A:1D:97:D5:2B:31:93:22:4D
            X509v3 Authority Key Identifier:
                keyid:68:75:2C:E8:2B:90:8F:DC:81:06:21:6D:C1:0C:B5:48:D5:A5:EA:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/68752CE82B908FDC8106216DC10CB548D5A5EA40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68752CE82B908FDC8106216DC10CB548D5A5EA40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38392e302f32342d3234203d3e20323633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:e4:3a:ba:80:f7:35:a1:00:64:87:0f:83:59:65:65:af:fc:
         01:9c:56:0e:be:90:af:2b:97:70:74:de:1c:87:7a:b0:f8:87:
         bd:29:af:a0:67:ca:9d:03:1b:0e:66:e8:b4:98:71:0e:e9:96:
         e3:26:22:87:10:35:b1:92:15:01:4b:0f:90:bd:78:53:91:b5:
         c7:64:fc:07:3f:e6:46:59:c5:4b:18:35:d1:46:28:e2:56:11:
         1e:cb:8e:76:f7:b2:76:67:13:d4:7f:75:8a:ac:df:c3:89:15:
         8a:2c:3d:54:c1:ae:4a:76:3e:6a:9f:a1:b7:28:10:91:37:8d:
         25:4d:79:50:c8:32:3a:7d:3b:28:83:4f:bf:e2:1a:cc:b4:cc:
         6c:5f:17:e7:35:e3:d3:6a:d1:d4:06:9a:f3:64:f1:7c:80:37:
         29:f7:2f:c3:24:eb:5f:73:4e:4b:4e:16:17:ba:df:3b:09:9a:
         fa:42:7c:e5:d6:8f:fd:36:42:26:1a:67:ef:31:d5:3a:2b:5d:
         3c:07:73:b8:de:17:eb:5c:5d:b5:7f:80:96:28:11:b3:74:9b:
         63:7c:37:e9:11:64:c7:15:2a:b3:29:af:53:31:04:b6:0b:eb:
         3c:f9:54:b6:5e:64:f9:4e:37:97:a6:12:13:c9:30:68:79:a1:
         bc:02:f0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org