Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e39312e302f32342d3234203d3e20323633393131.roa
File:                     3139302e3130392e39312e302f32342d3234203d3e20323633393131.roa (raw, json)
Hash identifier:          p0zofnugO4I8Zcd+wHQaeFIzMbFf7/57OKxSmeT7J64=
Subject key identifier:   B1:5F:D1:6E:CF:03:BE:D1:CD:EC:30:25:3E:84:FF:18:D1:9B:15:AD
Certificate issuer:       /CN=68752CE82B908FDC8106216DC10CB548D5A5EA40
Certificate serial:       287108A877E869677F7E03B2E5718AB768793618
Authority key identifier: 68:75:2C:E8:2B:90:8F:DC:81:06:21:6D:C1:0C:B5:48:D5:A5:EA:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68752CE82B908FDC8106216DC10CB548D5A5EA40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e39312e302f32342d3234203d3e20323633393131.roa
Signing time:             Fri 10 Nov 2023 17:12:04 +0000
ROA not before:           Fri 10 Nov 2023 17:07:04 +0000
ROA not after:            Fri 08 Nov 2024 17:12:04 +0000
asID:                     263911
IP address blocks:        190.109.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:71:08:a8:77:e8:69:67:7f:7e:03:b2:e5:71:8a:b7:68:79:36:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68752CE82B908FDC8106216DC10CB548D5A5EA40
        Validity
            Not Before: Nov 10 17:07:04 2023 GMT
            Not After : Nov  8 17:12:04 2024 GMT
        Subject: CN=B15FD16ECF03BED1CDEC30253E84FF18D19B15AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b7:5c:03:5c:81:0c:4e:4d:db:d4:d1:ff:d9:
                    f1:8c:d0:01:d9:7b:f4:ca:9e:a0:a1:65:9c:fd:5f:
                    fd:69:d1:3d:54:73:8c:b2:92:f7:75:ec:21:26:31:
                    d6:4d:4c:7e:ab:b9:1f:d8:25:7b:c6:a9:3b:bd:c3:
                    78:a9:0d:8f:57:ff:e8:6a:e3:8e:9e:e5:35:f8:ff:
                    d1:ac:e2:5c:a8:b2:26:a4:f9:5d:07:8a:d2:ae:c8:
                    f2:fb:3b:12:27:ea:5a:b1:39:7b:96:b4:96:f1:51:
                    49:84:55:c5:49:a8:f8:55:66:d7:57:e9:4e:08:15:
                    11:a5:f4:f8:04:0c:89:e8:bb:79:a7:43:1e:1f:dc:
                    f0:f1:d4:a8:6f:24:43:20:34:bb:ce:42:82:d6:b2:
                    26:a2:d3:13:21:08:cf:f4:4c:4e:16:74:57:f2:73:
                    6b:03:f3:a9:f4:e6:83:2a:9d:5c:fb:89:ac:c5:60:
                    7b:cc:5b:19:79:63:00:cd:2e:ce:63:c2:71:69:a8:
                    91:fe:a5:9f:84:06:64:5f:be:2d:9d:86:2c:6d:ad:
                    30:e6:ce:70:8c:4d:c3:53:66:cf:cd:81:2f:72:50:
                    8c:37:b0:e0:31:93:70:7b:1b:65:0f:b3:b5:0d:8b:
                    67:4c:ba:73:43:f5:4c:45:55:8d:39:53:d2:34:c9:
                    4e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5F:D1:6E:CF:03:BE:D1:CD:EC:30:25:3E:84:FF:18:D1:9B:15:AD
            X509v3 Authority Key Identifier:
                keyid:68:75:2C:E8:2B:90:8F:DC:81:06:21:6D:C1:0C:B5:48:D5:A5:EA:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/68752CE82B908FDC8106216DC10CB548D5A5EA40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68752CE82B908FDC8106216DC10CB548D5A5EA40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e39312e302f32342d3234203d3e20323633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ed:a8:1e:10:48:54:b6:9b:a3:a3:85:70:4b:7e:a7:c3:ca:
         31:e9:b9:ab:d7:b4:27:53:93:f9:ec:dc:45:0c:6f:e9:51:30:
         43:fc:65:4c:ae:a8:57:4c:78:88:9c:fb:60:46:6e:b9:8d:4e:
         4e:4f:3e:40:69:60:58:74:77:15:ba:a4:78:b5:00:60:34:17:
         9a:ec:05:1a:3a:ae:c7:33:00:5e:13:c3:99:f4:30:a1:1a:5f:
         41:7a:0e:84:9b:3f:22:23:35:9f:84:3d:7e:5e:8e:00:4d:8d:
         6e:34:f7:eb:04:e8:ea:06:72:87:35:d8:ea:98:c8:c9:e5:ab:
         b4:76:07:5c:72:a2:8f:8e:41:26:ca:55:8b:c9:8f:c4:7c:a8:
         09:5c:07:45:c4:a3:a1:12:85:c6:02:43:69:ae:f5:0c:2c:30:
         7d:6d:24:d1:f9:e2:55:a5:69:17:67:b1:46:59:0b:b5:10:b0:
         c1:9e:62:67:1b:e7:a7:c2:ef:6f:00:48:ad:b9:cb:5c:24:90:
         60:01:cc:e8:91:b1:63:d5:e0:74:65:97:4b:fc:ae:1a:02:49:
         26:fd:d5:5a:67:fb:e3:cf:be:21:d8:25:36:e6:f9:ee:f3:2a:
         79:75:69:c0:8d:d3:b7:76:f8:f5:d4:53:a0:8e:c4:1b:30:50:
         a2:3a:47:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org