Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa
File:                     3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa (raw, json)
Hash identifier:          eMbC22NZlyFoog+EtHbOk1pHH8aSg9J+gW40qg0OYYI=
Subject key identifier:   24:C8:CA:33:10:57:97:4E:B2:9B:4B:16:DE:9A:80:51:2D:39:45:3C
Certificate issuer:       /CN=854D67A53888C5C7A27581422DBB6973EF4A1FC0
Certificate serial:       05DCFB37928A7A52E0AFB56FCCE84A839CDBD0CD
Authority key identifier: 85:4D:67:A5:38:88:C5:C7:A2:75:81:42:2D:BB:69:73:EF:4A:1F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa
Signing time:             Tue 26 Mar 2024 06:17:57 +0000
ROA not before:           Tue 26 Mar 2024 06:12:57 +0000
ROA not after:            Tue 25 Mar 2025 06:17:57 +0000
asID:                     271326
IP address blocks:        190.123.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:dc:fb:37:92:8a:7a:52:e0:af:b5:6f:cc:e8:4a:83:9c:db:d0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854D67A53888C5C7A27581422DBB6973EF4A1FC0
        Validity
            Not Before: Mar 26 06:12:57 2024 GMT
            Not After : Mar 25 06:17:57 2025 GMT
        Subject: CN=24C8CA331057974EB29B4B16DE9A80512D39453C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:ae:c6:c6:96:1b:4d:f7:40:8c:8d:42:f6:
                    01:f1:95:75:61:60:ee:7f:95:a0:e2:21:6b:70:43:
                    28:db:42:39:ef:e2:1a:6b:cc:18:14:43:ef:9d:5b:
                    9a:12:44:90:a0:96:2a:b1:7a:40:34:80:55:15:c9:
                    23:ed:10:40:cc:29:04:0e:77:49:33:05:03:0e:a1:
                    dd:32:e2:de:c4:1e:de:fe:36:75:90:23:ab:d4:86:
                    30:9f:1d:35:b4:d4:8c:86:42:80:91:58:9e:ea:7e:
                    c3:63:de:f0:b0:48:a9:ce:18:0d:6b:f8:e7:cb:81:
                    3a:12:91:1d:d7:68:54:57:a0:29:71:c5:7b:6f:4e:
                    2b:b7:fb:3b:0f:61:c1:c2:79:69:be:61:66:52:28:
                    c9:34:5e:e1:e3:d3:58:57:0f:dd:66:fb:78:ad:2f:
                    23:f5:53:1d:f6:0e:11:d8:82:7f:c9:48:9d:56:a3:
                    cb:ca:87:ba:63:a0:6c:ad:9f:0c:10:33:87:eb:44:
                    3a:76:17:34:96:33:6e:80:30:67:11:bc:87:ce:49:
                    d1:6b:ac:f7:41:57:2f:e4:cf:94:f0:25:d0:0e:7b:
                    b7:c8:b6:f2:90:84:be:a4:6d:54:74:e6:8e:9b:7c:
                    dc:cc:b0:e5:67:cd:b6:83:13:40:d9:95:0a:bc:1c:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C8:CA:33:10:57:97:4E:B2:9B:4B:16:DE:9A:80:51:2D:39:45:3C
            X509v3 Authority Key Identifier:
                keyid:85:4D:67:A5:38:88:C5:C7:A2:75:81:42:2D:BB:69:73:EF:4A:1F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:48:f5:79:3c:6e:b1:73:e6:05:da:70:72:33:a5:48:1b:90:
         e3:ad:a3:e1:ba:fc:83:85:31:2e:76:61:49:f3:b4:b0:1c:50:
         0b:72:ea:63:0e:0f:41:ff:d1:68:7a:69:4d:b1:0d:78:36:69:
         76:b9:c1:31:a8:33:8a:c6:04:7e:8a:21:f1:90:28:8d:e2:2b:
         2a:e9:56:95:0a:6e:1b:15:b2:3c:f4:4a:b0:99:44:99:6a:70:
         30:03:1f:3f:cf:a9:db:1d:52:6f:41:c4:bf:96:28:ce:99:97:
         97:2c:20:0f:32:eb:4b:3e:61:fb:e7:5a:e5:cd:94:5f:ca:f0:
         99:f8:ce:77:3e:18:89:cb:42:5a:86:97:5e:ba:43:06:fb:a6:
         e5:4a:5c:f0:05:23:5e:11:9f:a4:da:6d:c8:dc:75:eb:06:b8:
         cd:d6:df:1d:c1:c8:c9:0a:88:a9:1b:ee:f9:c9:8d:2e:5b:c7:
         e7:44:36:a5:b0:b4:08:8c:8e:bf:ec:88:67:4d:d1:b0:2e:c5:
         9e:f8:90:ea:4d:b2:18:16:a8:f3:41:10:1a:50:a2:99:4e:d8:
         c3:24:36:28:7a:90:03:a0:45:76:e7:6f:f0:01:1f:67:d4:e2:
         a7:50:22:1b:3f:ab:37:ff:f5:1d:fa:a0:0b:af:f9:ea:5d:4d:
         be:45:fb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:53 2024 by rpki-client on console.sobornost.net