Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130342e302f32322d3232203d3e20323633343736.roa
File:                     3139312e3234322e3130342e302f32322d3232203d3e20323633343736.roa (raw, json)
Hash identifier:          eb8Hef+9D7ZF2azeaPb+ztBZhwGv6Ltk1S4liN3oiJQ=
Subject key identifier:   5C:22:E3:21:41:31:26:CA:60:47:1A:80:6C:00:26:D7:F4:4C:56:07
Certificate issuer:       /CN=B9230901E8518858475596651A1A02C3407F0B17
Certificate serial:       586AD6F54D343920EC48DD61509F083368171606
Authority key identifier: B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130342e302f32322d3232203d3e20323633343736.roa
Signing time:             Thu 29 Jun 2023 15:11:21 +0000
ROA not before:           Thu 29 Jun 2023 15:06:21 +0000
ROA not after:            Thu 27 Jun 2024 15:11:21 +0000
asID:                     263476
IP address blocks:        191.242.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6a:d6:f5:4d:34:39:20:ec:48:dd:61:50:9f:08:33:68:17:16:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9230901E8518858475596651A1A02C3407F0B17
        Validity
            Not Before: Jun 29 15:06:21 2023 GMT
            Not After : Jun 27 15:11:21 2024 GMT
        Subject: CN=5C22E321413126CA60471A806C0026D7F44C5607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:d4:a9:46:98:36:37:48:dd:1e:bc:d7:a7:
                    aa:f3:d8:6a:68:2d:1e:f1:95:4f:a2:a7:3f:b6:45:
                    a2:e8:c8:b2:4a:8e:a0:91:f3:d7:54:a6:55:4a:ad:
                    3e:d7:e3:34:af:4f:9e:fb:b2:e2:71:77:47:70:45:
                    b6:7c:1f:b4:e5:26:b0:4c:91:c3:0f:4d:59:bd:3c:
                    f4:7e:a3:32:8f:1c:68:bd:4b:ae:1d:e2:f7:54:cc:
                    28:bb:9f:c6:48:1d:29:0a:0e:00:76:04:7c:dc:02:
                    4e:b0:7c:9e:71:ea:d4:84:21:9b:78:2e:49:b4:6c:
                    3a:97:d0:9a:e2:b4:2b:62:e6:12:e9:01:e9:8e:3f:
                    6a:1b:a8:a9:30:db:9f:9f:c6:1a:60:76:d2:a5:e0:
                    69:fc:c1:aa:8c:fb:3c:07:2c:6b:a7:76:55:87:bf:
                    df:f4:e1:06:cd:fc:fe:e4:26:39:41:8a:81:41:94:
                    d3:ee:24:bc:c8:be:d6:c1:5f:f7:64:d5:e9:db:1a:
                    2c:1a:66:b8:5c:7e:63:7d:9a:fb:07:1b:94:4e:16:
                    0b:68:60:a7:2a:5d:61:ee:f4:1a:54:c6:34:2b:90:
                    de:5b:10:67:20:19:3b:a8:ef:9f:0b:7f:f5:ca:fb:
                    e2:46:aa:bc:6d:31:03:4a:02:0c:57:9b:42:07:8e:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:22:E3:21:41:31:26:CA:60:47:1A:80:6C:00:26:D7:F4:4C:56:07
            X509v3 Authority Key Identifier:
                keyid:B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/B9230901E8518858475596651A1A02C3407F0B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130342e302f32322d3232203d3e20323633343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:0b:a8:35:95:fe:d6:83:c4:0d:7b:d1:36:61:96:8d:22:87:
         4d:ea:01:f0:0d:23:00:50:1d:e0:c3:0a:9f:ad:8b:83:86:56:
         36:04:56:78:3f:c7:42:04:37:43:fd:0d:58:52:75:4c:42:0a:
         d1:4d:5b:be:04:db:50:2f:ed:4e:6f:c0:05:ae:a5:0c:7c:53:
         7a:51:4e:26:6b:9a:a0:33:6a:7f:d4:ce:10:83:54:4c:39:ba:
         06:a4:cc:2e:e9:c5:fe:d9:53:f5:b0:26:ac:fc:06:9a:2d:02:
         e9:35:e0:af:e7:71:b1:71:8a:f5:63:0f:2c:b8:60:b9:f8:e4:
         d1:5b:d2:9e:ea:11:0c:3f:66:2b:da:4a:ce:65:88:75:f6:47:
         5e:aa:b4:a4:44:36:22:ed:23:a0:54:ab:5b:7e:50:2c:93:02:
         b2:59:d1:20:f0:94:0d:d1:8d:0a:a8:f0:7f:ae:33:7f:60:29:
         75:26:da:16:32:e6:b0:5f:35:e4:0c:a9:c0:72:f5:11:d1:e9:
         de:69:47:6a:77:fe:0c:d3:ec:9f:b6:06:07:01:31:d9:96:e1:
         09:f1:ce:83:a4:71:86:97:1b:eb:85:95:18:ab:39:91:5a:20:
         b5:cb:db:8e:57:22:a1:0f:a4:b8:ba:b7:d0:74:db:83:91:91:
         4c:b2:d3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org