Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130342e302f32332d3233203d3e20323633343736.roa
File:                     3139312e3234322e3130342e302f32332d3233203d3e20323633343736.roa (raw, json)
Hash identifier:          2q6ow6y5TzHLsOjqNonNzzNxMJrXPekCONuUvcs6MRw=
Subject key identifier:   1E:34:9F:51:50:23:24:05:1F:21:90:87:EB:AE:94:D2:3F:8B:1E:E0
Certificate issuer:       /CN=B9230901E8518858475596651A1A02C3407F0B17
Certificate serial:       414AAD84CBE8015EC290644F55089A41C717FDDD
Authority key identifier: B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130342e302f32332d3233203d3e20323633343736.roa
Signing time:             Thu 29 Jun 2023 15:11:19 +0000
ROA not before:           Thu 29 Jun 2023 15:06:19 +0000
ROA not after:            Thu 27 Jun 2024 15:11:19 +0000
asID:                     263476
IP address blocks:        191.242.104.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4a:ad:84:cb:e8:01:5e:c2:90:64:4f:55:08:9a:41:c7:17:fd:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9230901E8518858475596651A1A02C3407F0B17
        Validity
            Not Before: Jun 29 15:06:19 2023 GMT
            Not After : Jun 27 15:11:19 2024 GMT
        Subject: CN=1E349F51502324051F219087EBAE94D23F8B1EE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:07:64:00:d9:12:db:2e:e5:df:8b:e1:51:62:
                    fc:fb:e3:bd:2d:9e:f9:71:65:ac:e5:ae:45:fc:eb:
                    5e:3c:b8:8b:be:2a:ff:d3:85:74:ac:26:92:50:4b:
                    d4:34:7f:5d:0f:de:72:aa:d7:22:24:bd:64:da:1e:
                    ea:af:3f:80:0c:0c:dd:52:35:73:6c:80:9e:44:46:
                    5b:77:c3:2b:7d:d9:bd:c2:10:fc:46:69:35:ca:d5:
                    38:22:c0:bd:f6:bf:2f:46:1d:df:4f:a8:41:5f:bd:
                    44:1b:a1:4e:f4:7d:30:2c:bf:ef:29:74:d1:04:ab:
                    a3:d3:79:a7:46:71:d9:96:08:af:04:c1:f9:11:4d:
                    26:55:87:53:ee:7d:c1:88:12:bf:34:14:a8:e8:3e:
                    1f:5e:3f:a5:ee:75:66:51:94:36:d4:20:9c:73:0c:
                    e2:04:08:e5:fe:ad:51:f0:8e:b6:64:5d:bd:7b:f5:
                    a6:b4:32:77:88:3d:2a:7e:04:11:a3:e3:5a:7e:36:
                    4f:9c:e1:d0:a3:84:96:0b:53:20:b6:58:7f:57:bf:
                    5c:fa:97:7f:cd:48:86:67:0a:28:b6:c7:fe:58:ea:
                    6c:12:5a:f7:79:1e:d4:9d:92:26:33:90:cf:f6:77:
                    64:0d:5e:58:e0:82:e8:9d:60:0a:71:d9:f0:31:f1:
                    30:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:34:9F:51:50:23:24:05:1F:21:90:87:EB:AE:94:D2:3F:8B:1E:E0
            X509v3 Authority Key Identifier:
                keyid:B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/B9230901E8518858475596651A1A02C3407F0B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130342e302f32332d3233203d3e20323633343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:fb:62:9e:f1:d2:95:cb:d9:d8:81:f9:90:33:fb:cf:5c:ce:
         56:17:06:02:2e:db:83:4d:e8:a2:9b:db:06:f3:fc:53:07:75:
         28:3a:55:4c:18:c1:55:c9:1d:03:14:7e:2b:40:a2:8d:70:1e:
         04:ca:b3:4d:82:8e:4e:0c:22:41:c6:95:e5:74:2f:04:32:ef:
         43:3d:93:5d:fa:21:08:41:a8:c5:92:80:2f:16:d4:c4:34:3c:
         16:da:df:d2:9c:f2:82:3b:f0:89:95:76:57:71:d6:a0:f5:df:
         d7:74:da:a6:b5:8b:52:fe:df:b8:55:fe:06:5d:8d:41:fa:58:
         f1:30:d2:e7:59:aa:12:d7:a5:ce:c0:15:07:7f:15:05:4a:d4:
         22:73:59:40:fc:ef:95:9f:9b:4f:a1:4a:91:e6:cc:33:90:af:
         44:6a:57:80:e7:85:3f:c7:04:16:f9:be:d5:65:31:96:96:b6:
         a8:8d:e6:bf:1c:0f:63:ed:4b:37:d6:45:19:94:59:e5:7d:c4:
         ba:1e:e7:c1:cb:6b:1b:1f:55:a6:a7:97:51:ca:63:87:f7:4a:
         21:c0:1c:44:ad:e7:ac:dc:2f:35:86:4e:1f:2b:a1:c9:1e:90:
         99:ac:9f:0e:87:22:a0:c2:14:d4:0e:cf:56:71:73:b0:f8:ee:
         9a:1b:c9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org