Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130382e302f32342d3234203d3e20323633343736.roa
File:                     3139312e3234322e3130382e302f32342d3234203d3e20323633343736.roa (raw, json)
Hash identifier:          qydV9LgaUavJj4yWULce3DaSOULilz5Q/xY5NmZheG0=
Subject key identifier:   F3:D6:7A:18:F0:48:41:62:7B:86:D0:46:D9:D8:A0:86:AD:24:D3:07
Certificate issuer:       /CN=B9230901E8518858475596651A1A02C3407F0B17
Certificate serial:       2F073A93B705836433BEF8C38AE6CCC9366D0F89
Authority key identifier: B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130382e302f32342d3234203d3e20323633343736.roa
Signing time:             Thu 29 Jun 2023 15:11:21 +0000
ROA not before:           Thu 29 Jun 2023 15:06:21 +0000
ROA not after:            Thu 27 Jun 2024 15:11:21 +0000
asID:                     263476
IP address blocks:        191.242.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:07:3a:93:b7:05:83:64:33:be:f8:c3:8a:e6:cc:c9:36:6d:0f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9230901E8518858475596651A1A02C3407F0B17
        Validity
            Not Before: Jun 29 15:06:21 2023 GMT
            Not After : Jun 27 15:11:21 2024 GMT
        Subject: CN=F3D67A18F04841627B86D046D9D8A086AD24D307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:73:c9:95:8d:59:50:a3:07:fc:e7:1b:f5:80:
                    bf:4d:9e:2c:85:e6:6d:22:68:ea:de:ca:24:ee:27:
                    5a:78:2b:b4:3e:b3:10:43:ef:88:9d:dd:fa:ef:dc:
                    43:a7:82:3f:04:9e:c5:71:33:10:86:7b:3b:bc:7a:
                    d1:9d:cb:41:f5:48:14:5a:2e:46:ab:c8:30:79:dc:
                    53:17:7d:cc:39:a9:48:d2:d8:1d:c5:99:ff:cc:38:
                    5c:1d:f0:d8:a7:63:b3:50:20:30:43:ed:35:14:17:
                    f3:fe:3e:e0:d6:75:c8:7d:55:a5:10:b1:35:d7:a8:
                    80:f8:49:52:3a:22:23:04:d3:85:75:00:0e:04:aa:
                    c5:f6:37:92:44:f8:b4:f2:09:7e:e1:06:bd:67:53:
                    c2:97:01:cc:65:f5:cd:bd:b2:5f:c0:dc:8b:8f:0f:
                    a5:b6:e1:e8:fb:21:99:7d:7e:91:7d:81:32:aa:66:
                    b6:90:a9:18:98:9b:1b:1a:ee:c3:0c:ae:dd:f4:35:
                    9f:f2:77:8b:99:ac:87:36:8d:79:e4:d7:3d:ac:cd:
                    cf:6a:8b:89:43:d5:06:c4:16:88:1e:78:11:8c:be:
                    bc:0b:d2:a4:51:a6:e2:2a:14:10:51:98:ec:29:54:
                    a4:9f:1f:e3:60:76:e2:39:5c:f0:d4:86:25:9c:fd:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D6:7A:18:F0:48:41:62:7B:86:D0:46:D9:D8:A0:86:AD:24:D3:07
            X509v3 Authority Key Identifier:
                keyid:B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/B9230901E8518858475596651A1A02C3407F0B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130382e302f32342d3234203d3e20323633343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:b5:4f:9c:19:46:a3:91:10:e6:60:83:1b:a8:88:a3:dd:b2:
         9a:b8:f8:2f:03:d7:a1:43:f3:56:57:7a:2d:46:2e:42:5e:01:
         58:13:88:59:a9:96:b0:ed:74:a7:a6:3c:3a:d5:2a:73:0f:09:
         d7:26:80:f4:52:60:37:49:33:e8:7d:db:a6:f5:61:65:3c:d2:
         35:2c:96:2f:49:f9:40:a6:03:a6:5c:b3:28:8c:76:57:3d:05:
         f6:b5:c3:31:c5:54:ad:9a:4f:65:11:4e:aa:5d:ff:60:69:fb:
         6c:5b:e8:5c:cd:97:33:92:a4:2e:29:02:e8:3a:25:a5:05:8a:
         39:90:7c:86:e9:b2:ce:47:c3:22:50:e2:66:e2:02:32:77:d6:
         49:5c:74:6d:46:2b:f1:7f:c1:c2:d2:65:72:3a:ca:68:d3:5e:
         b2:33:0f:05:35:5a:25:ba:3f:9d:64:81:b2:07:b7:58:b1:dd:
         b0:58:99:a4:3b:68:19:04:f2:2f:a8:0f:57:ed:7c:f3:f9:8a:
         90:54:25:58:d8:8d:3f:6a:f3:f2:39:ec:a5:6c:ff:3e:aa:1b:
         04:43:76:7f:b2:65:c8:6f:51:de:3a:89:a7:27:3e:66:15:51:
         5b:0a:80:f5:78:50:c6:ab:46:7c:2f:56:77:a2:89:fa:1d:b2:
         c4:02:d1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org