Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3139312e372e3133362e302f32312d3234203d3e20323633333231.roa
File:                     3139312e372e3133362e302f32312d3234203d3e20323633333231.roa (raw, json)
Hash identifier:          YxW33lW8ebcHyuj8KamtO/HSZK/MyK0QGmuoWnQZxqo=
Subject key identifier:   82:5F:3F:A2:C8:61:6B:57:27:D6:8E:4C:BD:FC:B0:38:D5:DE:13:94
Certificate issuer:       /CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
Certificate serial:       318A669C3F2CA5D9F7C765D155F771EAF03689F0
Authority key identifier: D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3139312e372e3133362e302f32312d3234203d3e20323633333231.roa
Signing time:             Fri 16 Feb 2024 11:44:55 +0000
ROA not before:           Fri 16 Feb 2024 11:39:55 +0000
ROA not after:            Fri 14 Feb 2025 11:44:55 +0000
asID:                     263321
IP address blocks:        191.7.136.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8a:66:9c:3f:2c:a5:d9:f7:c7:65:d1:55:f7:71:ea:f0:36:89:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
        Validity
            Not Before: Feb 16 11:39:55 2024 GMT
            Not After : Feb 14 11:44:55 2025 GMT
        Subject: CN=825F3FA2C8616B5727D68E4CBDFCB038D5DE1394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:81:18:d0:da:b8:d4:51:90:a6:cb:f5:e0:5d:
                    b6:27:2f:78:a2:8c:09:62:06:62:53:ae:56:50:27:
                    e4:0b:d6:3c:1f:a3:6d:be:55:af:2b:47:fe:5e:1d:
                    5f:4b:8a:92:41:61:a4:4a:f6:03:82:59:3f:c4:5f:
                    16:67:b9:7c:3b:73:10:3c:e5:13:17:34:f6:37:72:
                    e2:63:7b:17:34:f6:32:fd:47:73:fd:82:90:91:c4:
                    99:6e:14:31:bd:3d:8a:20:a9:61:6f:bb:5b:6b:7d:
                    93:50:bf:75:bf:9e:ae:72:d1:9c:fa:9b:21:86:dc:
                    5e:22:12:2b:de:27:8c:7b:8d:c4:61:12:3b:c0:ab:
                    9c:d0:b9:c5:91:4d:62:b4:ff:29:c7:96:1f:f5:f7:
                    61:07:30:10:1c:98:de:5d:ea:6f:c5:6c:da:dd:6f:
                    41:df:fb:fa:79:46:dd:c8:cd:0a:f6:7b:3c:49:7b:
                    62:8d:cd:ac:a3:29:42:ca:09:17:ed:84:f5:33:3a:
                    6a:18:c6:db:6a:3b:f2:98:23:12:fe:c4:49:4f:75:
                    89:e0:24:6e:48:17:49:51:47:72:04:64:da:c0:a0:
                    bc:76:37:e1:79:06:14:3a:e3:bc:c1:03:2a:09:1c:
                    47:f0:21:63:fe:e6:03:8d:41:87:44:58:0a:63:e9:
                    35:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5F:3F:A2:C8:61:6B:57:27:D6:8E:4C:BD:FC:B0:38:D5:DE:13:94
            X509v3 Authority Key Identifier:
                keyid:D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3139312e372e3133362e302f32312d3234203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:14:4b:6b:4c:68:58:e4:e2:f2:c4:a6:20:9e:5e:45:d0:78:
         71:a4:d4:e6:f6:18:ad:0c:d0:d6:e4:e0:70:76:53:ec:6d:74:
         dc:07:af:c1:f2:1c:65:fe:5b:6d:c9:9e:99:84:22:25:e3:e4:
         39:0e:6b:0a:27:69:a7:6d:53:5f:c1:8a:bb:79:13:65:5a:e7:
         4a:4e:16:fd:cc:8c:76:cc:bc:21:a9:fe:7b:1b:fe:94:80:51:
         70:40:26:2d:88:69:89:05:1b:5e:30:c6:09:92:08:38:5d:02:
         c4:88:93:e5:82:fb:60:f2:a7:2d:e4:fe:59:fd:9c:8c:8a:f7:
         f4:ea:9a:54:fa:a3:86:72:11:fa:2b:6c:40:af:c4:b7:ec:1b:
         bb:df:5d:20:92:48:b3:17:cc:1b:de:4d:c7:90:38:18:4f:a7:
         0a:e1:71:4e:a0:32:02:15:eb:31:f2:de:f5:fe:94:5f:9a:44:
         77:50:35:8c:2d:d7:4e:8a:6d:ca:e6:bf:6f:bb:11:99:73:90:
         f1:b4:a4:13:6c:e3:33:4d:f6:9d:47:08:53:9c:65:b9:3d:41:
         4c:9f:dc:b9:d7:35:96:c1:e8:f2:98:b9:29:b9:a2:a1:f0:59:
         d3:65:59:ba:17:ea:7e:df:57:14:4b:d0:9f:3e:34:74:92:4e:
         33:18:8c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org