Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/1/3139312e362e3136342e302f32342d3234203d3e20323633313634.roa
File:                     3139312e362e3136342e302f32342d3234203d3e20323633313634.roa (raw, json)
Hash identifier:          2JCGfGbBECPT0TX9m4LXunEdinvsbFTrHyFocvFxo5I=
Subject key identifier:   8C:8F:A2:95:C3:4D:F1:56:D3:05:8A:51:FF:9E:41:3D:C8:10:80:7A
Certificate issuer:       /CN=991F9EF30E0F0974AA97C60E2654F0833FACCA1B
Certificate serial:       11C4BB12DEED1BB27F2BD7A002AD63B25E490C51
Authority key identifier: 99:1F:9E:F3:0E:0F:09:74:AA:97:C6:0E:26:54:F0:83:3F:AC:CA:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/991F9EF30E0F0974AA97C60E2654F0833FACCA1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/1/3139312e362e3136342e302f32342d3234203d3e20323633313634.roa
Signing time:             Sun 07 Apr 2024 22:17:56 +0000
ROA not before:           Sun 07 Apr 2024 22:12:56 +0000
ROA not after:            Sun 06 Apr 2025 22:17:56 +0000
asID:                     263164
IP address blocks:        191.6.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c4:bb:12:de:ed:1b:b2:7f:2b:d7:a0:02:ad:63:b2:5e:49:0c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991F9EF30E0F0974AA97C60E2654F0833FACCA1B
        Validity
            Not Before: Apr  7 22:12:56 2024 GMT
            Not After : Apr  6 22:17:56 2025 GMT
        Subject: CN=8C8FA295C34DF156D3058A51FF9E413DC810807A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:c6:08:53:1e:10:eb:e1:ca:d6:5d:70:fa:
                    ee:9d:74:fd:7f:ec:a7:a9:56:87:92:b6:7c:d1:51:
                    e5:65:93:4a:4a:64:44:0c:99:f9:f8:b8:8c:01:c1:
                    4f:4d:80:c3:97:27:ad:1e:ab:d8:12:a0:0f:23:a8:
                    d4:91:77:80:03:9d:cd:ca:53:1c:ce:b2:35:21:24:
                    f1:19:b0:6c:43:5e:61:7f:ac:4c:68:58:be:91:70:
                    f5:f1:bd:24:2f:88:e2:7f:78:d2:ac:78:05:83:6b:
                    fd:80:5b:81:3f:2a:35:ce:8f:ca:84:c5:ef:73:43:
                    f9:88:ed:0b:43:b3:b3:db:40:5e:62:a0:c2:fd:9b:
                    d5:2c:d3:6b:75:6f:26:46:af:b0:ea:67:a9:1e:2c:
                    75:e6:59:c3:70:84:fa:16:fe:d1:57:59:49:f2:03:
                    2b:42:91:3f:38:11:c3:89:e8:49:54:42:ea:7f:aa:
                    90:9f:c4:62:f4:b7:24:1e:49:dc:73:7e:27:dd:6e:
                    fe:4f:c6:47:49:86:26:07:cf:8f:e4:51:40:84:91:
                    fa:be:a1:49:12:42:e1:e5:d1:8d:6e:a9:e4:61:8b:
                    35:4c:a6:d3:c2:0d:94:a5:e2:ea:6a:30:bb:ab:a4:
                    68:48:e7:0c:ee:4e:0e:db:7d:84:5a:16:1a:15:3d:
                    f1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8F:A2:95:C3:4D:F1:56:D3:05:8A:51:FF:9E:41:3D:C8:10:80:7A
            X509v3 Authority Key Identifier:
                keyid:99:1F:9E:F3:0E:0F:09:74:AA:97:C6:0E:26:54:F0:83:3F:AC:CA:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/1/991F9EF30E0F0974AA97C60E2654F0833FACCA1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/991F9EF30E0F0974AA97C60E2654F0833FACCA1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/1/3139312e362e3136342e302f32342d3234203d3e20323633313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:d8:03:95:16:46:d6:a7:0f:d7:26:8b:a4:0f:90:01:a1:b3:
         8d:ff:59:9d:9b:24:bc:fd:54:77:8b:26:76:2b:13:0f:93:13:
         b2:f3:04:32:89:60:45:d6:93:2e:f6:7c:87:77:90:69:e8:ef:
         1d:f1:05:f6:e6:41:13:25:ca:5b:ba:bf:12:b1:7d:21:f9:ed:
         8b:8e:0e:93:13:d1:34:e6:50:7f:47:58:9b:b5:30:4f:ed:53:
         04:97:2b:b7:b1:2d:71:65:ce:0b:fa:5c:1d:6d:12:52:e0:9b:
         51:2b:58:cb:90:a0:b8:1d:b6:b1:37:d2:db:c5:aa:d4:30:7f:
         2f:6f:36:23:66:11:5e:2e:db:66:4e:bf:c0:69:35:b5:71:78:
         ff:39:29:ba:23:e2:4d:0a:04:48:4a:f7:e0:43:6b:fa:1d:b2:
         c2:79:27:a8:f2:fd:68:a7:40:47:9f:33:36:0b:f2:a9:cd:57:
         15:3f:6a:4b:b3:3d:04:57:5c:a1:9a:b5:1f:c7:aa:49:22:e3:
         06:78:e3:35:3f:d2:65:82:b9:ae:71:a8:76:26:7b:9a:70:05:
         db:da:ef:31:49:36:77:50:a8:0e:74:8e:7b:7e:0e:3e:41:3b:
         ea:c0:7b:4a:9a:13:e7:e8:ff:3d:11:80:c3:87:9d:9b:27:91:
         2c:30:0c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org