Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230362e302f32332d3233203d3e20323636323432.roa
File:                     3139322e3134352e3230362e302f32332d3233203d3e20323636323432.roa (raw, json)
Hash identifier:          rC0KaIS6GJPTGSkAex3ItK8jbASIYhQ67IpoWw7ZLMo=
Subject key identifier:   FA:57:65:6F:FA:6B:FD:6F:6E:FD:AE:65:F9:67:9F:70:D4:7D:AF:E3
Certificate issuer:       /CN=1547EB99992D867A7DC9C9932309620DED3EB049
Certificate serial:       285B6B3CFC4C4ACBB99C105B5FEBA04AD0C59363
Authority key identifier: 15:47:EB:99:99:2D:86:7A:7D:C9:C9:93:23:09:62:0D:ED:3E:B0:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1547EB99992D867A7DC9C9932309620DED3EB049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230362e302f32332d3233203d3e20323636323432.roa
Signing time:             Fri 22 Mar 2024 13:08:07 +0000
ROA not before:           Fri 22 Mar 2024 13:03:07 +0000
ROA not after:            Fri 21 Mar 2025 13:08:07 +0000
asID:                     266242
IP address blocks:        192.145.206.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5b:6b:3c:fc:4c:4a:cb:b9:9c:10:5b:5f:eb:a0:4a:d0:c5:93:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1547EB99992D867A7DC9C9932309620DED3EB049
        Validity
            Not Before: Mar 22 13:03:07 2024 GMT
            Not After : Mar 21 13:08:07 2025 GMT
        Subject: CN=FA57656FFA6BFD6F6EFDAE65F9679F70D47DAFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:56:6b:60:20:86:97:54:85:0d:44:8a:d5:
                    3b:cf:fa:b3:d7:f2:de:d3:01:ea:04:8e:43:14:3d:
                    45:52:35:fb:ea:f6:0a:ff:50:c9:50:9c:0d:1d:38:
                    a4:41:27:46:3c:95:cd:37:ee:14:a5:5a:fa:d7:e3:
                    af:4e:0f:71:0f:92:cc:d4:e1:75:82:1e:21:fe:9b:
                    51:35:0c:bf:05:e3:e2:c3:8f:27:82:58:b9:e3:b7:
                    db:12:9f:27:7f:b9:91:c6:d8:e9:0e:cf:f1:fc:26:
                    83:09:e0:a3:3f:a8:cf:cc:12:20:55:c3:9e:a9:d6:
                    5f:91:88:2c:6b:56:f9:24:3b:2f:8b:68:3b:4e:4f:
                    ad:59:14:c1:f4:f1:98:87:53:ac:c7:c0:2f:3a:f5:
                    81:94:dc:52:0a:16:6f:69:de:f0:c9:82:84:ea:16:
                    22:8b:41:3c:12:76:d2:6f:25:aa:63:f0:6d:ca:bb:
                    9c:9e:4d:8f:5e:4f:29:c3:9c:a4:5a:e9:c3:b1:e9:
                    91:77:9f:37:64:f7:52:87:a2:1d:b4:73:b1:19:df:
                    5f:a4:fe:69:53:9d:50:81:05:a5:65:22:fc:3e:8e:
                    82:fd:08:4b:3a:7f:c6:55:b7:0c:1a:aa:e4:3a:95:
                    78:7d:0c:21:06:9f:08:35:7e:09:1e:15:14:d9:48:
                    89:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:57:65:6F:FA:6B:FD:6F:6E:FD:AE:65:F9:67:9F:70:D4:7D:AF:E3
            X509v3 Authority Key Identifier:
                keyid:15:47:EB:99:99:2D:86:7A:7D:C9:C9:93:23:09:62:0D:ED:3E:B0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/1547EB99992D867A7DC9C9932309620DED3EB049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1547EB99992D867A7DC9C9932309620DED3EB049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230362e302f32332d3233203d3e20323636323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:25:6d:62:8a:4d:83:cb:d3:e2:ff:15:fc:ad:fb:52:df:f0:
         73:12:da:6e:ae:32:50:cb:c5:ef:c5:3c:23:38:79:78:78:e7:
         ab:45:13:4c:bf:7c:81:2c:48:97:36:2c:01:93:0c:46:62:f4:
         26:66:de:a0:b9:d9:aa:60:39:8e:33:3a:a5:aa:33:8e:d7:9f:
         ef:4e:80:b1:36:61:52:69:99:21:d5:0b:22:76:ae:86:a9:b1:
         e9:e1:0e:28:fb:ce:99:69:5e:1f:97:8f:47:f3:d7:aa:8a:ec:
         21:e7:71:2a:96:4c:22:83:3e:48:10:ef:ec:9f:c5:49:19:1e:
         bf:5e:49:9c:a4:24:9f:89:e9:2c:70:df:93:51:d8:65:fd:c0:
         df:3f:68:2f:a9:52:31:fb:4c:10:46:34:e5:de:43:d6:57:96:
         68:df:1f:bd:a2:9c:cd:0f:7b:4c:f2:d1:b2:97:ef:e5:f7:62:
         59:f6:5a:9c:94:aa:21:dd:82:26:c8:3d:41:74:6f:29:4b:b3:
         d7:22:9c:0d:95:09:26:95:c7:51:c6:31:08:66:eb:31:02:4f:
         72:be:51:ae:30:13:80:4a:62:94:3e:73:cf:2a:b6:fc:23:2a:
         4c:eb:89:81:8b:97:d1:bb:bf:19:7a:5a:0e:3e:d5:cf:91:98:
         b1:c1:86:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org