Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230362e302f32342d3234203d3e20323636323432.roa
File:                     3139322e3134352e3230362e302f32342d3234203d3e20323636323432.roa (raw, json)
Hash identifier:          BByU99l8yKw9/yDdPfTWCULF36eDhKpxrysRmiz0Cfg=
Subject key identifier:   BA:84:15:19:E0:7E:EE:62:F3:67:F3:2C:FB:8E:6A:42:DD:46:AB:CC
Certificate issuer:       /CN=1547EB99992D867A7DC9C9932309620DED3EB049
Certificate serial:       79B0BE9C863CCF08EB3C05DB88C86EFC982FF5A8
Authority key identifier: 15:47:EB:99:99:2D:86:7A:7D:C9:C9:93:23:09:62:0D:ED:3E:B0:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1547EB99992D867A7DC9C9932309620DED3EB049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230362e302f32342d3234203d3e20323636323432.roa
Signing time:             Fri 22 Mar 2024 13:08:10 +0000
ROA not before:           Fri 22 Mar 2024 13:03:10 +0000
ROA not after:            Fri 21 Mar 2025 13:08:10 +0000
asID:                     266242
IP address blocks:        192.145.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b0:be:9c:86:3c:cf:08:eb:3c:05:db:88:c8:6e:fc:98:2f:f5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1547EB99992D867A7DC9C9932309620DED3EB049
        Validity
            Not Before: Mar 22 13:03:10 2024 GMT
            Not After : Mar 21 13:08:10 2025 GMT
        Subject: CN=BA841519E07EEE62F367F32CFB8E6A42DD46ABCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:a8:29:2d:0f:e0:10:64:0c:b1:bd:95:d7:
                    ab:aa:38:fd:74:0f:e5:72:eb:18:fb:07:a9:1b:7b:
                    86:36:2c:d5:64:c4:0d:70:4f:63:a5:54:9f:c9:0b:
                    f8:70:86:60:07:d2:63:ec:34:19:bf:ac:ce:f4:0f:
                    99:7e:75:d1:66:6b:ac:8a:70:a7:d2:14:55:0f:12:
                    6f:9d:2f:e3:38:8e:62:e0:09:86:de:d8:ac:01:01:
                    35:5a:8c:8f:bf:d2:26:f5:37:23:c3:22:8c:84:0d:
                    22:83:64:48:7f:ae:af:62:a0:c6:11:92:ba:a2:ef:
                    c8:15:d2:09:ed:35:58:a0:a1:bc:4a:1d:e5:ae:8d:
                    ec:41:5f:1f:7a:d5:9a:d5:cf:5a:7c:0f:22:91:50:
                    a9:7b:c5:94:57:c5:e7:3e:3d:01:10:8d:a7:3e:b2:
                    33:b2:ee:e2:04:61:9d:62:be:ba:9f:4d:50:bc:fa:
                    fe:63:02:bc:69:b6:ae:a6:19:ff:5e:6a:52:d6:53:
                    8e:cb:15:f7:82:bf:69:e4:8b:08:5f:a6:34:39:94:
                    0a:40:a1:36:9c:be:85:d8:9c:55:ae:88:37:a4:ee:
                    59:66:c6:0f:e3:69:7f:00:11:77:5c:3f:62:1f:3f:
                    13:c7:64:ed:f3:9a:30:67:9e:d9:24:4f:d3:0f:26:
                    6b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:84:15:19:E0:7E:EE:62:F3:67:F3:2C:FB:8E:6A:42:DD:46:AB:CC
            X509v3 Authority Key Identifier:
                keyid:15:47:EB:99:99:2D:86:7A:7D:C9:C9:93:23:09:62:0D:ED:3E:B0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/1547EB99992D867A7DC9C9932309620DED3EB049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1547EB99992D867A7DC9C9932309620DED3EB049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230362e302f32342d3234203d3e20323636323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:6c:3a:65:31:85:8e:ad:6e:db:2d:2c:63:0e:9a:56:4e:a5:
         d6:0a:75:27:a1:10:16:5c:8c:9c:22:b9:c0:20:d9:d1:0f:35:
         5c:2c:48:7b:0f:1c:c9:13:30:14:7d:0f:db:08:ce:eb:58:37:
         2e:e4:15:02:a1:bd:ca:1c:d9:77:a2:b2:7c:b9:62:37:30:c6:
         6f:66:e3:2b:dd:60:dc:95:38:69:e2:5e:93:16:5c:51:d1:39:
         24:d2:a9:46:f0:16:8d:5b:88:3f:fa:66:13:fc:9f:50:6f:d9:
         08:36:8d:d3:0a:c4:0b:cf:7e:20:c0:1c:18:3c:1d:e2:0a:b4:
         1e:46:76:70:51:67:92:f3:2a:3e:34:c8:32:05:ab:9e:70:da:
         86:6d:59:5f:4a:f7:b9:c6:20:ed:ef:a7:41:04:bc:2d:5b:fd:
         0b:29:23:8f:33:fb:6e:26:8e:fd:8c:ce:a4:31:8d:49:03:ce:
         78:9d:68:f9:79:ec:29:f4:94:b5:85:a4:19:58:26:e0:d5:e1:
         57:5b:e4:3c:b7:f7:72:94:59:69:e3:7d:b3:2f:eb:09:a9:08:
         41:19:f0:bb:b1:b8:f2:0c:7e:be:c6:e6:de:a2:10:c2:04:d1:
         d8:24:28:18:eb:73:20:07:48:5e:53:f8:95:11:f1:16:4e:24:
         a0:a5:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org