Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e342e302f32332d3234203d3e20323633333436.roa
File:                     3139312e33372e342e302f32332d3234203d3e20323633333436.roa (raw, json)
Hash identifier:          N0fNegWRKWu8a1y3NvIvuZ43kS967zJ719g4chnU8/g=
Subject key identifier:   ED:7E:53:D6:BE:0F:3F:78:C5:19:1D:FD:B1:08:BB:44:D9:96:F9:0A
Certificate issuer:       /CN=185722717910A275EA79C2036E6E78AA39C75E37
Certificate serial:       79628ACF92432CC0FA08073C4FA2AF716D6249F4
Authority key identifier: 18:57:22:71:79:10:A2:75:EA:79:C2:03:6E:6E:78:AA:39:C7:5E:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/185722717910A275EA79C2036E6E78AA39C75E37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e342e302f32332d3234203d3e20323633333436.roa
Signing time:             Fri 08 Mar 2024 14:24:00 +0000
ROA not before:           Fri 08 Mar 2024 14:19:00 +0000
ROA not after:            Fri 07 Mar 2025 14:24:00 +0000
asID:                     263346
IP address blocks:        191.37.4.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:62:8a:cf:92:43:2c:c0:fa:08:07:3c:4f:a2:af:71:6d:62:49:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185722717910A275EA79C2036E6E78AA39C75E37
        Validity
            Not Before: Mar  8 14:19:00 2024 GMT
            Not After : Mar  7 14:24:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:17:fa:a9:84:83:c9:21:5f:1c:ce:7b:41:6e:
                    d9:f6:71:8d:34:8d:c0:2b:db:2b:ec:91:54:18:f7:
                    06:f6:fa:1f:fb:66:1d:26:8a:e9:e9:33:eb:e1:40:
                    7e:a2:f1:be:53:13:83:3c:2c:6a:dc:aa:0b:f8:5c:
                    6f:81:d8:c6:1e:0f:b4:48:26:d8:eb:11:80:90:3a:
                    11:3b:8a:8f:19:bf:1f:c5:03:5f:6d:83:aa:eb:19:
                    10:cd:d8:b4:b5:ba:31:c8:c9:c5:2d:cc:10:0c:2e:
                    14:e6:e0:01:db:b1:57:90:4e:e5:da:22:6a:ba:c7:
                    fe:cd:50:d4:9a:bd:d2:45:dc:5e:25:85:42:72:57:
                    98:6a:7a:b3:a4:12:e2:2c:69:f3:5e:bd:90:4d:fc:
                    47:fb:54:30:47:49:6e:b0:2e:64:25:6c:6d:ea:d8:
                    a6:39:97:3b:26:2a:a7:14:1f:fa:93:8e:d6:5a:9b:
                    a5:41:b0:58:90:a6:00:7f:89:48:93:07:d9:d9:40:
                    4e:2d:04:e8:6b:7e:4f:69:61:5f:49:c6:d1:42:93:
                    98:4d:47:bc:45:c6:95:7a:35:51:83:cc:5f:02:16:
                    fc:6e:bf:e8:28:e7:3d:fa:79:2c:b9:34:28:52:1b:
                    e2:45:08:96:21:bb:00:0f:d8:68:14:5f:53:05:8c:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7E:53:D6:BE:0F:3F:78:C5:19:1D:FD:B1:08:BB:44:D9:96:F9:0A
            X509v3 Authority Key Identifier:
                keyid:18:57:22:71:79:10:A2:75:EA:79:C2:03:6E:6E:78:AA:39:C7:5E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/185722717910A275EA79C2036E6E78AA39C75E37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/185722717910A275EA79C2036E6E78AA39C75E37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e342e302f32332d3234203d3e20323633333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:aa:4b:f2:ec:10:d2:aa:e9:31:0b:b6:a2:7f:e8:f6:5c:20:
         15:3b:17:38:b6:d9:79:79:3f:b5:4c:9c:6c:22:54:3d:91:d6:
         a1:7c:c5:fd:c8:65:79:21:22:47:c3:80:60:d0:87:1d:2c:f0:
         1e:5f:73:e2:a5:57:ed:5a:17:0d:e0:89:70:9b:ef:b0:25:c5:
         e6:78:41:ea:fc:df:2c:4b:98:44:9c:10:23:a5:79:f9:f3:47:
         11:2c:0d:da:2d:f8:95:fc:72:f7:bc:28:fd:41:dc:32:28:86:
         4f:93:90:39:2b:75:61:f9:50:e8:57:e9:15:b9:a5:c5:cc:b3:
         29:41:21:bc:5d:5c:02:c6:19:aa:4a:71:79:28:5a:44:78:9b:
         4f:1c:e2:32:7c:ec:a5:24:e2:22:ae:50:67:3c:b0:ce:76:56:
         3e:d7:35:80:32:69:80:47:93:23:ca:61:b2:18:4c:e8:fa:a1:
         b0:5b:ea:00:28:fa:95:c1:6f:90:d0:02:1e:da:e3:28:a6:a5:
         be:81:f5:91:47:93:0a:ae:43:41:76:1f:58:c9:9e:3a:ec:5c:
         74:55:eb:0e:85:eb:bc:b0:d6:c5:36:26:56:d6:b7:17:15:6c:
         24:f4:b7:a3:c6:e1:a4:81:91:32:1b:ed:25:a3:03:67:49:29:
         f9:25:ca:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org