Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa
File:                     3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (raw, json)
Hash identifier:          ZF8s3w2+wF5GGrKyXLKKMiP1NDz5n4/MxzHldFC7Bdk=
Subject key identifier:   1D:6F:DE:43:E4:19:03:9B:4B:E1:57:11:79:F6:B7:51:1D:E0:9A:7F
Certificate issuer:       /CN=0031EE5AFB733F39AED0585DB03F97D7C8F34A4D
Certificate serial:       11A32F3692E38BACFF3FE42B0111EAD21650ABEB
Authority key identifier: 00:31:EE:5A:FB:73:3F:39:AE:D0:58:5D:B0:3F:97:D7:C8:F3:4A:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0031EE5AFB733F39AED0585DB03F97D7C8F34A4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa
Signing time:             Thu 21 Sep 2023 13:38:00 +0000
ROA not before:           Thu 21 Sep 2023 13:33:00 +0000
ROA not after:            Thu 19 Sep 2024 13:38:00 +0000
asID:                     263470
IP address blocks:        191.242.48.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a3:2f:36:92:e3:8b:ac:ff:3f:e4:2b:01:11:ea:d2:16:50:ab:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0031EE5AFB733F39AED0585DB03F97D7C8F34A4D
        Validity
            Not Before: Sep 21 13:33:00 2023 GMT
            Not After : Sep 19 13:38:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2c:b6:11:cc:d5:03:50:d8:06:06:e7:31:42:
                    3f:bf:2e:8c:a3:2a:a6:a4:7c:7f:82:a6:a1:e6:0a:
                    b2:c7:b4:e3:58:9e:12:dd:bd:35:e8:58:44:ed:3e:
                    44:dd:bb:ff:5c:a1:38:ab:fc:25:9c:07:be:53:71:
                    5d:37:e2:34:2e:fa:06:83:26:54:47:8a:17:03:86:
                    60:87:f9:c8:5b:36:03:99:44:07:26:9d:a5:4d:60:
                    e0:bf:6f:5e:ed:10:da:4d:f8:7d:0a:bd:4b:69:e4:
                    91:bd:d0:15:be:a4:c2:a3:56:4e:b2:78:3b:d0:38:
                    38:01:90:74:9b:ed:7e:c6:10:47:a6:85:0e:ed:80:
                    0b:41:9b:74:35:69:ee:4a:5a:c4:d7:5e:b9:11:1e:
                    93:ed:49:20:61:06:f6:c2:b9:89:b8:8f:5a:b7:62:
                    63:e5:d7:ab:da:bd:92:0b:41:3f:ad:84:e6:91:26:
                    4c:c6:83:f2:d7:43:dd:b2:27:63:c5:46:a2:bc:c8:
                    07:ca:1e:08:4f:fa:2a:56:6c:c4:b0:3c:c8:8b:97:
                    4e:2f:7b:e3:bd:3b:52:59:d1:6a:20:1e:da:90:cf:
                    a5:7d:ee:73:d9:85:f0:0d:60:7f:84:2c:c1:db:83:
                    05:87:fd:d4:aa:5a:64:4a:93:0c:98:3d:8e:5a:2c:
                    df:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6F:DE:43:E4:19:03:9B:4B:E1:57:11:79:F6:B7:51:1D:E0:9A:7F
            X509v3 Authority Key Identifier:
                keyid:00:31:EE:5A:FB:73:3F:39:AE:D0:58:5D:B0:3F:97:D7:C8:F3:4A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/0031EE5AFB733F39AED0585DB03F97D7C8F34A4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0031EE5AFB733F39AED0585DB03F97D7C8F34A4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         98:9e:0d:78:3d:ac:4b:b8:b9:28:68:e6:21:da:98:09:33:ba:
         ba:14:7e:e3:96:9d:31:06:4f:7d:ff:1b:ca:a6:52:eb:ed:bc:
         3d:e7:d6:6a:e2:85:e2:4d:7c:47:f2:91:72:f6:6c:c1:4f:07:
         9f:96:6c:c4:fa:36:86:36:f8:62:bb:69:7a:bb:a2:b4:bd:7e:
         c4:ff:71:b6:42:56:87:89:45:48:b0:b4:06:55:3d:7f:a2:fd:
         ca:71:e6:23:be:41:fb:78:dd:ea:2c:db:47:6c:e8:a7:38:f5:
         85:15:59:41:8d:e2:44:8b:40:01:7f:df:8f:a1:72:32:94:6d:
         64:d9:62:77:a0:45:f7:dc:65:29:79:de:40:66:59:6d:d7:e7:
         62:d5:4d:3a:3e:8a:c5:31:d0:87:53:fe:28:be:de:99:4b:e9:
         93:20:13:a3:21:ec:d9:63:2e:eb:ac:f8:56:97:86:c4:d5:0d:
         70:f7:25:6a:cc:fc:e5:d9:0d:7e:b5:1b:58:d3:09:79:04:c4:
         58:11:e0:1b:c2:80:0c:3f:3a:a4:b9:cf:70:02:91:8b:e1:c5:
         52:08:2d:0e:2a:80:74:49:d2:17:4b:81:dc:c8:e4:a1:fd:6e:
         12:12:21:cc:18:35:62:3f:b3:8c:4f:e1:e3:35:7a:85:36:bb:
         99:e7:25:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:32 2024 by rpki-client on console-ams.rpki-client.org