Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3139312e3234322e3137362e302f32302d3234203d3e20323633313531.roa
File:                     3139312e3234322e3137362e302f32302d3234203d3e20323633313531.roa (raw, json)
Hash identifier:          gkdR4irH6nnSDClUyrvAsy50uJbVFL8U9oE8EtgAQO4=
Subject key identifier:   62:51:F2:B8:23:D1:6D:9F:43:62:22:2D:48:4B:87:A7:D5:7B:36:06
Certificate issuer:       /CN=7BE95A26137B30C740C99DDD48DA6FEAD62905B1
Certificate serial:       3BE256E56EDD16DF7D2CEFC778CFF6554DB2E958
Authority key identifier: 7B:E9:5A:26:13:7B:30:C7:40:C9:9D:DD:48:DA:6F:EA:D6:29:05:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3139312e3234322e3137362e302f32302d3234203d3e20323633313531.roa
Signing time:             Sat 16 Sep 2023 18:37:25 +0000
ROA not before:           Sat 16 Sep 2023 18:32:25 +0000
ROA not after:            Sat 14 Sep 2024 18:37:25 +0000
asID:                     263151
IP address blocks:        191.242.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e2:56:e5:6e:dd:16:df:7d:2c:ef:c7:78:cf:f6:55:4d:b2:e9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE95A26137B30C740C99DDD48DA6FEAD62905B1
        Validity
            Not Before: Sep 16 18:32:25 2023 GMT
            Not After : Sep 14 18:37:25 2024 GMT
        Subject: CN=6251F2B823D16D9F4362222D484B87A7D57B3606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:b8:f1:39:5f:4f:6e:6a:0d:b0:c9:f4:bc:
                    c5:a5:58:2f:70:01:b0:76:6a:85:2d:2f:55:59:3b:
                    a8:40:24:e7:86:c8:b7:e3:a6:63:c2:31:ed:c4:81:
                    83:5b:ed:38:07:01:e5:2f:63:c4:03:7f:37:3f:e2:
                    59:f3:c8:24:73:50:6a:8e:c2:8d:72:f3:7e:ed:0f:
                    be:cc:46:46:bf:7a:c0:42:b0:b9:7f:69:21:a9:19:
                    28:89:62:d8:82:0d:ac:b5:5a:4e:c0:43:5d:88:4a:
                    ba:f5:08:f8:5e:6c:05:4c:15:09:de:64:b4:32:84:
                    2d:26:52:55:10:64:00:6d:87:21:eb:ff:94:a7:b7:
                    fc:e8:66:f8:df:da:ff:f1:19:e0:2b:e3:a4:76:bb:
                    fd:6d:10:4f:ab:02:1a:b4:bf:79:37:64:f1:f1:52:
                    c4:7f:6d:b2:b1:fb:60:76:9a:d0:ce:b0:41:9f:d4:
                    2a:79:c3:b3:bb:73:87:71:9a:e8:4b:34:4c:68:fe:
                    01:d2:a6:6b:ce:cc:a2:ae:1d:03:f1:7a:63:ce:15:
                    3d:07:57:f8:88:67:49:3d:97:49:f7:76:d5:7d:9c:
                    d8:c9:fd:ef:77:7a:a5:e5:e4:e2:4d:e8:3f:94:2c:
                    fd:28:55:d7:39:01:69:f0:43:a5:73:8d:0f:f8:9b:
                    34:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:51:F2:B8:23:D1:6D:9F:43:62:22:2D:48:4B:87:A7:D5:7B:36:06
            X509v3 Authority Key Identifier:
                keyid:7B:E9:5A:26:13:7B:30:C7:40:C9:9D:DD:48:DA:6F:EA:D6:29:05:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BE95A26137B30C740C99DDD48DA6FEAD62905B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3139312e3234322e3137362e302f32302d3234203d3e20323633313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:54:23:9b:ca:80:3b:33:3c:a4:8a:47:0c:1e:e8:2b:3d:e0:
         2f:fb:5c:5f:71:9e:8e:03:fb:cd:6c:8e:38:db:87:b5:72:46:
         45:aa:a5:f0:3f:1b:2f:72:2b:46:33:5d:3d:5b:c0:97:20:8e:
         9b:8c:d3:a0:90:4b:7c:bf:58:5d:71:7d:14:4c:13:6b:f8:89:
         f2:3f:f0:2e:39:27:14:60:72:18:92:b8:a4:ae:03:bd:fa:08:
         e0:ab:37:ac:2a:ec:41:ae:9f:5e:19:7a:f9:15:28:db:d7:ea:
         73:fd:e8:4f:0f:a8:9b:f1:fd:02:26:09:56:df:67:7e:60:7b:
         28:ed:bf:7a:17:ab:28:56:38:e5:c3:67:91:3d:b9:8a:30:10:
         c9:f1:93:09:eb:94:48:fc:d7:1a:fe:42:30:ea:7e:36:22:f3:
         0f:7b:06:b1:15:8e:09:97:bd:c2:03:1f:8f:2b:41:f5:05:79:
         f3:2a:28:81:91:4a:e3:32:a7:bf:b1:f8:66:1d:06:f8:d4:14:
         3b:7b:bf:35:9d:11:2c:be:04:c1:fa:8e:02:bb:d5:ac:35:5c:
         7d:e2:f4:6d:a9:b3:59:67:c5:ca:d2:a7:21:b2:25:a2:e6:59:
         5e:c8:d5:c7:99:15:e1:28:f8:7b:48:38:fc:b0:80:38:cb:52:
         8e:44:e7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:33 2024 by rpki-client on console-ams.rpki-client.org