Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139312e302f32342d3234203d3e20323730373136.roa
File:                     3138392e3132372e3139312e302f32342d3234203d3e20323730373136.roa (raw, json)
Hash identifier:          fFzokhfJKcq3lsoNQvbH9mTC/G8JyuPDKdrkMBKGW3g=
Subject key identifier:   8D:9E:34:D8:7D:CC:15:1E:3A:E2:CF:2B:94:D9:2D:1C:A0:CE:3B:0A
Certificate issuer:       /CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
Certificate serial:       591818944E128851D23FC6BD543305B472367471
Authority key identifier: 2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139312e302f32342d3234203d3e20323730373136.roa
Signing time:             Mon 24 Jul 2023 00:00:01 +0000
ROA not before:           Sun 23 Jul 2023 23:55:01 +0000
ROA not after:            Mon 22 Jul 2024 00:00:01 +0000
asID:                     270716
IP address blocks:        189.127.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:18:18:94:4e:12:88:51:d2:3f:c6:bd:54:33:05:b4:72:36:74:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
        Validity
            Not Before: Jul 23 23:55:01 2023 GMT
            Not After : Jul 22 00:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:a3:e0:2f:2d:78:09:6e:a7:28:9f:b4:63:
                    a9:3f:bf:50:65:6e:7f:98:3b:39:18:36:67:77:d1:
                    e1:b4:81:4e:cd:27:0a:2e:b9:28:a0:15:08:56:2a:
                    fa:0f:49:c8:04:83:3f:2d:5c:bd:d0:f4:72:cb:ae:
                    92:be:61:22:ab:d4:2e:1b:19:65:06:36:63:a1:dc:
                    5d:40:96:e4:a4:ae:94:b4:26:ba:5a:68:6b:bf:83:
                    19:ff:21:8e:fc:4e:6f:d0:55:10:86:be:d2:0f:be:
                    52:67:cd:bf:58:d4:70:5d:9c:1b:89:f0:e6:64:5f:
                    da:a5:57:f2:4f:56:6a:1c:6b:30:d3:96:9d:46:1b:
                    5a:ec:e3:85:f2:2f:b9:4f:c3:32:39:26:60:3a:98:
                    0d:83:68:bb:67:8a:50:18:a7:e4:14:37:df:d8:0f:
                    9b:cf:00:43:3a:66:93:83:d0:07:e7:ad:18:f4:ec:
                    16:76:d9:ab:c4:50:73:ff:dc:2a:2e:31:53:81:b6:
                    c2:b3:33:50:e8:b8:ac:15:b4:15:e7:72:7c:6a:92:
                    51:a1:4f:b3:1e:41:2d:d7:84:81:a9:22:17:5a:bf:
                    bb:ee:48:2e:04:4e:6f:db:ed:37:86:bd:4f:dd:2a:
                    23:24:fa:e8:92:3e:af:27:17:56:98:ed:9c:12:ae:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9E:34:D8:7D:CC:15:1E:3A:E2:CF:2B:94:D9:2D:1C:A0:CE:3B:0A
            X509v3 Authority Key Identifier:
                keyid:2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3139312e302f32342d3234203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:f7:62:9a:e0:10:da:fe:be:50:3b:bc:7e:97:6e:9c:76:d6:
         24:af:a9:e9:f5:26:b6:94:2e:52:f8:07:cd:7a:e0:c6:b6:17:
         9a:c8:ad:6b:32:3c:d3:13:c7:bd:a4:02:25:c4:fd:3f:8f:3a:
         cb:15:b2:b3:34:f5:ae:2d:10:1d:11:cc:d5:7a:d7:31:10:32:
         da:7d:d7:8a:f0:de:78:f4:dd:9e:ec:72:62:e5:0e:b4:7f:77:
         0f:4f:d2:88:bb:59:d2:4d:1d:a0:f4:0c:fe:bc:78:1b:38:f3:
         bf:61:ea:fc:7f:fc:db:8e:ab:c2:69:e4:ab:26:88:4c:75:86:
         24:25:f3:12:87:1a:a2:ba:15:30:29:af:fd:a3:bf:99:9f:3f:
         94:5e:15:de:1c:b4:2b:58:d8:26:47:d0:b1:e5:4d:7f:f3:8b:
         d6:58:8b:3a:09:68:3f:5c:29:b2:c6:bc:fa:ea:ec:46:9e:cf:
         77:23:bb:ef:fe:98:b5:d2:4d:18:ee:bb:6a:84:7b:76:27:70:
         ad:1c:2c:d5:c7:c0:41:49:f3:86:1e:9b:b8:07:51:41:89:64:
         53:ae:d3:59:2d:77:a6:a2:c7:91:0b:9b:7c:be:0d:32:7e:b1:
         38:6f:47:5e:6b:9c:da:d6:f5:9a:2e:a8:00:a2:50:c2:24:a9:
         c2:97:99:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org