Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3139312e3234312e34302e302f32312d3231203d3e20323632373236.roa
File:                     3139312e3234312e34302e302f32312d3231203d3e20323632373236.roa (raw, json)
Hash identifier:          P8m8vWKlpndjL7525kmJRB45izMhjgy6bJEn9vrOI9I=
Subject key identifier:   4A:E3:8B:9F:E7:B4:E4:8B:90:5C:14:17:EF:64:85:15:10:50:70:A8
Certificate issuer:       /CN=58FD4AA6B4B9017587381627CB787301DA20B818
Certificate serial:       6578F2D42DAC172D3DED6739A7A27EA3EA953EB7
Authority key identifier: 58:FD:4A:A6:B4:B9:01:75:87:38:16:27:CB:78:73:01:DA:20:B8:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58FD4AA6B4B9017587381627CB787301DA20B818.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3139312e3234312e34302e302f32312d3231203d3e20323632373236.roa
Signing time:             Thu 06 Oct 2022 17:39:46 +0000
ROA not before:           Thu 06 Oct 2022 17:34:46 +0000
ROA not after:            Thu 05 Oct 2023 17:39:46 +0000
asID:                     262726
IP address blocks:        191.241.40.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:78:f2:d4:2d:ac:17:2d:3d:ed:67:39:a7:a2:7e:a3:ea:95:3e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58FD4AA6B4B9017587381627CB787301DA20B818
        Validity
            Not Before: Oct  6 17:34:46 2022 GMT
            Not After : Oct  5 17:39:46 2023 GMT
        Subject: CN=4AE38B9FE7B4E48B905C1417EF648515105070A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:ff:9d:2a:64:ef:bd:8f:f1:93:f3:88:90:
                    f1:8f:11:2f:8f:3c:03:fb:cc:04:e2:59:fe:c2:b2:
                    67:4b:66:26:66:3d:33:9b:f8:5a:8d:7d:ca:4a:af:
                    4b:b0:5e:0d:de:e5:3f:63:62:bc:23:d1:6c:6b:a0:
                    99:5a:97:d8:42:8d:2d:40:d3:3f:d5:0b:ad:22:f6:
                    e7:2d:88:3d:63:a9:27:dd:84:f6:83:d3:66:2e:09:
                    9e:ad:59:4e:e8:12:b1:76:a8:98:1d:a5:20:2f:af:
                    99:b4:2b:e8:db:5a:06:4d:7a:68:84:b6:5b:c2:af:
                    b5:18:3d:13:25:de:8a:dd:72:48:62:94:9a:15:95:
                    4e:cc:9d:d9:27:db:7f:c7:1f:5e:7d:1f:f7:08:2c:
                    83:b4:46:cd:3b:4a:61:14:98:e2:40:28:00:f0:b8:
                    ef:72:b4:21:10:9c:be:46:e6:5f:e9:c4:96:d5:fc:
                    1e:a9:c2:59:d3:0e:a3:25:4b:ec:84:16:13:37:01:
                    2f:37:d3:a0:79:36:23:ca:bd:5e:a2:01:82:77:52:
                    d5:98:95:0b:a9:0c:67:c1:84:ad:6e:7b:df:96:60:
                    07:5e:36:a6:12:d7:3e:7c:7d:9e:3c:4a:f3:25:02:
                    a8:e3:15:e9:04:e1:c2:dc:77:5f:4e:3a:e9:2d:23:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E3:8B:9F:E7:B4:E4:8B:90:5C:14:17:EF:64:85:15:10:50:70:A8
            X509v3 Authority Key Identifier:
                keyid:58:FD:4A:A6:B4:B9:01:75:87:38:16:27:CB:78:73:01:DA:20:B8:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/58FD4AA6B4B9017587381627CB787301DA20B818.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58FD4AA6B4B9017587381627CB787301DA20B818.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3139312e3234312e34302e302f32312d3231203d3e20323632373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:3c:0f:37:49:65:9d:8c:63:22:b6:55:5d:f9:c3:37:63:9f:
         d1:2d:51:75:53:e4:6a:5e:8a:c7:7d:ca:6e:d9:43:65:8a:b1:
         8d:dd:95:f0:1d:c8:d1:f5:c0:7e:37:64:44:56:60:e8:61:96:
         74:62:c3:b1:d0:39:27:f3:27:ac:f6:98:a5:40:2e:e3:47:aa:
         b5:ae:d2:d4:7a:ec:cc:94:2a:c9:93:37:9e:12:6c:a3:16:c2:
         a0:5a:f7:fe:3b:6c:69:2f:2c:24:a1:0f:f1:ad:41:26:9c:86:
         63:f8:f2:0e:92:5e:18:25:bc:48:e2:ad:d1:ea:9a:78:47:97:
         44:66:86:05:26:21:e9:f2:69:a5:5b:0d:32:83:ec:b3:2b:75:
         65:68:f1:14:67:50:db:d3:f3:9f:70:16:8b:16:a7:25:1e:cd:
         da:3b:f8:85:15:bf:ed:0f:10:4d:2a:2f:a9:14:15:15:9d:b3:
         d1:fe:bb:d3:c9:6f:e7:5c:eb:97:71:89:4c:ff:13:9a:8d:e7:
         ac:87:ca:60:c3:a7:e6:41:5a:c5:9f:bd:c1:24:2c:0c:70:ae:
         15:6c:9d:86:01:27:68:69:7f:93:b5:48:1b:68:c9:8a:9e:b3:
         72:e3:66:9d:3c:92:cd:03:f6:64:74:aa:fb:6b:fc:10:14:06:
         be:c7:d0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org