Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130342e302f32342d3234203d3e20323633343736.roa
File:                     3139312e3234322e3130342e302f32342d3234203d3e20323633343736.roa (raw, json)
Hash identifier:          wkj8+WLayb95Wo7ZPDWmorsIIe048CTgNfNVXpioURA=
Subject key identifier:   24:4A:51:0C:D9:2E:4B:19:27:80:AA:04:85:DC:FD:B0:77:1C:DB:B9
Certificate issuer:       /CN=B9230901E8518858475596651A1A02C3407F0B17
Certificate serial:       20334417BAB49F7D58A9F5187518BFBACCC304CA
Authority key identifier: B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130342e302f32342d3234203d3e20323633343736.roa
Signing time:             Thu 29 Jun 2023 15:11:18 +0000
ROA not before:           Thu 29 Jun 2023 15:06:18 +0000
ROA not after:            Thu 27 Jun 2024 15:11:18 +0000
asID:                     263476
IP address blocks:        191.242.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:33:44:17:ba:b4:9f:7d:58:a9:f5:18:75:18:bf:ba:cc:c3:04:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9230901E8518858475596651A1A02C3407F0B17
        Validity
            Not Before: Jun 29 15:06:18 2023 GMT
            Not After : Jun 27 15:11:18 2024 GMT
        Subject: CN=244A510CD92E4B192780AA0485DCFDB0771CDBB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:e5:76:68:31:00:ef:d1:a3:4f:0b:bb:a6:
                    39:85:d9:52:6a:96:0d:11:6b:51:f0:d7:82:f3:08:
                    a9:5d:fc:84:d4:c2:09:68:58:53:72:ad:7a:51:23:
                    05:8e:df:ee:4c:bc:c7:cc:d2:31:b6:de:29:20:e4:
                    72:f0:5c:32:b2:ea:82:01:19:40:6d:d5:d0:80:b4:
                    c3:6d:ff:81:af:1c:a9:58:a4:ba:90:5b:f3:c7:26:
                    f8:3c:4d:31:93:2e:1e:d5:0d:1a:02:73:18:7c:63:
                    b5:4f:b7:43:4c:5e:ca:8b:b3:2b:39:1b:a4:d5:8f:
                    02:09:44:ed:cc:13:dd:dc:20:b3:99:45:ef:87:43:
                    24:ae:c3:80:e3:c4:e8:03:62:75:ac:dc:e1:0d:d1:
                    ab:28:2f:12:18:28:94:7b:83:8c:a7:d0:92:fc:7c:
                    2f:8e:cc:79:c4:0c:3b:d8:f0:6c:71:74:cd:ae:67:
                    02:25:61:5d:56:cb:a3:c2:21:7e:57:71:25:4d:f6:
                    e9:01:99:4a:ef:58:87:56:ad:6e:35:0e:be:6f:a3:
                    51:1f:8a:cc:32:6b:5a:81:20:61:19:01:c2:cc:5b:
                    91:86:8d:41:b8:6c:98:39:b0:5f:ac:34:eb:98:f2:
                    f1:f3:c3:fe:f3:fc:69:1c:1d:9d:32:16:90:91:64:
                    84:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4A:51:0C:D9:2E:4B:19:27:80:AA:04:85:DC:FD:B0:77:1C:DB:B9
            X509v3 Authority Key Identifier:
                keyid:B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/B9230901E8518858475596651A1A02C3407F0B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130342e302f32342d3234203d3e20323633343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:23:1f:64:17:c3:25:f2:e7:d5:c0:ad:39:9a:1f:f1:3c:84:
         c4:ad:7c:81:e7:8a:37:5e:19:e3:c9:ea:64:69:fe:d0:c4:c6:
         fc:e6:26:7a:f7:53:fe:77:30:70:b6:9b:54:29:5e:b8:a9:94:
         e2:2b:5f:cd:b3:6a:d2:5f:97:50:71:b4:18:b3:2a:12:d2:a9:
         be:cd:0f:6f:ac:3a:9a:3a:16:be:56:21:45:16:5a:c0:44:d7:
         b3:66:d0:20:01:83:f3:24:c4:89:d6:9f:c2:c1:3b:f1:0c:2e:
         b4:d8:68:eb:9a:79:4f:fe:37:99:1f:46:26:f6:fb:04:33:0b:
         c5:b3:28:81:7c:36:70:00:0c:da:49:a4:88:10:35:62:66:db:
         0e:3b:a5:43:52:65:0d:c0:a7:ca:fe:4d:77:2b:b0:1a:1c:b4:
         36:c2:9a:bb:b3:3b:b9:9b:45:e2:de:88:54:0f:cf:3e:3c:38:
         19:18:70:cf:1a:8f:5b:39:b0:e9:f9:f3:b7:19:a2:98:81:56:
         7e:d6:26:d7:47:5a:bf:3c:d6:96:fe:18:85:65:1e:b8:f4:53:
         33:70:2f:f9:5a:5e:aa:ba:cf:e1:ec:b5:af:84:df:6a:f0:19:
         96:38:25:3b:ac:b5:ae:ce:0e:ee:e7:be:f2:8a:a3:2b:77:33:
         13:c8:3c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org