Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130362e302f32342d3234203d3e20323633343736.roa
File:                     3139312e3234322e3130362e302f32342d3234203d3e20323633343736.roa (raw, json)
Hash identifier:          ACuBU2Ie3mtF/jlF3rUmwx4lsV1hNYqJqrifon2wE7w=
Subject key identifier:   8B:8B:AF:C5:41:4F:A9:78:6C:AE:16:69:2B:93:20:2C:1C:2E:6A:37
Certificate issuer:       /CN=B9230901E8518858475596651A1A02C3407F0B17
Certificate serial:       637CD233E372A74EE339481D9AFF63EB74BFA4C7
Authority key identifier: B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130362e302f32342d3234203d3e20323633343736.roa
Signing time:             Thu 29 Jun 2023 15:11:20 +0000
ROA not before:           Thu 29 Jun 2023 15:06:20 +0000
ROA not after:            Thu 27 Jun 2024 15:11:20 +0000
asID:                     263476
IP address blocks:        191.242.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7c:d2:33:e3:72:a7:4e:e3:39:48:1d:9a:ff:63:eb:74:bf:a4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9230901E8518858475596651A1A02C3407F0B17
        Validity
            Not Before: Jun 29 15:06:20 2023 GMT
            Not After : Jun 27 15:11:20 2024 GMT
        Subject: CN=8B8BAFC5414FA9786CAE16692B93202C1C2E6A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:2f:b0:64:a6:28:82:a2:13:10:51:f5:6d:
                    74:90:73:0e:ed:9e:f8:17:8b:b0:82:e1:59:c7:6f:
                    f4:b0:b7:d0:6e:3a:e2:46:b3:4a:c5:56:87:11:99:
                    15:55:72:e4:1b:25:12:9f:5f:55:8d:fd:0d:b1:da:
                    c0:ba:2b:db:cf:08:5c:54:e4:5f:f8:1e:49:16:8f:
                    9a:48:e3:71:2f:0b:11:b2:2e:8d:25:58:bc:f6:9a:
                    ac:1c:43:73:ec:5f:5b:01:f5:bd:01:19:c1:6d:a1:
                    e6:47:66:a0:9f:41:32:cf:c5:f2:7a:e4:ed:a4:d9:
                    a3:95:c3:88:31:41:e7:85:3a:00:e7:08:eb:c8:41:
                    df:8a:b7:a5:3d:88:23:44:6c:81:50:c8:f5:0b:53:
                    4b:61:ba:00:a3:56:e2:ea:cb:40:7c:1d:7d:27:e3:
                    ef:41:67:e0:1e:5e:52:06:73:d2:c1:84:7c:a7:2c:
                    95:81:f0:85:f9:ff:75:27:f1:f8:57:e6:7e:65:4c:
                    d5:c7:c0:70:5c:91:fc:d3:07:e8:fc:91:57:dd:67:
                    c8:3d:4e:69:f9:2d:78:f5:98:39:08:71:ce:26:77:
                    3f:32:03:98:3f:26:90:5f:7e:02:1f:b1:dd:b4:31:
                    ac:b9:ae:6b:f1:9f:98:b1:98:6d:39:f5:46:e0:36:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8B:AF:C5:41:4F:A9:78:6C:AE:16:69:2B:93:20:2C:1C:2E:6A:37
            X509v3 Authority Key Identifier:
                keyid:B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/B9230901E8518858475596651A1A02C3407F0B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130362e302f32342d3234203d3e20323633343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:28:fc:da:93:33:75:f4:c1:61:fa:7f:d8:6b:2d:3b:51:c4:
         19:7f:d5:2f:2d:fa:2d:bf:6a:3d:40:b1:32:0d:4a:ab:0d:07:
         ef:29:10:14:dd:ab:46:26:f9:6d:fc:e0:87:ae:a9:f6:07:b3:
         17:1a:10:ea:b5:b1:cd:dc:23:92:b1:f0:9f:ad:16:24:e3:a1:
         ed:07:e4:b5:7f:2b:d4:d0:17:95:e9:c6:c3:2c:c1:31:d1:21:
         b0:1b:8c:4a:87:e5:48:76:50:c4:b8:8a:90:b9:b0:0b:b1:d3:
         5d:b6:e6:37:b1:22:5f:15:60:98:ae:fd:27:3d:90:91:98:8d:
         2d:6e:c5:b9:5b:8a:8e:22:e0:d7:30:80:68:41:36:dd:ce:03:
         e2:9e:6a:7f:b9:44:9d:9c:13:ce:9c:b1:3e:6d:e3:23:65:e3:
         55:63:48:9e:65:e5:54:b4:3e:58:d6:38:c5:25:2f:43:39:b1:
         20:78:3c:3e:fa:9a:df:40:6e:18:04:f7:b2:8e:fb:7b:d8:fa:
         e8:a2:fc:fb:52:2b:a8:bc:06:13:03:0f:da:e9:32:05:b0:7c:
         0d:35:0e:d9:45:57:39:5c:50:70:75:bd:24:36:ca:47:62:02:
         a2:f8:46:5a:d4:2a:35:f3:06:35:98:33:46:36:d1:50:04:cb:
         45:04:97:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org