Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130382e302f32332d3233203d3e20323633343736.roa
File:                     3139312e3234322e3130382e302f32332d3233203d3e20323633343736.roa (raw, json)
Hash identifier:          Le2Rk3GZLRZFk1ArDC5cKm+UTIty8ydEbCO+ksppYXs=
Subject key identifier:   8E:BD:07:DF:7B:9E:AC:E7:A2:D3:2F:92:DC:A4:07:DF:91:AF:4B:A8
Certificate issuer:       /CN=B9230901E8518858475596651A1A02C3407F0B17
Certificate serial:       1BD9DC8A8ACE93B89834098C88F1DFFCBC32D124
Authority key identifier: B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130382e302f32332d3233203d3e20323633343736.roa
Signing time:             Thu 29 Jun 2023 15:11:18 +0000
ROA not before:           Thu 29 Jun 2023 15:06:18 +0000
ROA not after:            Thu 27 Jun 2024 15:11:18 +0000
asID:                     263476
IP address blocks:        191.242.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d9:dc:8a:8a:ce:93:b8:98:34:09:8c:88:f1:df:fc:bc:32:d1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9230901E8518858475596651A1A02C3407F0B17
        Validity
            Not Before: Jun 29 15:06:18 2023 GMT
            Not After : Jun 27 15:11:18 2024 GMT
        Subject: CN=8EBD07DF7B9EACE7A2D32F92DCA407DF91AF4BA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:4e:7c:25:c0:2e:e0:05:df:39:94:eb:ba:
                    70:d5:02:74:4a:2a:63:57:eb:49:12:9e:5f:4b:7a:
                    61:fd:12:e9:1d:bf:d2:c6:e0:38:01:13:36:f1:d7:
                    5f:97:73:04:9c:f3:1c:52:16:02:02:57:3a:9b:c7:
                    49:a7:a7:95:22:ae:52:b4:03:75:e3:ec:38:fd:3a:
                    d3:85:e3:b6:23:c6:7d:ac:a2:36:44:9a:6f:b4:e0:
                    5a:15:74:4c:ea:7d:26:28:38:0f:25:58:54:75:8e:
                    02:d6:f9:cd:61:b4:2c:50:2f:08:bb:4c:a8:3d:aa:
                    45:c9:80:31:b2:45:40:dc:7f:9e:52:37:8e:19:a6:
                    d4:78:92:e5:5d:4d:4b:16:01:84:cc:c7:40:1d:d4:
                    25:16:bd:08:61:38:ba:b3:0d:1d:0f:87:1b:90:c6:
                    b1:0b:1f:b5:f7:eb:6e:3e:1a:89:6f:c0:c2:fa:f0:
                    ce:44:1e:49:0a:f7:0b:b4:ed:5e:33:b9:69:5f:96:
                    1a:51:7a:86:1e:1b:f1:e4:bd:91:8d:f8:f3:45:41:
                    21:4f:66:54:f8:bd:71:24:dc:0f:74:ac:a9:80:d1:
                    b6:a3:79:e9:fc:bf:59:5d:8f:fa:ef:13:e3:6f:dc:
                    fa:56:98:2c:c6:d0:1f:e0:16:3c:9a:19:b8:67:23:
                    6a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BD:07:DF:7B:9E:AC:E7:A2:D3:2F:92:DC:A4:07:DF:91:AF:4B:A8
            X509v3 Authority Key Identifier:
                keyid:B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/B9230901E8518858475596651A1A02C3407F0B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130382e302f32332d3233203d3e20323633343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:50:e2:06:50:72:08:16:44:cc:35:8b:6d:2c:3f:73:92:c2:
         b8:de:18:ee:cc:7e:ba:aa:a7:44:23:ec:1b:6e:ac:c5:66:c0:
         b1:18:fb:59:9d:0e:21:64:30:4b:b1:5c:31:f0:e1:c0:9d:97:
         86:51:c3:e4:60:68:99:d6:ed:a2:fd:b6:16:2c:af:87:0d:15:
         be:2c:85:42:63:4b:dd:13:9a:99:de:e6:1c:41:a7:28:63:2e:
         f2:ff:c3:be:3d:5a:e9:45:66:76:11:86:59:a1:36:f8:4d:43:
         f2:5a:5f:cf:86:d6:40:54:31:db:7f:6d:08:f4:9d:5f:a6:d4:
         7a:c6:21:48:a8:7b:2c:91:9c:87:1c:65:39:f5:e0:9d:36:e5:
         57:f6:33:ea:60:01:36:3e:14:ac:6f:e7:ab:32:83:33:0e:42:
         d3:09:17:bf:29:2e:3d:44:f8:d2:b5:2b:19:9a:64:75:30:e1:
         01:04:4e:d3:35:4b:0d:2d:9d:80:16:fa:5a:95:bb:d5:d1:14:
         bd:b8:b6:7a:7d:3c:bb:93:b0:40:76:0b:c7:4a:fb:ec:52:dd:
         5a:05:00:9a:49:8c:46:80:ca:a1:32:20:e1:d9:0f:91:48:d3:
         10:2e:06:1a:10:39:ef:79:3a:c3:ac:64:15:09:c0:99:2c:ba:
         af:24:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org