Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130392e302f32342d3234203d3e20323633343736.roa
File:                     3139312e3234322e3130392e302f32342d3234203d3e20323633343736.roa (raw, json)
Hash identifier:          YKTq+JrSt0v1pF0KzKhCd2AWdiW6HgpE8F9oaHaKzzI=
Subject key identifier:   A8:23:9A:F9:05:90:EA:80:66:90:1D:12:57:33:68:11:1A:EF:3B:C0
Certificate issuer:       /CN=B9230901E8518858475596651A1A02C3407F0B17
Certificate serial:       6C453E486B887AE028E2D271B0985D4F3DFE81DC
Authority key identifier: B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130392e302f32342d3234203d3e20323633343736.roa
Signing time:             Thu 29 Jun 2023 15:11:21 +0000
ROA not before:           Thu 29 Jun 2023 15:06:21 +0000
ROA not after:            Thu 27 Jun 2024 15:11:21 +0000
asID:                     263476
IP address blocks:        191.242.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:45:3e:48:6b:88:7a:e0:28:e2:d2:71:b0:98:5d:4f:3d:fe:81:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9230901E8518858475596651A1A02C3407F0B17
        Validity
            Not Before: Jun 29 15:06:21 2023 GMT
            Not After : Jun 27 15:11:21 2024 GMT
        Subject: CN=A8239AF90590EA8066901D12573368111AEF3BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:01:78:58:d0:44:1e:c8:0d:00:7c:48:bc:
                    ba:cc:c5:3e:71:53:34:84:77:13:65:a9:0d:5e:0b:
                    bc:f6:23:a7:60:d6:ee:8d:f0:eb:02:1c:2c:93:82:
                    ea:e8:a4:de:f2:23:95:f8:89:f4:10:4a:0d:54:ac:
                    35:b6:ee:d7:eb:77:20:9d:5b:7d:87:1b:d2:28:34:
                    af:82:15:64:8f:0d:af:d4:32:5f:b9:0f:5d:ba:01:
                    d0:6b:98:17:48:d8:c3:e5:c5:64:4e:6c:3e:6a:01:
                    4d:6d:85:0a:41:86:a2:fe:6b:ee:e0:46:f2:5d:52:
                    d9:e3:aa:05:ac:0f:d3:a0:14:c4:dd:f4:39:e2:04:
                    42:3b:80:88:3b:8d:aa:3c:93:d1:1d:f9:13:b5:05:
                    39:84:75:0f:f8:d0:59:27:31:58:fd:69:93:e3:37:
                    50:ca:11:d7:ab:91:76:b3:4a:ee:41:ba:69:06:b9:
                    0b:62:3e:94:86:7e:2c:bb:5e:b4:56:aa:37:e4:57:
                    50:09:68:60:f1:92:46:f6:d4:8b:64:5c:99:7f:5c:
                    10:bb:b0:e3:a0:3e:5d:81:9f:a6:0f:8c:d1:b9:05:
                    b0:ff:a1:08:66:ba:39:ef:af:dd:9f:f0:d1:a6:8e:
                    3c:f1:96:6a:80:92:b4:7c:2a:2e:35:e3:6a:97:47:
                    2d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:23:9A:F9:05:90:EA:80:66:90:1D:12:57:33:68:11:1A:EF:3B:C0
            X509v3 Authority Key Identifier:
                keyid:B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/B9230901E8518858475596651A1A02C3407F0B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3130392e302f32342d3234203d3e20323633343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:29:51:ee:93:e3:2a:3b:25:79:5a:41:ea:79:39:9c:fe:45:
         38:f6:46:17:39:00:10:bf:fb:ff:b9:0e:7a:78:08:fd:02:19:
         28:a7:e5:9b:ec:17:fd:34:59:90:a0:fd:4b:d3:95:58:8c:29:
         88:08:79:aa:74:eb:8d:22:e7:ab:8b:3e:c8:27:41:f1:67:fa:
         c1:cd:0d:d9:71:a9:15:11:55:23:92:ac:44:29:ee:76:b9:08:
         73:19:ea:e5:7e:02:d7:77:51:2c:c5:a5:25:46:13:cc:1f:7d:
         d5:6a:57:3f:8f:00:33:5a:52:58:b5:a1:77:99:a6:69:23:2f:
         7e:c7:6c:54:0e:6f:b3:40:8e:3a:50:08:84:7b:2d:fb:cd:b1:
         b8:60:b4:6b:51:78:4b:f4:3d:ea:90:15:28:32:12:7a:b2:4c:
         6c:e7:92:3e:fd:9c:73:db:f8:0d:8a:70:90:e1:6b:e8:78:57:
         80:93:a4:7d:81:69:f2:66:fe:03:8f:bd:aa:45:ae:91:ed:70:
         55:0d:45:6c:05:82:d7:71:40:dd:c6:aa:09:fc:f7:af:3e:c0:
         11:7a:53:af:e6:8b:87:88:a3:1c:fa:a2:07:fb:4a:19:51:8d:
         e8:8f:de:2e:5b:29:1e:7d:42:c2:ad:cf:4c:89:67:e9:57:dd:
         9c:60:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org