Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3131312e302f32342d3234203d3e20323633343736.roa
File:                     3139312e3234322e3131312e302f32342d3234203d3e20323633343736.roa (raw, json)
Hash identifier:          2zOpbpuSO+0Na/EQQoECc7YrayOCQ7C8vy+8XTzyV2A=
Subject key identifier:   3B:E4:44:C2:CD:E0:33:13:C5:86:D3:35:32:D7:39:AA:28:BF:33:B3
Certificate issuer:       /CN=B9230901E8518858475596651A1A02C3407F0B17
Certificate serial:       56E9A6CED8E836D3E3169278DA9182B5A0CE1691
Authority key identifier: B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3131312e302f32342d3234203d3e20323633343736.roa
Signing time:             Thu 29 Jun 2023 15:11:21 +0000
ROA not before:           Thu 29 Jun 2023 15:06:21 +0000
ROA not after:            Thu 27 Jun 2024 15:11:21 +0000
asID:                     263476
IP address blocks:        191.242.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e9:a6:ce:d8:e8:36:d3:e3:16:92:78:da:91:82:b5:a0:ce:16:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9230901E8518858475596651A1A02C3407F0B17
        Validity
            Not Before: Jun 29 15:06:21 2023 GMT
            Not After : Jun 27 15:11:21 2024 GMT
        Subject: CN=3BE444C2CDE03313C586D33532D739AA28BF33B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:09:e8:1b:c7:c6:c3:ac:a3:9d:5d:c3:3f:69:
                    1b:6d:c2:86:06:85:e1:73:0b:b9:cf:ba:5b:35:29:
                    02:75:9f:f8:1b:be:65:03:18:55:2d:06:aa:d6:79:
                    db:57:ef:51:a7:37:6c:e2:95:a8:29:4f:74:1b:3d:
                    96:88:0f:8a:cd:ba:ef:ca:e0:fe:0b:c8:43:5b:51:
                    1f:f3:a5:e1:6e:96:c2:2e:6e:ea:e4:ca:41:e1:b6:
                    26:e6:db:20:f5:bb:3f:1a:25:e6:d5:35:92:1b:25:
                    8f:00:42:1a:51:80:17:e0:d0:bd:8b:40:18:a5:7a:
                    e4:2f:54:4b:5f:e0:72:46:31:fa:4e:47:74:26:e3:
                    82:7b:53:d7:fc:30:a4:4f:a2:ae:be:8b:ae:0e:b6:
                    c0:6e:b4:3b:26:67:2f:04:52:9a:10:7f:d9:68:dd:
                    d4:e2:a5:d3:4b:59:7d:28:8c:06:df:95:c5:ac:af:
                    1f:49:8b:de:9f:ff:35:5e:f0:9a:08:e5:de:8d:a7:
                    7d:2d:00:a0:5f:b6:4e:21:b8:89:87:72:cc:50:2d:
                    43:51:8d:47:15:5c:94:9f:ea:8c:68:3c:6e:3a:fb:
                    35:43:18:2c:52:55:89:90:22:83:4c:d0:fc:87:6d:
                    82:b0:c6:ed:51:88:08:11:be:f7:42:ce:40:5a:a7:
                    c9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E4:44:C2:CD:E0:33:13:C5:86:D3:35:32:D7:39:AA:28:BF:33:B3
            X509v3 Authority Key Identifier:
                keyid:B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/B9230901E8518858475596651A1A02C3407F0B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/3139312e3234322e3131312e302f32342d3234203d3e20323633343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:9a:7f:de:7f:52:27:be:fe:84:1c:88:7a:e0:1e:cc:e6:df:
         2a:28:49:75:71:20:47:46:eb:d4:bf:5d:00:f5:b4:16:ae:91:
         40:75:16:73:6b:c3:6b:cb:74:9c:39:e6:a1:8f:3a:71:58:22:
         1e:74:f6:12:7b:46:3f:44:ac:19:4b:47:97:40:92:1d:32:07:
         d1:7e:59:76:58:3e:f4:f8:6b:5b:e6:9c:7a:d4:04:35:1d:5f:
         e5:84:11:76:e8:ca:40:d1:98:19:ce:4a:ad:f1:bb:7d:5d:6d:
         71:98:74:43:14:31:26:50:c7:3c:5d:e9:e1:c2:a3:e4:dc:1d:
         e3:d9:a9:d5:00:50:cd:63:5f:10:9b:1f:19:f3:44:bf:b0:8e:
         b7:20:6a:e6:43:d1:12:95:18:08:b2:84:b5:fa:94:3a:d2:5c:
         5b:3d:f3:94:12:fa:f7:02:9f:fd:95:14:3b:4d:db:39:60:33:
         a1:01:80:2f:2c:f1:10:cd:68:2b:20:a1:de:60:0d:bb:13:26:
         cb:32:aa:6b:1c:27:fa:d8:02:e9:ad:41:2f:c9:cf:31:61:d3:
         76:e6:73:c6:df:97:e0:71:5e:46:ed:28:b7:db:50:81:1a:28:
         01:19:0c:c1:d9:f2:59:30:72:26:85:cf:82:08:1d:a6:05:19:
         4c:57:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org