Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/0/3139322e3134342e36342e302f32322d3232203d3e20323636313738.roa
File:                     3139322e3134342e36342e302f32322d3232203d3e20323636313738.roa (raw, json)
Hash identifier:          4WIm4XG0fAvAVZdMu1boLITNzFhaSQQvGdZTX2z944k=
Subject key identifier:   F6:36:EC:61:4F:E3:0F:17:40:9F:91:D0:1E:C5:57:FE:E6:BC:01:CC
Certificate issuer:       /CN=09D12D7771C4466942E3DB3E232FA2C569672197
Certificate serial:       75017700BF59F22929E3F87837203CCDF735E5B4
Authority key identifier: 09:D1:2D:77:71:C4:46:69:42:E3:DB:3E:23:2F:A2:C5:69:67:21:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09D12D7771C4466942E3DB3E232FA2C569672197.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/0/3139322e3134342e36342e302f32322d3232203d3e20323636313738.roa
Signing time:             Thu 01 Feb 2024 17:21:55 +0000
ROA not before:           Thu 01 Feb 2024 17:16:55 +0000
ROA not after:            Thu 30 Jan 2025 17:21:55 +0000
asID:                     266178
IP address blocks:        192.144.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:01:77:00:bf:59:f2:29:29:e3:f8:78:37:20:3c:cd:f7:35:e5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09D12D7771C4466942E3DB3E232FA2C569672197
        Validity
            Not Before: Feb  1 17:16:55 2024 GMT
            Not After : Jan 30 17:21:55 2025 GMT
        Subject: CN=F636EC614FE30F17409F91D01EC557FEE6BC01CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:6a:69:a7:a5:9a:dc:ae:6e:9d:ea:2d:93:
                    f3:0a:3e:c3:87:a6:b4:3d:c2:f8:03:70:24:d1:8a:
                    56:26:a7:49:da:b2:fe:65:a1:85:a8:d7:9b:3e:df:
                    54:00:5d:52:44:5f:be:b9:15:f7:92:b9:ad:c5:f3:
                    c5:bd:1f:ab:62:88:63:ea:b4:b6:20:9f:d4:fe:40:
                    fc:e4:68:0e:2a:2b:dc:5b:d3:53:0e:b4:e0:a3:49:
                    94:fd:c4:e9:68:b9:18:b6:c3:ee:ae:aa:42:2e:99:
                    3f:e0:c2:28:0c:ef:14:25:e6:01:d3:c3:5c:f2:66:
                    df:66:86:3d:7f:eb:c4:c3:27:cd:bd:44:26:76:8d:
                    a2:11:b2:62:50:9c:aa:ae:17:1d:1b:46:3a:a2:1d:
                    f6:73:5f:08:9d:f3:07:72:52:f9:03:94:ed:93:7b:
                    2d:81:56:eb:71:a1:f5:d8:69:fc:c2:05:06:54:99:
                    24:4f:cd:c8:5e:57:27:65:4d:2c:80:03:e1:37:c7:
                    7b:ba:00:a7:58:3e:6f:95:9f:73:f2:29:fe:bb:5b:
                    39:00:85:59:c5:02:e8:03:ae:aa:91:92:76:6c:10:
                    ae:31:40:cc:01:68:05:b6:5f:63:d5:41:fd:95:df:
                    bd:f7:98:26:72:3b:c1:c8:7b:65:97:a2:a0:09:39:
                    83:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:36:EC:61:4F:E3:0F:17:40:9F:91:D0:1E:C5:57:FE:E6:BC:01:CC
            X509v3 Authority Key Identifier:
                keyid:09:D1:2D:77:71:C4:46:69:42:E3:DB:3E:23:2F:A2:C5:69:67:21:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/0/09D12D7771C4466942E3DB3E232FA2C569672197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09D12D7771C4466942E3DB3E232FA2C569672197.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/0/3139322e3134342e36342e302f32322d3232203d3e20323636313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:45:40:a5:5f:e3:2a:8d:a4:b7:93:87:f9:fe:ed:45:ba:50:
         a9:0c:16:07:56:93:99:f3:57:b6:53:0d:2f:6d:69:1e:d4:b9:
         89:25:3f:9e:24:52:ed:67:48:2f:b0:2f:1d:1a:19:de:f6:81:
         21:84:bd:8b:5b:ea:fb:cf:ef:08:e6:01:1e:6f:02:b1:93:54:
         50:bd:bd:19:fb:57:75:fc:e1:7b:8f:0f:05:10:8c:a4:c0:10:
         bb:79:7f:06:d4:28:57:71:a9:05:4f:4d:e0:57:17:32:4e:8c:
         07:30:96:31:ef:e0:fc:a6:be:7b:32:1c:94:a0:1b:35:75:88:
         7e:77:26:65:41:dd:89:85:28:f6:e1:4e:a9:b0:8e:65:2c:c3:
         69:c5:ca:13:20:00:70:01:fa:63:29:7d:ef:01:f6:d9:91:e1:
         a6:a1:10:3f:7f:c8:4d:58:b2:b7:de:f5:da:84:47:91:22:5f:
         a8:b8:d9:f4:85:23:ab:34:20:98:40:bf:70:20:60:78:9e:54:
         fa:a4:ff:54:f3:00:b8:a2:5c:35:25:68:51:69:88:94:c6:02:
         b5:63:75:4a:f7:1b:71:c0:c6:f1:3e:da:77:bc:9c:81:4a:46:
         f2:3d:29:0d:da:cf:06:43:58:0b:fe:af:c0:e5:de:67:a5:89:
         0b:2f:82:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org