Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/0/3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa
File:                     3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa (raw, json)
Hash identifier:          eVKYdUQ4SDUbcPxKPA3up2M/mF7CCMAVd6urHcgKtT0=
Subject key identifier:   9A:A8:26:11:82:F2:34:01:11:78:D3:5E:45:2E:67:FE:04:AA:31:5A
Certificate issuer:       /CN=09D12D7771C4466942E3DB3E232FA2C569672197
Certificate serial:       725A0DDA35E23834A948C178FACF929A90602A28
Authority key identifier: 09:D1:2D:77:71:C4:46:69:42:E3:DB:3E:23:2F:A2:C5:69:67:21:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09D12D7771C4466942E3DB3E232FA2C569672197.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/0/3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa
Signing time:             Thu 01 Feb 2024 17:21:55 +0000
ROA not before:           Thu 01 Feb 2024 17:16:55 +0000
ROA not after:            Thu 30 Jan 2025 17:21:55 +0000
asID:                     266178
IP address blocks:        192.144.66.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5a:0d:da:35:e2:38:34:a9:48:c1:78:fa:cf:92:9a:90:60:2a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09D12D7771C4466942E3DB3E232FA2C569672197
        Validity
            Not Before: Feb  1 17:16:55 2024 GMT
            Not After : Jan 30 17:21:55 2025 GMT
        Subject: CN=9AA8261182F234011178D35E452E67FE04AA315A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:81:e3:b0:a7:1e:2f:13:81:61:02:81:0b:
                    67:9b:04:e6:b0:6a:19:86:bd:ca:5c:bf:50:6f:97:
                    ae:11:7b:11:cc:f5:d8:f3:9a:0a:63:c6:1d:88:dd:
                    3e:57:2d:9c:28:93:35:5c:52:64:d9:11:d2:34:2d:
                    d0:dc:b1:f3:4c:0d:d7:09:75:c7:3d:0e:0b:e2:21:
                    23:15:0e:60:6a:bf:1a:05:58:dd:26:7b:c7:dc:ee:
                    b8:58:3b:c9:c9:0c:20:70:23:40:61:bb:37:c8:d5:
                    a7:62:9d:7c:59:a8:e1:e4:0a:68:25:56:cd:fc:9e:
                    64:96:86:9d:80:a1:0d:6b:d1:b1:e2:28:09:84:e5:
                    43:20:e3:47:8a:bb:b5:81:9e:92:36:1f:25:52:90:
                    52:f5:ef:cd:4a:e6:c1:08:2e:ab:f9:91:54:c7:6f:
                    0a:2f:3c:fb:9e:08:25:3d:14:ad:04:f4:a7:6d:fd:
                    84:fc:33:e7:24:5f:dd:34:8c:65:03:4f:f9:69:ab:
                    ab:3c:4f:1e:ab:1e:c8:db:ee:65:21:46:b2:5e:a9:
                    77:28:30:7d:83:25:26:7c:3f:e6:ec:5c:79:aa:e6:
                    ad:bf:5d:70:f5:da:c1:c4:33:54:85:12:a3:40:67:
                    8b:92:38:f6:aa:c8:34:dd:59:41:e3:f8:42:1c:93:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A8:26:11:82:F2:34:01:11:78:D3:5E:45:2E:67:FE:04:AA:31:5A
            X509v3 Authority Key Identifier:
                keyid:09:D1:2D:77:71:C4:46:69:42:E3:DB:3E:23:2F:A2:C5:69:67:21:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/0/09D12D7771C4466942E3DB3E232FA2C569672197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09D12D7771C4466942E3DB3E232FA2C569672197.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/0/3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:db:58:9e:bb:6e:92:6c:2b:f8:7d:83:c9:36:75:a1:26:9c:
         80:d3:21:e9:9c:96:47:7f:6d:f8:eb:f3:b6:8a:c3:da:01:a0:
         a2:3f:b6:73:96:e9:0a:c0:72:97:4d:62:85:55:40:93:80:d8:
         49:8e:50:1c:e8:da:43:d6:bf:46:de:91:71:c1:ee:6b:2b:3c:
         c7:fb:66:03:f5:3d:ad:06:bd:cd:d2:8e:e1:64:fe:86:b5:4d:
         bc:72:52:10:8f:5a:14:45:25:7a:32:cf:63:be:e8:03:b6:f0:
         17:7c:c7:f5:54:a2:eb:49:34:b3:6c:30:73:c0:dc:c6:3d:c1:
         ed:57:7e:20:60:23:dc:4f:1d:6a:a0:ee:d7:0a:e5:0c:82:f4:
         22:b0:89:82:af:b4:e8:1d:ea:d2:01:c0:be:a0:db:60:9d:5f:
         82:5f:50:0e:a4:af:8e:37:f5:3a:65:48:ea:ad:93:0c:a4:44:
         fb:7d:a0:b8:5b:8c:ec:c5:f8:70:82:f6:3d:38:ea:1c:6e:4d:
         c5:01:88:72:96:2d:80:85:10:5a:77:7f:33:ce:49:74:5a:65:
         2a:b4:8f:6a:86:13:56:05:c5:02:64:3b:dc:bc:90:f3:f3:70:
         11:93:0a:1e:e4:b3:24:ed:15:e5:70:d2:9f:0e:dd:04:d0:2c:
         18:0c:77:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org