Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/0/3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa
File:                     3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier:          5H7ecOhDKaD4SZtnVg5snRWFKW1bCmvzejxKoN8rCF8=
Subject key identifier:   C8:50:9C:66:D1:81:C1:A0:64:43:48:5A:4F:23:EB:42:11:11:B3:C9
Certificate issuer:       /CN=09D12D7771C4466942E3DB3E232FA2C569672197
Certificate serial:       084A5C76D2B3CA920135DA21C3DE74A0729DC3BA
Authority key identifier: 09:D1:2D:77:71:C4:46:69:42:E3:DB:3E:23:2F:A2:C5:69:67:21:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09D12D7771C4466942E3DB3E232FA2C569672197.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/0/3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa
Signing time:             Thu 01 Feb 2024 17:21:55 +0000
ROA not before:           Thu 01 Feb 2024 17:16:55 +0000
ROA not after:            Thu 30 Jan 2025 17:21:55 +0000
asID:                     266178
IP address blocks:        192.144.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4a:5c:76:d2:b3:ca:92:01:35:da:21:c3:de:74:a0:72:9d:c3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09D12D7771C4466942E3DB3E232FA2C569672197
        Validity
            Not Before: Feb  1 17:16:55 2024 GMT
            Not After : Jan 30 17:21:55 2025 GMT
        Subject: CN=C8509C66D181C1A06443485A4F23EB421111B3C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:3e:f5:b6:71:7e:4b:a8:00:0a:ca:37:47:
                    a0:92:5f:7b:1a:38:04:ed:18:32:cf:74:73:41:5f:
                    a9:dc:ff:07:21:46:2c:0b:74:62:bd:b8:e0:79:11:
                    fc:8f:ba:9e:6f:fb:7f:fe:e8:3b:40:c3:37:95:ff:
                    82:4b:fd:c9:7d:90:43:04:74:ab:01:17:be:32:d8:
                    84:64:9a:ac:ae:91:26:b4:df:36:c1:22:78:98:c8:
                    27:48:eb:dd:c3:fe:0b:49:a0:18:77:e0:2e:cd:e2:
                    4b:19:81:6f:ca:9a:a0:46:bd:93:1c:23:b5:92:3c:
                    9b:b7:0f:db:52:bd:af:b3:ad:63:bb:d7:69:28:e7:
                    b7:f6:55:76:29:df:31:75:33:ef:f4:f5:a5:31:b9:
                    a5:f0:20:a3:67:58:ac:d3:22:d6:00:89:b9:50:4e:
                    5d:aa:8d:d7:f7:84:e9:96:23:f3:f8:25:3e:e1:b9:
                    e8:db:97:b3:b4:f3:0a:d7:8e:a4:6c:f3:09:88:9c:
                    35:18:c8:1f:02:74:e0:cf:9c:19:12:f4:5a:94:c2:
                    3c:03:87:ac:d5:92:21:e9:60:70:75:e4:7a:2f:d2:
                    58:c5:e0:4e:df:de:ab:d3:76:f9:b0:1f:9a:0e:c5:
                    0c:a0:09:a9:89:e4:8a:54:ec:8f:bb:5b:77:7e:54:
                    f5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:50:9C:66:D1:81:C1:A0:64:43:48:5A:4F:23:EB:42:11:11:B3:C9
            X509v3 Authority Key Identifier:
                keyid:09:D1:2D:77:71:C4:46:69:42:E3:DB:3E:23:2F:A2:C5:69:67:21:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/0/09D12D7771C4466942E3DB3E232FA2C569672197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09D12D7771C4466942E3DB3E232FA2C569672197.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/0/3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:4a:40:96:eb:d6:72:ca:18:55:a4:02:95:1c:2d:95:45:5e:
         8b:fe:90:38:d5:2e:d2:fe:3e:d5:38:76:ed:22:d7:a2:91:03:
         ab:08:c4:9e:82:0e:01:31:a6:e5:c1:64:db:99:8d:b7:c3:7c:
         ef:c9:83:8e:4a:3f:03:d3:1f:6e:5f:aa:a4:ee:b0:ed:c3:c8:
         eb:ab:b8:93:e5:fe:e6:a0:b7:95:b8:e8:20:2b:85:fb:82:94:
         73:a5:fa:fc:eb:43:4c:0b:82:ba:df:34:77:8d:56:8f:b7:83:
         38:cc:d1:62:7b:f3:31:20:35:71:82:11:63:50:c4:33:9c:d9:
         49:36:ef:9f:8a:e9:df:64:c4:c8:72:5a:76:12:30:cf:28:ea:
         68:a3:cd:0a:2a:b6:39:9c:e9:05:64:26:14:b2:66:21:73:51:
         bf:85:69:73:a1:f7:b9:12:a5:1e:a1:4f:21:4a:0e:d3:27:db:
         f7:e6:12:8b:e0:5a:4e:97:2b:b4:a9:8b:af:20:65:54:24:1c:
         29:78:42:c7:12:5e:94:bf:06:2d:ee:17:00:50:5e:a7:d2:bd:
         53:2f:db:37:5b:4f:81:27:32:bf:5c:aa:cb:de:02:12:08:b4:
         99:86:58:f3:7e:e7:54:5f:7c:66:15:00:d5:79:69:f0:8b:07:
         9c:57:5f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org