Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3232322e302f32332d3233203d3e20323633353135.roa
File:                     3139312e3234332e3232322e302f32332d3233203d3e20323633353135.roa (raw, json)
Hash identifier:          EWtEVUPIDIFX9BaL524dRKpAi/r3fA87YBexjdGrB28=
Subject key identifier:   9C:B8:2F:7E:C0:95:0A:56:1F:01:47:D0:53:4F:D1:F0:F9:3E:13:F0
Certificate issuer:       /CN=0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE
Certificate serial:       3FB13EBA2348D2648B9456688459736BDDC4D712
Authority key identifier: 0E:01:DD:DD:7B:8C:22:01:D6:20:7A:10:16:12:96:A8:AD:B7:A2:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3232322e302f32332d3233203d3e20323633353135.roa
Signing time:             Thu 18 Aug 2022 01:14:15 +0000
ROA not before:           Thu 18 Aug 2022 01:09:15 +0000
ROA not after:            Thu 17 Aug 2023 01:14:15 +0000
asID:                     263515
IP address blocks:        191.243.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b1:3e:ba:23:48:d2:64:8b:94:56:68:84:59:73:6b:dd:c4:d7:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE
        Validity
            Not Before: Aug 18 01:09:15 2022 GMT
            Not After : Aug 17 01:14:15 2023 GMT
        Subject: CN=9CB82F7EC0950A561F0147D0534FD1F0F93E13F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b8:7d:c9:4a:7f:80:c7:d1:da:d3:88:13:b6:
                    05:14:01:77:22:b1:3d:3c:2a:db:cf:85:f6:d5:e6:
                    a4:c5:52:dc:f5:21:c1:2f:26:e3:e1:20:3a:00:5b:
                    6e:d5:3e:a0:75:2d:cb:83:5e:cb:d2:fa:2c:b1:0f:
                    4b:00:fa:ae:98:a9:15:9d:d9:be:65:b5:09:d6:f2:
                    56:35:40:16:74:e0:29:2d:22:fe:80:f2:65:b0:a6:
                    52:be:d2:2a:2a:03:59:91:66:10:01:e4:86:7d:bb:
                    2e:9a:67:18:48:55:f9:66:19:f0:ae:4f:77:cb:96:
                    b9:2f:d1:c4:47:b4:6f:93:44:e9:ed:ab:12:5c:b1:
                    9d:df:a8:ca:03:df:99:c0:72:59:22:1b:1b:10:b2:
                    8d:69:be:bf:3c:6b:23:e1:6f:9a:8f:c1:a5:51:43:
                    2d:5d:2e:77:d2:44:ea:f0:ff:15:35:4a:a7:37:5d:
                    4e:0c:f2:d2:f7:01:68:bc:f5:b8:59:fc:21:4f:41:
                    23:69:95:d5:ee:56:4c:0d:d8:dc:1a:31:c3:75:39:
                    0d:74:2c:79:c8:97:be:94:14:fa:3f:ca:2a:e9:42:
                    f5:bd:65:30:6d:35:af:ba:41:0f:51:6a:60:d3:95:
                    b6:d4:b5:f6:6c:5b:c0:69:e9:04:2a:b5:c6:ac:09:
                    3b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B8:2F:7E:C0:95:0A:56:1F:01:47:D0:53:4F:D1:F0:F9:3E:13:F0
            X509v3 Authority Key Identifier:
                keyid:0E:01:DD:DD:7B:8C:22:01:D6:20:7A:10:16:12:96:A8:AD:B7:A2:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3232322e302f32332d3233203d3e20323633353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:cc:93:93:a4:54:af:d0:41:23:7c:98:5a:3d:c0:7c:ce:97:
         4c:36:2f:4e:60:8a:b5:66:eb:3b:8a:21:ac:53:19:d4:ae:93:
         58:c5:01:5e:44:b8:bf:51:6e:5b:5d:8b:1d:97:c5:e7:57:20:
         5e:b7:12:f7:59:ca:1d:c7:d0:a8:39:39:b7:4c:60:78:44:f4:
         18:15:dc:01:73:81:7e:d5:d4:24:4d:eb:c1:65:04:fd:1c:78:
         84:b0:9a:47:34:0f:2d:93:9f:73:75:ef:b4:e3:94:21:1d:5c:
         b1:c2:d5:57:0f:65:60:2f:b1:4b:c4:d4:b1:1b:ef:97:fc:14:
         00:50:c9:c9:31:37:cf:27:bc:3a:9e:c5:d2:50:f9:ae:cf:ff:
         bb:8e:f9:a1:d0:2d:17:53:49:02:d7:7f:85:a3:a6:bd:98:93:
         07:79:d5:4d:69:a8:e9:48:e1:e6:86:ad:e2:e7:f3:8a:0c:52:
         de:5a:44:78:67:db:e9:1b:3b:90:80:82:21:24:91:ee:d5:ad:
         c9:07:33:c6:4d:fe:ad:24:ce:11:6f:42:40:49:3b:cc:5c:71:
         46:3a:0f:4f:37:1b:ea:13:36:5b:63:5d:bb:26:80:b3:a2:c9:
         8c:e6:51:9d:42:ac:1c:97:3d:34:c3:a5:21:2e:0f:b6:3a:02:
         00:c6:c1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org