Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3139312e362e38302e302f32312d3234203d3e20323632393932.roa
File:                     3139312e362e38302e302f32312d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          iV/UZRuZTuYwPf+lb8G0feenrTmYOaWhLQMx1Tlx8Mc=
Subject key identifier:   4C:E1:75:D8:DB:44:F1:89:34:ED:2E:60:74:DF:D3:93:5D:9C:57:1D
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       66596AB1B86B5E952584D096CA865F82CDF37F81
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3139312e362e38302e302f32312d3234203d3e20323632393932.roa
Signing time:             Wed 01 Mar 2023 13:41:06 +0000
ROA not before:           Wed 01 Mar 2023 13:36:06 +0000
ROA not after:            Wed 28 Feb 2024 13:41:06 +0000
asID:                     262992
IP address blocks:        191.6.80.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:59:6a:b1:b8:6b:5e:95:25:84:d0:96:ca:86:5f:82:cd:f3:7f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Mar  1 13:36:06 2023 GMT
            Not After : Feb 28 13:41:06 2024 GMT
        Subject: CN=4CE175D8DB44F18934ED2E6074DFD3935D9C571D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:96:16:4f:fe:8c:6b:a8:b4:09:2d:03:f9:
                    81:2c:f0:da:50:d4:a8:c7:30:d5:76:56:22:49:8c:
                    5f:42:00:fa:bf:84:a0:54:89:94:4c:e4:04:8b:a7:
                    13:2c:7c:61:22:45:24:6f:af:23:12:43:57:f6:dc:
                    a4:54:82:ad:a4:92:e0:f2:23:c4:e7:df:b0:86:4e:
                    7d:61:68:49:7e:73:b2:72:cf:00:8d:24:33:2a:5d:
                    b2:67:f6:39:85:20:a9:bb:fe:02:44:2d:00:81:d4:
                    bb:66:41:1b:44:05:3d:cf:85:0b:2c:43:23:2b:46:
                    a2:e5:b7:11:91:f9:f5:84:93:5c:33:28:39:2f:42:
                    62:e4:e8:82:e8:fe:4d:0c:a1:5d:29:02:3d:7b:65:
                    0a:7c:a4:9c:fc:1c:92:1a:ab:02:30:99:c6:81:53:
                    77:90:90:2d:f9:ee:b3:16:51:d2:79:95:84:40:14:
                    47:64:02:db:94:52:2f:0e:d8:4e:9a:f2:4f:68:6d:
                    5f:e1:40:60:a0:fa:b5:b9:42:80:4a:e1:8c:93:40:
                    97:7e:f0:35:47:6c:2d:43:2e:4c:cb:63:5a:45:6e:
                    a7:fc:7a:fd:5f:6b:0f:38:be:d5:de:ee:2e:b3:66:
                    09:96:35:92:c1:77:4d:de:d6:2a:43:51:83:39:1b:
                    2e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E1:75:D8:DB:44:F1:89:34:ED:2E:60:74:DF:D3:93:5D:9C:57:1D
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3139312e362e38302e302f32312d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:4f:53:6c:66:e8:71:a6:fc:65:a2:9e:18:a0:28:38:76:11:
         55:d1:5c:ed:11:d4:62:b0:e9:c7:c3:1e:c7:d7:97:11:2b:8c:
         5f:68:02:31:9c:dd:ff:4d:45:7d:5f:ab:e1:29:a8:50:65:e4:
         dc:65:c8:1d:ba:92:3c:8f:55:7d:24:ca:7e:57:9a:65:f0:ae:
         a5:e6:21:15:0c:e6:81:31:94:62:1c:68:81:40:85:39:77:14:
         b1:73:01:94:3b:85:56:4c:a7:cf:b9:b3:b8:11:73:53:23:5f:
         ee:76:6f:fa:19:db:0e:fc:97:d0:5b:ec:c6:9c:ca:98:9b:be:
         f8:fe:aa:46:18:de:5a:3e:d3:e6:a0:d5:dc:31:51:d7:a8:15:
         32:9b:22:26:7d:32:14:72:bc:99:83:d1:ac:f0:3a:38:34:45:
         76:85:db:dd:05:36:e7:06:db:3c:3a:21:aa:3e:2d:5b:e8:e1:
         76:ca:a7:14:a8:7a:22:e2:f8:1e:7f:81:27:60:6e:20:28:b5:
         89:2a:3e:90:a7:6e:37:cd:64:de:87:e1:8f:62:a7:4e:29:4d:
         76:44:9e:6d:ec:bd:3f:97:5c:34:f0:e8:e5:1b:37:29:21:85:
         09:8e:23:e6:71:4b:13:2a:62:ad:51:bd:16:63:fe:e1:01:d6:
         c1:3e:19:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org