Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/3139322e3134302e382e302f32342d3234203d3e20323636313534.roa
File:                     3139322e3134302e382e302f32342d3234203d3e20323636313534.roa (raw, json)
Hash identifier:          FQbu4mDgGViKZ/rk5oACBCb3Ha9g+ygdB41UhBympV8=
Subject key identifier:   04:9D:04:68:67:D1:71:68:29:65:8B:2B:8F:96:C8:C1:6C:34:EE:FA
Certificate issuer:       /CN=10B05660CB8C13B3B13E3B0810B278833D500547
Certificate serial:       0D0FBF23419144EA586DAFFA7278A3D9E55E82BF
Authority key identifier: 10:B0:56:60:CB:8C:13:B3:B1:3E:3B:08:10:B2:78:83:3D:50:05:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10B05660CB8C13B3B13E3B0810B278833D500547.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/3139322e3134302e382e302f32342d3234203d3e20323636313534.roa
Signing time:             Thu 15 Jun 2023 17:34:39 +0000
ROA not before:           Thu 15 Jun 2023 17:29:39 +0000
ROA not after:            Thu 13 Jun 2024 17:34:39 +0000
asID:                     266154
IP address blocks:        192.140.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0f:bf:23:41:91:44:ea:58:6d:af:fa:72:78:a3:d9:e5:5e:82:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10B05660CB8C13B3B13E3B0810B278833D500547
        Validity
            Not Before: Jun 15 17:29:39 2023 GMT
            Not After : Jun 13 17:34:39 2024 GMT
        Subject: CN=049D046867D1716829658B2B8F96C8C16C34EEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bf:f7:51:a5:33:fb:ea:ef:1b:f7:e2:ff:dd:
                    27:d5:f4:7e:9c:d4:69:79:d5:6b:f1:af:6a:79:55:
                    d9:bd:09:33:0a:60:81:b0:43:85:f9:67:6d:02:c6:
                    8d:8d:60:5f:dc:22:c8:e1:34:24:69:66:f1:5f:dc:
                    23:3d:ad:77:1b:c7:3a:36:f1:6f:57:8e:9b:60:0d:
                    1a:65:85:61:5b:98:8c:0d:c2:13:96:ac:30:5e:b7:
                    80:58:fb:f8:9e:97:03:99:6d:9e:33:57:c5:a2:c2:
                    22:35:8d:ba:67:4b:6d:a1:2b:f4:6d:cc:a1:2e:c5:
                    5f:65:8f:5e:67:fb:7e:26:fc:20:e2:6e:be:c3:ec:
                    d7:63:78:f9:db:4e:7a:9c:c0:9c:07:3f:39:3a:d5:
                    37:93:79:dc:0c:eb:ce:96:38:6f:52:29:8b:21:d6:
                    da:5a:73:7a:8c:b3:3a:58:69:f3:d0:97:2c:2d:a1:
                    aa:28:dc:82:87:ec:18:a4:a4:7c:ad:14:6a:97:78:
                    a0:69:83:b5:aa:fb:36:8e:44:31:89:af:63:a8:0c:
                    8c:02:a9:d8:ac:2e:b1:23:08:3b:de:84:ef:26:b0:
                    ab:6d:d9:58:d2:81:9d:05:2a:5e:cc:c0:00:0b:ea:
                    c3:fb:c1:67:c7:fe:a5:2c:ad:0b:72:42:db:85:f0:
                    99:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9D:04:68:67:D1:71:68:29:65:8B:2B:8F:96:C8:C1:6C:34:EE:FA
            X509v3 Authority Key Identifier:
                keyid:10:B0:56:60:CB:8C:13:B3:B1:3E:3B:08:10:B2:78:83:3D:50:05:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/10B05660CB8C13B3B13E3B0810B278833D500547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10B05660CB8C13B3B13E3B0810B278833D500547.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/3139322e3134302e382e302f32342d3234203d3e20323636313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:da:c7:2a:c8:f2:d0:3b:60:f8:06:3e:be:f0:3a:2f:60:9a:
         a5:96:6a:cd:e1:17:12:f8:c8:93:6e:a6:45:e2:ec:58:91:56:
         c4:f5:f2:e6:4c:03:c6:84:fc:a8:40:13:03:1b:97:f0:d8:79:
         80:fc:60:20:e8:a5:95:67:09:94:85:f2:90:64:dc:0e:18:0d:
         9d:ff:0a:33:11:8f:3c:a7:9a:dd:9f:a1:64:8b:fe:72:25:e6:
         9c:dd:40:92:b5:27:43:a8:c2:ad:9c:e2:e6:a4:cf:1b:cd:9f:
         ff:b6:57:a7:2c:14:ee:88:19:20:1f:63:57:7f:3d:29:17:da:
         b9:06:ec:95:73:65:19:ee:3f:85:d5:bc:47:56:cb:74:bf:94:
         35:1b:7a:03:9a:01:fd:ea:5e:88:6c:15:01:5b:81:ec:ed:cb:
         10:bf:10:96:d5:81:6b:e4:48:f9:bf:c7:28:b8:b2:47:3f:cf:
         d2:14:6e:c0:62:4b:46:19:45:d8:bc:b5:2a:23:ec:2b:73:50:
         80:60:0f:93:9e:c0:b3:70:fe:6e:04:f6:8a:36:a3:4a:2d:6e:
         cc:10:56:6c:15:f8:da:bf:ed:15:ee:3e:cb:42:4c:27:c7:f5:
         00:5b:74:6d:43:b7:7b:46:8a:3a:a7:0b:6d:90:a0:57:51:0f:
         2d:a1:ec:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org