Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e33302e302f32342d3234203d3e20323633353234.roa
File:                     3139312e3235332e33302e302f32342d3234203d3e20323633353234.roa (raw, json)
Hash identifier:          nr9eG1SFfi21JzR3JxuYZLVbzLA0iXIsJUbtScbiQD8=
Subject key identifier:   69:14:F6:F9:1C:9D:BA:0B:11:13:3E:5B:16:A0:AD:9F:00:80:87:C9
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       4A8FE62790E2328274B2EA9FC117AC1CD65A0E5C
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e33302e302f32342d3234203d3e20323633353234.roa
Signing time:             Thu 12 Jan 2023 11:38:12 +0000
ROA not before:           Thu 12 Jan 2023 11:33:12 +0000
ROA not after:            Thu 11 Jan 2024 11:38:12 +0000
asID:                     263524
IP address blocks:        191.253.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8f:e6:27:90:e2:32:82:74:b2:ea:9f:c1:17:ac:1c:d6:5a:0e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Jan 12 11:33:12 2023 GMT
            Not After : Jan 11 11:38:12 2024 GMT
        Subject: CN=6914F6F91C9DBA0B11133E5B16A0AD9F008087C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b6:93:1d:e2:6c:a1:d0:29:93:2a:59:3e:72:
                    82:6b:84:cb:19:6f:d1:7a:d3:c7:0f:ea:f9:f8:2c:
                    67:bd:70:c7:c8:41:ed:f9:d4:a1:84:55:b3:96:53:
                    90:d0:d0:5b:82:e7:39:84:61:5f:63:4b:7c:ad:59:
                    ca:8f:04:0a:c4:75:7c:bf:08:35:01:6c:45:da:c5:
                    fa:c8:9e:b4:ad:76:d5:73:ea:2a:fc:f4:33:90:de:
                    07:15:38:1b:40:2b:4f:a5:2a:c1:82:28:89:ce:31:
                    6c:77:bd:de:53:2e:cd:4f:eb:81:9d:f9:e2:c7:e0:
                    61:96:82:42:ed:0e:0f:6e:58:4e:d2:9a:e3:5c:13:
                    18:fd:6e:40:fc:06:43:81:46:2e:4e:16:30:77:eb:
                    cf:f2:d2:97:4c:07:88:97:13:60:87:ae:11:4d:a0:
                    e9:bd:cd:ce:05:5e:18:20:91:c8:73:b7:c6:6a:3e:
                    97:5c:81:09:15:f8:b8:60:c6:49:70:78:6c:c9:57:
                    1d:39:70:be:c9:78:f6:2f:60:9a:59:7d:9d:59:75:
                    40:2d:cf:d6:ae:40:fd:78:96:50:dc:3c:f5:5e:21:
                    da:d0:8f:4c:47:29:72:e7:ac:59:62:98:4c:4b:bb:
                    1a:5b:08:e4:a2:e4:5d:25:03:fb:94:59:62:bd:cf:
                    be:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:14:F6:F9:1C:9D:BA:0B:11:13:3E:5B:16:A0:AD:9F:00:80:87:C9
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e33302e302f32342d3234203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:02:20:ef:63:ad:1e:5e:64:00:b4:66:78:49:0b:33:49:af:
         f0:fa:6a:dc:1c:09:e0:0f:30:c1:d7:99:df:ae:bb:e9:5b:7a:
         49:16:e0:7d:b1:40:26:ab:c5:b8:87:95:98:e6:48:c8:be:76:
         ef:0b:4e:0a:c6:9e:09:f9:e0:7a:66:f9:50:2f:b1:63:be:b1:
         42:23:0d:50:a8:cd:f3:90:5e:1f:89:5b:e1:88:82:7d:35:7b:
         e3:e2:d6:35:aa:98:98:8b:9b:a9:fc:f2:1e:67:4d:53:24:86:
         06:3f:d0:16:ab:76:c9:a3:3b:50:7a:ef:92:ff:08:54:16:7f:
         4c:9b:fe:6c:83:bf:5e:76:d9:48:d1:7f:1e:62:a3:60:93:5a:
         4d:f8:25:fe:66:26:d1:d0:4c:f1:d5:ff:05:41:e7:b8:51:2e:
         21:cb:7a:47:b4:e7:33:98:3c:7d:96:04:c4:c6:39:f7:31:3d:
         84:12:4a:26:0a:64:43:7a:83:7f:c0:ad:79:23:8b:6b:29:b8:
         b5:07:c3:ba:5d:52:1b:10:70:b8:85:e9:5f:64:52:89:5e:21:
         dc:7c:5b:fa:4d:f9:8c:a2:12:40:bf:c2:c6:4a:2d:ef:5f:98:
         49:ae:47:9b:91:68:95:32:b2:b1:0d:a8:7c:7c:c8:73:05:c8:
         ac:8a:ca:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org