Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa
File:                     3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (raw, json)
Hash identifier:          ibHKPKVPWBdtvfo5PwUTh0v6TtJI+uiaXi3A9dQLdQo=
Subject key identifier:   75:72:C2:3C:3C:A5:1B:15:3C:98:C9:BF:0A:1E:BE:7A:35:DA:4F:03
Certificate issuer:       /CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
Certificate serial:       773110B4ABDEAF1B31E2697CFB4DF70E97611BF0
Authority key identifier: 6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa
Signing time:             Fri 12 Apr 2024 13:19:45 +0000
ROA not before:           Fri 12 Apr 2024 13:14:45 +0000
ROA not after:            Fri 11 Apr 2025 13:19:45 +0000
asID:                     263528
IP address blocks:        191.253.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:31:10:b4:ab:de:af:1b:31:e2:69:7c:fb:4d:f7:0e:97:61:1b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
        Validity
            Not Before: Apr 12 13:14:45 2024 GMT
            Not After : Apr 11 13:19:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d5:a9:75:9d:57:e2:e0:8c:dc:8d:42:c4:db:
                    0d:43:a6:a3:ff:99:2f:68:d2:86:37:19:9d:d0:d9:
                    46:5c:3b:96:16:6b:39:be:ba:cc:23:74:46:42:92:
                    b9:5e:83:b4:8c:9e:5b:15:50:cb:41:78:f6:ca:73:
                    27:02:5c:59:1c:2a:36:69:6b:4e:1d:fc:49:83:5a:
                    bd:a6:c0:26:e7:4f:01:28:98:b7:ed:50:c9:c2:19:
                    e2:4f:56:bf:52:53:10:0b:f2:cf:d7:b4:a7:ab:17:
                    a0:73:6e:2d:2e:34:2a:4b:35:32:f3:8d:36:05:ce:
                    d8:aa:e0:dc:45:6d:d8:14:c4:6e:5d:fc:57:a9:5b:
                    36:44:4f:9f:bb:14:c7:a5:6b:cf:f7:43:8d:dc:da:
                    6c:8e:4d:bf:a3:37:8e:2e:ab:0a:69:3e:37:2a:94:
                    c1:ee:5d:c2:91:c0:6b:5d:42:b7:0f:db:55:ec:a2:
                    6f:78:e1:c2:46:84:39:71:df:ef:63:8a:5d:35:8d:
                    3b:43:8e:92:bf:4a:63:d0:4c:e4:60:0e:f5:46:34:
                    f6:5d:86:d7:d2:03:c6:17:88:ad:58:27:78:1b:8c:
                    5c:f8:b1:da:34:39:d3:84:29:93:76:41:02:a4:f0:
                    4d:72:e5:42:93:bd:c6:b6:0b:47:15:6e:57:1e:18:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:72:C2:3C:3C:A5:1B:15:3C:98:C9:BF:0A:1E:BE:7A:35:DA:4F:03
            X509v3 Authority Key Identifier:
                keyid:6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:ed:84:54:a8:26:3c:e7:d5:0b:2e:4c:4f:c2:d6:b3:63:bc:
         3c:d6:d6:2b:a4:61:a1:38:46:48:1b:b7:1a:14:f0:0a:f6:0a:
         1e:12:30:25:1d:59:8c:00:17:23:0e:a9:a8:ca:5e:59:70:95:
         4e:c8:ee:48:29:a1:9c:14:43:5c:36:54:6a:7f:4e:28:79:bd:
         7c:8f:44:94:64:87:fb:49:2b:22:cd:b8:c9:ba:67:64:a5:cc:
         12:0b:01:e8:38:1b:8a:23:fa:b9:c3:8d:08:34:91:26:12:d8:
         9e:6b:10:87:ee:52:0c:5c:f0:d8:3e:6d:30:e9:19:2c:36:6b:
         55:4b:4f:1a:e5:bd:29:85:a2:60:3d:e3:f9:df:ee:43:ce:d2:
         d4:e6:07:ef:b1:1f:e2:bc:03:c7:be:61:a6:f2:c9:12:c5:25:
         81:60:31:fa:c8:cf:43:35:ea:db:b9:2a:14:e7:bd:a1:e7:5a:
         ba:20:a7:d6:c5:83:2d:1c:63:fb:07:ac:fa:cd:58:ca:e0:52:
         20:8d:99:71:83:1e:9a:a0:c8:e4:f9:cb:c6:83:28:1a:c4:82:
         b0:40:ec:2d:95:94:32:18:c5:a5:07:e0:f3:c4:62:58:4e:17:
         9b:3d:2c:34:4c:f2:e2:a3:03:a2:53:5e:c8:b2:43:c8:c4:70:
         49:c4:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org