Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3234203d3e20323632393031.roa
File:                     3139312e3234302e3137362e302f32302d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          BMu3NTU1i9JP/6yUYLT4xAdEAeY+nFE/9+4h4s4MWRI=
Subject key identifier:   66:03:B2:52:07:34:60:15:C6:ED:FA:C3:14:44:D2:E1:A5:77:FC:13
Certificate issuer:       /CN=06881049B94787E5C7A09A8083CA7953DD26CC5E
Certificate serial:       06F018A260FE062DE553BC2F9129C3AA206238ED
Authority key identifier: 06:88:10:49:B9:47:87:E5:C7:A0:9A:80:83:CA:79:53:DD:26:CC:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06881049B94787E5C7A09A8083CA7953DD26CC5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3234203d3e20323632393031.roa
Signing time:             Thu 22 Feb 2024 16:13:01 +0000
ROA not before:           Thu 22 Feb 2024 16:08:01 +0000
ROA not after:            Thu 20 Feb 2025 16:13:01 +0000
asID:                     262901
IP address blocks:        191.240.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f0:18:a2:60:fe:06:2d:e5:53:bc:2f:91:29:c3:aa:20:62:38:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06881049B94787E5C7A09A8083CA7953DD26CC5E
        Validity
            Not Before: Feb 22 16:08:01 2024 GMT
            Not After : Feb 20 16:13:01 2025 GMT
        Subject: CN=6603B25207346015C6EDFAC31444D2E1A577FC13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:d4:0f:27:0b:cf:92:0c:45:dd:aa:a1:af:
                    a6:83:46:b2:66:86:8d:68:0b:22:15:97:12:db:2b:
                    fa:ef:02:a0:87:91:62:85:58:fe:81:d5:76:4d:0b:
                    db:c6:68:39:91:21:96:6a:cc:d0:9b:58:f8:ba:75:
                    9c:86:91:36:89:97:4b:0c:7e:d2:cc:d2:ad:d8:95:
                    58:21:1f:87:e7:14:7d:85:5b:55:33:af:5d:6b:65:
                    90:a5:c7:b1:57:82:80:c8:23:c7:09:97:f3:8b:75:
                    69:a7:89:90:f6:bd:05:35:58:ba:b9:b8:ae:a6:d3:
                    a3:6a:c5:4d:a8:f5:85:ac:41:ba:ff:37:6d:06:f5:
                    f5:52:9b:2f:90:ba:ba:8d:76:3d:17:fd:d6:d8:6b:
                    58:78:7e:cc:65:5f:aa:3a:11:8f:c4:fd:13:19:27:
                    2a:b8:38:4d:df:6a:71:82:f5:cb:ef:1e:cf:34:28:
                    5d:ed:f1:de:6f:76:4a:f0:4d:14:69:81:04:c5:7d:
                    b1:d5:ff:bd:15:1e:cf:7d:e8:a9:98:68:b7:82:ed:
                    7d:4e:d8:eb:e2:d6:c0:6f:37:89:cd:84:ed:71:9e:
                    b4:70:08:f3:a3:ae:97:32:f5:10:49:88:8d:ff:ec:
                    78:51:fe:dd:a8:f5:7a:55:58:85:f7:28:0b:3c:b0:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:03:B2:52:07:34:60:15:C6:ED:FA:C3:14:44:D2:E1:A5:77:FC:13
            X509v3 Authority Key Identifier:
                keyid:06:88:10:49:B9:47:87:E5:C7:A0:9A:80:83:CA:79:53:DD:26:CC:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/06881049B94787E5C7A09A8083CA7953DD26CC5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06881049B94787E5C7A09A8083CA7953DD26CC5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:64:23:27:b9:42:98:92:df:0c:73:1e:ea:5d:ec:d9:77:39:
         8e:2d:0e:56:31:89:9c:6b:e5:b1:a8:66:04:dc:7a:24:b2:69:
         e8:7b:d5:26:b4:4e:52:b4:64:28:25:77:d7:e8:93:21:ef:ca:
         1f:3b:27:24:c8:d9:2d:9a:77:12:c5:b1:cc:4e:f4:98:58:c4:
         b4:40:4c:78:19:e2:2b:84:2c:43:c0:28:99:4a:77:2c:9d:b9:
         d0:65:f4:d0:f3:74:63:c2:7e:89:d5:b6:a4:a5:35:74:1f:88:
         18:06:37:23:a7:81:8f:6e:5f:96:1e:43:19:18:b2:47:4c:b2:
         f3:cd:06:30:dd:e8:0c:dc:1d:ce:d8:52:ee:7e:94:65:cb:9a:
         d9:17:63:83:20:73:65:e3:a2:ed:1b:2f:1c:4d:8d:20:c6:17:
         5d:3a:ba:90:e3:61:b2:7d:8f:b6:84:93:4c:4c:1f:54:00:bb:
         2f:0f:2c:57:3c:d7:3a:f1:f5:75:ee:4d:28:a2:80:5a:12:72:
         46:86:e1:4a:02:e6:1f:fa:4a:89:34:25:8a:6c:c8:f0:de:5d:
         91:17:7d:5e:f6:21:b8:17:f9:1b:38:7c:0a:d6:ed:1f:2a:b1:
         9e:06:bf:12:e9:ca:d5:b3:14:14:2a:8b:6f:29:ed:f6:63:4f:
         bb:58:18:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org