Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5KmGb7ewX6qGJx4DVsub4UA5MPzhnKCzZwRAJcHQXtWh/0/3139322e3134302e3131362e302f32322d3234203d3e20323636323430.roa
File:                     3139322e3134302e3131362e302f32322d3234203d3e20323636323430.roa (raw, json)
Hash identifier:          dlIUZenNzCI7ZV/10QQxPtq65s8dMag1PImJOnCi+yk=
Subject key identifier:   40:6C:60:1E:52:45:D3:38:1B:68:9F:54:ED:8A:6A:C9:3B:7F:12:75
Certificate issuer:       /CN=81E42B1CBE562AD0450D7F0F66931ED951752ECD
Certificate serial:       41498E803CC7B9FA4691DBB2571453C477F9DAFD
Authority key identifier: 81:E4:2B:1C:BE:56:2A:D0:45:0D:7F:0F:66:93:1E:D9:51:75:2E:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81E42B1CBE562AD0450D7F0F66931ED951752ECD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5KmGb7ewX6qGJx4DVsub4UA5MPzhnKCzZwRAJcHQXtWh/0/3139322e3134302e3131362e302f32322d3234203d3e20323636323430.roa
Signing time:             Wed 27 Dec 2023 19:50:49 +0000
ROA not before:           Wed 27 Dec 2023 19:45:49 +0000
ROA not after:            Wed 25 Dec 2024 19:50:49 +0000
asID:                     266240
IP address blocks:        192.140.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:49:8e:80:3c:c7:b9:fa:46:91:db:b2:57:14:53:c4:77:f9:da:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81E42B1CBE562AD0450D7F0F66931ED951752ECD
        Validity
            Not Before: Dec 27 19:45:49 2023 GMT
            Not After : Dec 25 19:50:49 2024 GMT
        Subject: CN=406C601E5245D3381B689F54ED8A6AC93B7F1275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:77:03:7f:06:9c:98:e2:7e:73:2f:d1:3e:18:
                    08:54:f6:18:12:64:32:82:4b:bc:bb:25:ff:f4:ee:
                    76:39:79:5b:41:c1:4d:c1:c9:6c:a7:bc:06:1c:d0:
                    46:53:89:77:21:87:a0:a8:4a:0d:db:98:0c:f2:dd:
                    e6:32:dc:19:38:e3:1b:9c:4e:c3:df:e4:1d:f3:af:
                    68:00:fa:f1:6c:86:fe:08:c6:12:d2:9d:ed:d8:67:
                    d9:a6:61:72:cb:1f:fb:fe:ae:8a:ee:d4:51:fe:55:
                    41:8d:f5:56:90:8c:64:79:a4:a4:26:db:c6:0a:61:
                    b6:5f:15:77:ad:df:29:d6:12:fe:7b:d8:42:66:d1:
                    da:99:20:39:89:12:55:5f:4b:a7:9b:93:75:25:6f:
                    ef:5c:83:e9:5b:5c:c4:82:f1:1f:bf:b8:a2:b9:79:
                    03:fa:e1:12:eb:66:04:17:33:0c:78:94:58:b3:22:
                    c4:55:9f:11:ee:e4:7b:37:24:b9:3c:c6:b0:dc:80:
                    f8:22:e6:44:ad:07:f3:eb:a7:3d:f8:c7:d2:f0:74:
                    24:e9:08:a2:ed:df:18:c7:91:32:72:bd:1b:ca:5c:
                    29:98:fa:d5:c7:cc:ad:61:60:b5:99:86:45:ff:b0:
                    f4:5b:76:39:63:41:1f:e0:21:22:b6:56:90:a5:00:
                    37:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6C:60:1E:52:45:D3:38:1B:68:9F:54:ED:8A:6A:C9:3B:7F:12:75
            X509v3 Authority Key Identifier:
                keyid:81:E4:2B:1C:BE:56:2A:D0:45:0D:7F:0F:66:93:1E:D9:51:75:2E:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5KmGb7ewX6qGJx4DVsub4UA5MPzhnKCzZwRAJcHQXtWh/0/81E42B1CBE562AD0450D7F0F66931ED951752ECD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81E42B1CBE562AD0450D7F0F66931ED951752ECD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5KmGb7ewX6qGJx4DVsub4UA5MPzhnKCzZwRAJcHQXtWh/0/3139322e3134302e3131362e302f32322d3234203d3e20323636323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:37:cd:a3:bc:a4:9f:a8:11:03:ed:72:c2:b8:97:68:81:38:
         f4:da:6f:71:82:82:d4:98:78:c9:0d:bf:35:7d:dd:60:8e:81:
         d6:5a:74:8a:55:20:c5:e4:ed:46:e2:ed:52:fa:2e:99:af:6c:
         42:b7:f0:f8:e9:06:51:be:3f:75:15:ee:66:02:2b:cf:dd:2a:
         1e:da:76:36:8a:0b:3d:48:7d:e4:f3:cc:47:ad:aa:96:4c:f0:
         bf:31:c2:e4:b0:60:51:c4:98:fe:ad:8d:6b:06:a2:5d:f7:79:
         b5:1f:ed:5a:e5:9d:b4:66:04:45:60:a6:c8:b8:83:f2:ca:6a:
         09:b2:1e:1c:4d:93:c6:d9:cd:ba:4b:9d:3b:d1:1c:0d:f8:95:
         6e:fb:13:57:f2:00:65:e8:a5:67:70:29:f5:7a:98:0a:57:48:
         35:de:44:31:ec:18:00:91:3a:98:f0:3d:e9:d3:11:1e:70:27:
         1f:82:63:b3:63:1e:83:27:c8:5e:34:ac:ec:7c:98:3e:cf:da:
         80:85:a6:47:1e:21:9c:92:2b:85:91:ef:0b:0b:85:48:4d:cc:
         e7:67:66:32:cd:1d:ea:70:62:3a:ca:45:f6:92:c0:78:27:a6:
         2d:b7:29:ed:89:0d:26:6c:ab:36:31:97:59:1b:e8:ef:15:27:
         4c:e9:79:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org