Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3139312e362e3233322e302f32312d3234203d3e203238363339.roa
File:                     3139312e362e3233322e302f32312d3234203d3e203238363339.roa (raw, json)
Hash identifier:          c2Jb+OKdLkpbuFt+qdGFCGotMKv/mQM8FaUF7C8UWxE=
Subject key identifier:   79:E1:C8:9F:B7:33:11:5D:CE:75:7A:FF:F5:C2:ED:85:82:18:1E:3E
Certificate issuer:       /CN=3EBC3FE2232091904C043FBCE9FE1663C1E92CBB
Certificate serial:       FA01E8682F9FA3D2049B24BE72D6F7DB621B62
Authority key identifier: 3E:BC:3F:E2:23:20:91:90:4C:04:3F:BC:E9:FE:16:63:C1:E9:2C:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3139312e362e3233322e302f32312d3234203d3e203238363339.roa
Signing time:             Fri 02 Sep 2022 18:55:27 +0000
ROA not before:           Fri 02 Sep 2022 18:50:27 +0000
ROA not after:            Fri 01 Sep 2023 18:55:27 +0000
asID:                     28639
IP address blocks:        191.6.232.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fa:01:e8:68:2f:9f:a3:d2:04:9b:24:be:72:d6:f7:db:62:1b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EBC3FE2232091904C043FBCE9FE1663C1E92CBB
        Validity
            Not Before: Sep  2 18:50:27 2022 GMT
            Not After : Sep  1 18:55:27 2023 GMT
        Subject: CN=79E1C89FB733115DCE757AFFF5C2ED8582181E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:fa:e2:40:88:8b:8f:a7:b6:dc:06:ad:30:
                    cf:81:86:6d:eb:4c:f9:38:aa:b6:24:62:ef:13:3b:
                    3f:df:16:a3:c9:48:9b:97:a2:7a:56:37:10:39:63:
                    25:42:6a:bf:99:46:76:49:92:ee:f8:a9:69:72:9f:
                    db:79:a3:4f:40:d4:22:8c:0e:ef:6f:ba:a3:31:a8:
                    9b:c5:cb:41:77:ab:4c:78:75:53:83:11:63:b5:b6:
                    bf:1f:9b:f2:37:9a:d7:e6:c0:02:cf:f6:fb:f1:3b:
                    9e:01:ec:bb:f4:42:3e:1a:89:64:ed:6e:8d:03:a9:
                    75:1d:73:20:8e:c7:ad:3a:37:cf:84:7d:7c:83:69:
                    7a:f0:51:25:54:24:71:41:f5:0f:06:22:c5:62:0b:
                    40:06:17:b6:eb:46:05:09:a6:9a:1f:f3:0b:b6:3e:
                    6f:7c:4a:e4:e2:ea:4e:dc:f4:c7:bc:a8:e1:9a:fe:
                    1d:60:87:6c:64:2d:a6:85:4d:b0:4c:bf:05:4b:68:
                    8c:4b:5a:e5:df:5f:63:e1:92:1e:b1:d9:b2:ec:cb:
                    31:41:09:20:40:fc:74:70:c3:e7:e0:06:db:2c:43:
                    72:66:ad:82:72:48:b9:ff:10:47:d5:57:df:f6:98:
                    b8:19:94:1b:ef:8a:1e:4c:56:a1:5f:6d:99:ec:4e:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E1:C8:9F:B7:33:11:5D:CE:75:7A:FF:F5:C2:ED:85:82:18:1E:3E
            X509v3 Authority Key Identifier:
                keyid:3E:BC:3F:E2:23:20:91:90:4C:04:3F:BC:E9:FE:16:63:C1:E9:2C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3139312e362e3233322e302f32312d3234203d3e203238363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:f9:f5:92:86:88:db:da:58:4f:01:50:83:9e:f5:5a:a0:51:
         93:70:97:0b:b3:32:60:32:e0:db:3f:40:12:2b:53:2d:dc:d8:
         21:fa:49:12:11:59:f5:b6:93:74:7f:e0:d8:d9:57:e4:66:36:
         63:e1:fa:2d:83:89:bd:e8:1a:e5:e5:7b:57:ea:19:29:99:f5:
         3a:8c:6f:bd:12:a4:27:86:fa:32:2a:f9:2f:cc:4e:46:3d:08:
         92:92:d4:77:d4:a0:c3:8f:9e:ae:49:67:8e:2d:9b:42:1f:dd:
         e1:18:2a:58:f5:23:27:9d:c9:5e:51:e0:40:17:9b:f9:44:1e:
         88:28:b1:e0:b1:c3:55:b8:5b:be:ce:86:4e:3f:8e:0b:29:35:
         ff:c8:3b:ca:67:20:71:bc:d5:38:57:c5:c6:f6:38:84:30:f5:
         fa:e1:6d:e2:12:cf:8a:ff:8d:b2:61:5f:1b:48:a1:ec:99:82:
         8c:f1:ef:6f:c8:0e:39:31:8c:5b:06:a7:eb:6d:7c:91:75:aa:
         d0:d7:a9:b2:2a:ea:31:de:ff:36:02:14:3f:5c:91:30:37:a8:
         c9:df:af:6f:8b:d8:fb:fe:c3:7c:d0:bf:f5:5c:5f:99:26:b1:
         3b:a6:80:47:56:de:09:70:56:ab:8c:0f:fd:30:e8:96:93:21:
         2a:a3:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:25 2023 by rpki-client on console-ams.rpki-client.org