Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3139312e3235332e3232342e302f32302d3234203d3e203238353830.roa
File:                     3139312e3235332e3232342e302f32302d3234203d3e203238353830.roa (raw, json)
Hash identifier:          uiYVS3cEIKy/+3AWLsB6uV/Z9LidMDANRinCOMvvy68=
Subject key identifier:   6D:53:95:24:B8:CC:B7:3F:E5:38:D4:27:13:B7:71:7D:68:A9:9E:87
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       2EE120C0C0100A6E77069747F002295FFABB468E
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3139312e3235332e3232342e302f32302d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:06 +0000
ROA not before:           Thu 19 Oct 2023 19:10:06 +0000
ROA not after:            Thu 17 Oct 2024 19:15:06 +0000
asID:                     28580
IP address blocks:        191.253.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e1:20:c0:c0:10:0a:6e:77:06:97:47:f0:02:29:5f:fa:bb:46:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:06 2023 GMT
            Not After : Oct 17 19:15:06 2024 GMT
        Subject: CN=6D539524B8CCB73FE538D42713B7717D68A99E87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:63:6e:be:78:70:3d:e3:fa:7d:ab:fa:ad:87:
                    09:96:f0:b8:9d:54:54:30:a1:e8:b7:d1:46:23:63:
                    bd:7a:ec:37:b2:d6:bf:97:dd:c4:fb:d1:2a:31:2a:
                    34:dd:33:c1:3c:b7:2b:90:ab:a1:97:cc:bb:c9:41:
                    91:e2:ba:9e:95:16:70:4f:e2:98:c2:4d:1c:23:7e:
                    89:90:fb:4a:bc:89:25:6a:ae:bd:c2:ff:1d:ba:85:
                    83:e2:72:0b:12:c4:0e:ea:06:44:fa:07:85:10:c7:
                    c6:02:99:98:93:86:35:ac:bd:05:84:93:31:21:04:
                    57:fd:3e:0f:98:2b:19:b8:19:be:e7:99:6b:0d:de:
                    90:38:00:ee:06:fc:6d:b5:75:7a:7f:09:79:10:41:
                    70:51:44:f4:0c:23:ee:67:5f:f4:d2:9e:94:e0:67:
                    e0:b4:ec:90:a2:e3:5d:0c:dc:e4:a7:9f:73:09:90:
                    77:97:c6:cc:81:e1:fe:79:d7:10:d4:43:0f:75:56:
                    8f:9c:9f:09:fd:e3:16:0b:62:5c:c8:dd:60:82:6b:
                    c8:a7:5f:69:87:4b:c2:ab:b9:3d:79:f1:ee:c1:72:
                    b5:5e:3a:de:82:ab:04:49:6d:b0:f2:19:fd:e9:33:
                    38:f3:b3:11:08:d5:98:04:ba:a4:53:fb:f7:c3:e6:
                    d1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:53:95:24:B8:CC:B7:3F:E5:38:D4:27:13:B7:71:7D:68:A9:9E:87
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3139312e3235332e3232342e302f32302d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:2e:e8:24:aa:bd:a5:d7:28:79:e2:b5:e8:ae:3b:c7:72:09:
         dc:b2:4f:b0:d3:e8:cd:49:e9:a1:df:f5:49:28:9a:db:94:fe:
         5e:62:25:9f:5c:fc:a0:42:27:16:b5:06:c5:d7:33:45:8c:80:
         5c:79:32:37:93:cc:2d:4d:1a:c2:47:a3:0e:39:41:12:df:d6:
         b0:e1:60:6a:a2:4b:65:7d:94:2b:1d:bc:5d:be:52:ab:51:ea:
         6b:94:67:e5:de:5f:b3:74:81:7d:8e:e9:71:4a:b4:b7:a0:62:
         59:df:a8:af:2f:6f:9c:89:57:5a:82:c1:5a:ff:08:04:a6:4b:
         87:19:0e:03:d3:36:9c:6a:a9:b5:7f:21:11:57:38:26:5d:ae:
         9d:eb:e7:0a:c2:e9:27:6d:f6:2d:ae:cd:4d:42:8b:f4:d8:cd:
         ea:f3:c2:09:3b:cf:3f:62:f0:4d:5d:70:f6:76:76:da:12:db:
         30:d9:79:9d:c7:50:37:af:16:bc:b7:d4:d3:a4:10:ec:2c:90:
         17:d6:83:9e:0a:5a:92:17:dd:60:dc:9c:f4:95:e4:4a:e6:27:
         74:7e:e1:40:dd:ec:f3:a4:62:17:35:61:43:87:5f:f9:3e:bd:
         ef:70:ee:01:ed:18:69:ad:27:2c:aa:81:05:d9:7d:8c:98:6a:
         54:77:dc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org