Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/3139302e3139362e3234342e302f32332d3233203d3e20323636313736.roa
File:                     3139302e3139362e3234342e302f32332d3233203d3e20323636313736.roa (raw, json)
Hash identifier:          bcQjm1mMtykmNe9jyTtttUE28mHyB0TFoZ0u91UPfAk=
Subject key identifier:   9D:1E:D4:9D:52:EE:49:6C:BE:93:3D:66:1C:8C:FB:51:DD:1E:92:3B
Certificate issuer:       /CN=A7EB3670BE4A7F2675ECAD168E7B035DF544B5FA
Certificate serial:       14A65B4309669F7B92D44F54630E9395F647EF58
Authority key identifier: A7:EB:36:70:BE:4A:7F:26:75:EC:AD:16:8E:7B:03:5D:F5:44:B5:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7EB3670BE4A7F2675ECAD168E7B035DF544B5FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/3139302e3139362e3234342e302f32332d3233203d3e20323636313736.roa
Signing time:             Fri 03 Feb 2023 14:06:44 +0000
ROA not before:           Fri 03 Feb 2023 14:01:44 +0000
ROA not after:            Fri 02 Feb 2024 14:06:44 +0000
asID:                     266176
IP address blocks:        190.196.244.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a6:5b:43:09:66:9f:7b:92:d4:4f:54:63:0e:93:95:f6:47:ef:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7EB3670BE4A7F2675ECAD168E7B035DF544B5FA
        Validity
            Not Before: Feb  3 14:01:44 2023 GMT
            Not After : Feb  2 14:06:44 2024 GMT
        Subject: CN=9D1ED49D52EE496CBE933D661C8CFB51DD1E923B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:53:67:54:1d:2b:69:73:fa:85:07:34:5a:
                    eb:28:d3:b1:e2:33:ce:c7:6b:c6:05:66:e9:68:33:
                    62:0d:24:fe:69:bb:e8:2e:6a:f3:e3:2d:9c:30:32:
                    1e:60:41:46:09:58:05:82:ea:93:1f:27:e8:f0:4b:
                    2f:09:f2:00:39:b3:10:e7:4b:67:ba:b7:e0:95:03:
                    28:af:b6:86:fb:db:15:43:41:a6:95:19:00:e9:d4:
                    ee:98:dc:65:cf:82:51:4f:53:ae:a4:6c:01:d4:52:
                    57:2b:b2:12:ba:91:7c:22:4b:1c:98:f6:6a:73:52:
                    07:69:0b:42:0b:3a:47:be:95:d8:ce:e8:80:23:a6:
                    b0:dd:9f:c9:77:c2:8a:7c:45:4d:61:bb:64:47:60:
                    44:53:a4:38:51:02:25:e1:29:32:75:a3:bb:3b:15:
                    81:ec:f3:d0:5b:17:f7:61:6e:11:de:37:5c:98:60:
                    bd:6a:d1:d4:13:85:fa:50:e0:4e:3d:0f:a6:1c:a0:
                    37:48:e0:fb:66:01:a2:b0:16:24:d8:b6:2f:32:ce:
                    03:fa:44:7f:07:a5:81:44:dc:41:c7:c9:e4:02:ab:
                    e1:25:84:47:29:7e:87:27:2c:56:d7:f2:9f:26:2f:
                    2b:95:22:63:0e:e7:23:7d:02:dd:4c:dc:a9:1b:85:
                    d7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1E:D4:9D:52:EE:49:6C:BE:93:3D:66:1C:8C:FB:51:DD:1E:92:3B
            X509v3 Authority Key Identifier:
                keyid:A7:EB:36:70:BE:4A:7F:26:75:EC:AD:16:8E:7B:03:5D:F5:44:B5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/A7EB3670BE4A7F2675ECAD168E7B035DF544B5FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7EB3670BE4A7F2675ECAD168E7B035DF544B5FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/3139302e3139362e3234342e302f32332d3233203d3e20323636313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e3:13:99:10:ad:58:2c:55:82:da:9b:64:29:02:44:e4:b5:e4:
         c1:92:11:3f:3d:82:a8:88:38:b7:90:73:47:ad:83:f5:95:72:
         44:94:c9:aa:7a:6f:f2:8f:b9:06:40:72:b3:67:9a:58:1f:a5:
         56:e9:af:9c:cc:70:4f:36:cf:5a:a9:48:11:45:98:e1:be:f9:
         1e:3a:bb:d5:1c:65:b9:23:5e:9b:51:a6:54:cb:bc:a3:0c:c7:
         9c:62:34:f1:e8:66:b9:75:86:4b:f3:32:56:cd:ef:cf:bf:e3:
         66:31:a5:0b:28:68:66:93:47:53:d6:c8:5d:0b:66:6a:52:92:
         88:96:70:b4:f2:49:b1:93:cb:83:82:11:23:fa:54:7e:f9:1d:
         9b:f4:51:36:47:ad:d2:d3:dc:9b:0d:f5:3e:b9:76:53:f0:5e:
         36:14:67:7a:5c:9f:4c:40:6f:e7:a1:34:0a:54:b6:94:75:6d:
         24:92:ce:c0:50:ce:43:6b:62:31:df:c7:e2:5a:80:01:77:b5:
         d7:66:08:b3:e6:36:31:9e:ae:a3:ed:89:be:6c:69:82:55:67:
         6c:7d:ab:30:68:fe:27:77:e5:a3:22:f1:a0:36:24:3a:aa:99:
         26:08:77:5b:5f:de:e2:7c:0c:fe:aa:bf:86:1d:9f:15:db:0f:
         11:e0:12:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org