Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/3139312e33372e3234382e302f32322d3234203d3e20323632343831.roa
File:                     3139312e33372e3234382e302f32322d3234203d3e20323632343831.roa (raw, json)
Hash identifier:          rsgV9UWnA0b7C8Lb8BBfEe+J2hqbHizRJZIkSN/TJR4=
Subject key identifier:   9D:73:50:28:33:DA:42:4F:4C:56:F0:D0:92:0B:EB:60:91:9D:0E:08
Certificate issuer:       /CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
Certificate serial:       0D9D8289EA33EA07409183A35932A24E0DC016E9
Authority key identifier: E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/3139312e33372e3234382e302f32322d3234203d3e20323632343831.roa
Signing time:             Thu 19 Aug 2021 19:20:00 +0000
ROA not before:           Thu 19 Aug 2021 19:15:00 +0000
ROA not after:            Thu 18 Aug 2022 19:20:00 +0000
asID:                     262481
IP address blocks:        191.37.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9d:82:89:ea:33:ea:07:40:91:83:a3:59:32:a2:4e:0d:c0:16:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
        Validity
            Not Before: Aug 19 19:15:00 2021 GMT
            Not After : Aug 18 19:20:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fc:b9:10:60:b8:4a:ba:d5:3e:e1:9d:96:ca:
                    15:4d:fc:12:4c:69:39:96:75:09:92:9b:6b:40:03:
                    c2:73:ea:c0:ad:f9:1e:07:01:8c:e3:89:a2:51:03:
                    0a:6b:e3:13:2c:45:0f:72:3b:09:63:18:e3:4b:39:
                    ab:b9:8c:3a:f2:61:15:33:a0:9c:72:ad:77:0a:03:
                    9f:c7:de:11:fd:bb:71:f3:9f:79:da:67:83:5b:8b:
                    d5:f6:73:59:9b:f3:53:dc:e4:51:1e:b6:0d:21:60:
                    a3:4f:72:2c:24:3a:68:c9:73:ee:b5:99:5a:81:4f:
                    24:51:eb:55:4e:01:49:13:27:f9:bc:f9:13:b2:80:
                    1c:9f:3a:21:f7:85:f2:ff:90:80:be:d5:08:46:31:
                    90:0e:4b:f2:fe:2b:de:52:d7:d9:49:21:1a:38:aa:
                    68:0e:c0:fb:f7:62:42:c9:6f:5c:30:6f:d8:90:5a:
                    9a:f2:13:c8:9a:76:56:aa:26:13:7e:ff:39:8a:07:
                    90:6b:1b:12:3b:da:27:ca:d7:ca:8d:e7:81:8a:22:
                    25:c4:80:7e:af:af:89:47:0d:af:41:ee:ac:4c:5a:
                    35:22:93:1a:89:23:22:1d:11:a1:c2:42:72:84:09:
                    bb:ef:af:dd:8b:4a:e7:12:cd:a3:d0:c5:0a:0d:73:
                    6c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:73:50:28:33:DA:42:4F:4C:56:F0:D0:92:0B:EB:60:91:9D:0E:08
            X509v3 Authority Key Identifier:
                keyid:E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/3139312e33372e3234382e302f32322d3234203d3e20323632343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:2d:f8:49:a9:87:46:58:6f:3b:ae:85:f8:50:5c:89:83:d7:
         f9:94:e4:22:c0:8b:25:2d:f0:ac:62:16:89:ed:9b:ce:7a:f8:
         a4:af:c7:3b:c9:f0:7b:d8:a8:0e:51:ba:cf:9f:59:7d:3e:ec:
         81:b4:b0:cd:ba:4e:07:8b:7c:04:ce:8f:02:7d:ef:b6:5f:78:
         c4:1c:ad:7d:51:06:e8:05:01:c1:02:b4:06:6e:41:61:cf:d4:
         04:a2:52:29:d2:f9:d1:a8:32:66:03:b4:28:9e:59:24:c5:8f:
         a8:cc:0a:b5:b8:05:21:af:8d:14:87:b6:72:45:ae:db:27:f6:
         43:b3:68:e4:b1:a8:cd:ad:d7:8b:77:1f:86:a0:ca:48:79:be:
         36:3c:08:79:a7:69:dd:94:7c:5c:63:90:d7:19:3c:67:da:be:
         fd:b3:27:e9:4f:5c:c7:bd:03:cd:44:49:0b:ad:89:68:5b:d9:
         76:a3:49:2f:72:6f:d0:a4:6d:c9:7c:9e:9a:4a:81:7e:d6:1a:
         15:7c:3c:e0:a0:08:64:e8:05:3a:71:8d:58:dc:7f:db:7b:d1:
         50:11:94:8a:03:20:40:44:9e:c7:a7:6a:de:f3:1e:b3:0e:fe:
         3a:4a:6d:eb:4c:48:83:88:75:6e:1b:6d:52:7e:bc:10:2b:1a:
         63:ea:4f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org