Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bT49NANhaBtN8pntdNKGXgkSmJu1Y2LtvQMooH1o5Rv/0/3139312e3234322e3132382e302f31392d3234203d3e20323632373330.roa
File:                     3139312e3234322e3132382e302f31392d3234203d3e20323632373330.roa (raw, json)
Hash identifier:          CRJnAaxWmFvZzzKRK24/uqlYMq8ZJOAx3/wQQb80460=
Subject key identifier:   33:E4:26:65:73:A2:6C:8B:68:4C:48:12:CA:9F:5C:29:6E:E0:25:53
Certificate issuer:       /CN=E9213DD4021CE06AB92F4683859FB848C0A265FD
Certificate serial:       4332EBBBDC7EFA41A81886C04DD686FBBD72154F
Authority key identifier: E9:21:3D:D4:02:1C:E0:6A:B9:2F:46:83:85:9F:B8:48:C0:A2:65:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9213DD4021CE06AB92F4683859FB848C0A265FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bT49NANhaBtN8pntdNKGXgkSmJu1Y2LtvQMooH1o5Rv/0/3139312e3234322e3132382e302f31392d3234203d3e20323632373330.roa
Signing time:             Wed 14 Jun 2023 14:00:00 +0000
ROA not before:           Wed 14 Jun 2023 13:55:00 +0000
ROA not after:            Wed 12 Jun 2024 14:00:00 +0000
asID:                     262730
IP address blocks:        191.242.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:32:eb:bb:dc:7e:fa:41:a8:18:86:c0:4d:d6:86:fb:bd:72:15:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9213DD4021CE06AB92F4683859FB848C0A265FD
        Validity
            Not Before: Jun 14 13:55:00 2023 GMT
            Not After : Jun 12 14:00:00 2024 GMT
        Subject: CN=33E4266573A26C8B684C4812CA9F5C296EE02553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d7:c7:d2:fd:c0:25:3b:5f:d1:4f:19:31:2f:
                    3a:a5:d6:12:90:c9:66:f1:40:79:12:22:dd:39:28:
                    ae:b8:21:d6:cb:57:e2:fd:40:2f:d0:e5:09:b2:95:
                    ef:d0:04:90:4e:e5:5b:b7:2d:73:ae:57:42:26:f1:
                    7a:16:dc:87:38:e0:40:4a:de:e7:a5:dd:5e:8e:7b:
                    1e:9e:c0:2f:1e:56:48:ac:51:40:27:f2:03:e7:49:
                    f1:42:9b:08:0e:ea:ab:c1:f6:49:43:f6:66:1d:bb:
                    4d:ef:f0:79:6d:6a:3f:08:f8:c6:2c:5e:d8:e9:36:
                    46:2e:60:aa:52:4d:81:32:fa:eb:2c:fe:d5:25:ed:
                    13:ca:11:f0:ae:c9:1b:19:9e:d5:10:b0:de:20:9c:
                    e8:9f:d1:3f:50:98:d8:73:64:7f:96:91:8a:c9:e1:
                    35:68:9b:3b:af:c7:01:46:4f:04:f2:4d:97:e0:da:
                    fb:7d:d2:9c:b3:dc:d2:a9:d9:20:19:74:bb:a6:be:
                    03:ea:92:6b:ae:31:aa:26:05:da:71:1c:bc:ad:ba:
                    88:b1:24:96:7c:f1:b7:56:42:45:ab:04:1d:c9:a2:
                    93:06:32:64:ff:c3:bf:fe:9a:32:31:74:96:15:cd:
                    d9:3e:f0:79:a2:80:2c:a1:ef:6d:0b:8b:96:8b:49:
                    b9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E4:26:65:73:A2:6C:8B:68:4C:48:12:CA:9F:5C:29:6E:E0:25:53
            X509v3 Authority Key Identifier:
                keyid:E9:21:3D:D4:02:1C:E0:6A:B9:2F:46:83:85:9F:B8:48:C0:A2:65:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bT49NANhaBtN8pntdNKGXgkSmJu1Y2LtvQMooH1o5Rv/0/E9213DD4021CE06AB92F4683859FB848C0A265FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9213DD4021CE06AB92F4683859FB848C0A265FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bT49NANhaBtN8pntdNKGXgkSmJu1Y2LtvQMooH1o5Rv/0/3139312e3234322e3132382e302f31392d3234203d3e20323632373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         45:fe:33:28:f4:76:e3:be:0e:5c:58:53:4a:47:4c:ba:fa:3e:
         30:df:58:43:51:96:c4:e0:d4:20:48:01:1e:33:c8:de:e0:44:
         b7:b0:62:bf:38:fd:98:0d:af:80:98:bb:10:19:9d:43:09:94:
         94:a0:f1:94:59:b1:20:c6:a1:80:50:fd:93:46:ee:e3:b2:f5:
         2e:30:81:a6:15:7c:70:b0:fe:83:65:45:6b:98:95:31:f8:7d:
         20:9a:10:df:2b:3d:00:fb:1b:7a:17:17:11:f9:90:2d:cb:1f:
         eb:56:98:04:9e:b2:b0:26:74:2c:42:6f:3d:5e:5f:ca:59:3c:
         ff:21:1b:5d:b4:dd:17:8e:e5:37:b3:67:52:66:77:9d:46:02:
         a0:7b:28:53:31:cf:eb:2b:58:c5:91:96:d4:0c:77:54:de:89:
         b6:19:02:04:ec:97:4a:56:33:73:ab:a5:3c:bf:9f:e7:7c:e8:
         05:e9:a5:ed:cc:e4:ae:03:0a:a4:10:9f:c4:52:3e:74:04:49:
         a7:e4:60:1f:80:7b:fb:6b:6f:49:5c:7e:fc:da:83:08:c3:ce:
         78:3b:03:47:07:64:e7:69:49:12:07:8c:33:43:96:92:90:b7:
         a5:f3:0e:49:dd:7c:18:ae:db:ed:80:78:9e:30:02:03:52:0f:
         25:fb:c0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org