Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/3139322e3134302e33362e302f32332d3233203d3e20323636323032.roa
File:                     3139322e3134302e33362e302f32332d3233203d3e20323636323032.roa (raw, json)
Hash identifier:          GQVAeEj7/xnM+BXjFAvYZNy96Rh7XGAPTwbKNd2TKTo=
Subject key identifier:   74:E2:44:8D:B8:BA:B8:F5:BD:B4:BE:A9:C1:65:E8:A6:81:F9:5D:94
Certificate issuer:       /CN=4CF6EBAC581A90E8521B224F46F976605D537556
Certificate serial:       3A39956A960C3695D5216B944DAC90876BC698D6
Authority key identifier: 4C:F6:EB:AC:58:1A:90:E8:52:1B:22:4F:46:F9:76:60:5D:53:75:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CF6EBAC581A90E8521B224F46F976605D537556.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/3139322e3134302e33362e302f32332d3233203d3e20323636323032.roa
Signing time:             Mon 23 Oct 2023 19:59:16 +0000
ROA not before:           Mon 23 Oct 2023 19:54:16 +0000
ROA not after:            Mon 21 Oct 2024 19:59:16 +0000
asID:                     266202
IP address blocks:        192.140.36.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:39:95:6a:96:0c:36:95:d5:21:6b:94:4d:ac:90:87:6b:c6:98:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CF6EBAC581A90E8521B224F46F976605D537556
        Validity
            Not Before: Oct 23 19:54:16 2023 GMT
            Not After : Oct 21 19:59:16 2024 GMT
        Subject: CN=74E2448DB8BAB8F5BDB4BEA9C165E8A681F95D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:83:cd:40:bb:a6:44:7c:db:fb:04:be:6e:1e:
                    9c:51:e3:21:c0:67:d8:ef:03:42:dc:b2:ae:03:0d:
                    b4:2c:90:b7:cf:6a:60:fa:b1:89:77:95:3b:a5:5b:
                    01:ac:70:7d:ea:96:34:be:76:15:a0:b0:1c:20:49:
                    2b:ff:d0:dc:13:34:97:52:27:f6:11:d4:18:6c:6b:
                    e4:32:82:b8:5a:ff:94:65:ba:76:98:ca:06:b1:e4:
                    a5:ab:c5:92:e8:30:dd:31:d2:27:a5:8e:2e:aa:dc:
                    8b:fa:1b:eb:54:1f:6b:b6:48:45:20:44:82:f4:b9:
                    8b:5a:62:94:ee:8e:72:2b:38:19:db:23:2c:ad:36:
                    43:c9:f9:31:77:58:34:f8:fc:17:ee:7e:18:f4:28:
                    67:26:a5:14:d6:55:15:dc:20:51:07:69:cd:84:87:
                    e8:63:dc:3d:c4:fe:e6:c7:02:34:48:e4:1d:93:4b:
                    e6:74:dc:1f:94:b8:bb:ab:49:1e:6a:53:0e:9c:9d:
                    f1:62:fc:4f:59:e2:c4:99:45:bc:a2:ef:e8:78:59:
                    fe:36:62:76:87:11:07:d4:16:5f:69:97:15:f5:81:
                    b6:ea:32:b9:ec:b9:2c:aa:1b:db:c1:3f:46:20:87:
                    32:36:74:02:ef:0d:1e:cf:93:d2:b2:d7:d1:82:f5:
                    3e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E2:44:8D:B8:BA:B8:F5:BD:B4:BE:A9:C1:65:E8:A6:81:F9:5D:94
            X509v3 Authority Key Identifier:
                keyid:4C:F6:EB:AC:58:1A:90:E8:52:1B:22:4F:46:F9:76:60:5D:53:75:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/4CF6EBAC581A90E8521B224F46F976605D537556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CF6EBAC581A90E8521B224F46F976605D537556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/3139322e3134302e33362e302f32332d3233203d3e20323636323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:dc:06:26:7c:ea:0b:36:18:27:6f:a6:6a:ec:be:aa:b4:f6:
         b1:a5:63:01:47:5f:c2:99:1d:25:01:63:28:05:e2:23:71:68:
         8d:90:1c:50:5b:74:e5:26:ec:21:77:13:f9:1a:a8:54:f1:5d:
         74:4d:32:0d:cb:1b:10:dd:8d:a2:41:fa:d7:93:68:d4:a8:b2:
         65:31:da:ff:5d:7e:b5:9d:69:04:96:bf:90:80:9c:c6:90:6f:
         5c:de:38:7c:c7:55:27:9a:c3:b3:4b:e5:41:a2:56:54:0a:c3:
         c0:b9:7a:fc:49:08:2e:0d:5f:54:36:a8:ae:fc:da:c8:06:17:
         9a:76:02:51:22:77:b6:52:8a:dc:4a:cf:37:70:df:93:84:4d:
         95:65:ed:ff:1e:95:4f:60:de:d2:e9:0e:a3:2b:00:52:ab:33:
         15:cd:49:52:fa:76:0d:44:37:11:5f:8a:44:67:fb:f4:81:fe:
         aa:4b:d4:e8:8c:8b:bd:4f:e3:1a:9d:44:4a:b9:1e:a7:10:ef:
         8b:94:04:3a:3d:22:e6:0c:83:53:cc:b8:18:1f:9a:e0:79:ed:
         78:22:90:50:22:44:54:43:52:1c:3b:c6:71:14:ab:38:48:54:
         71:7d:a6:8d:f0:e6:e5:2b:29:17:b6:24:d1:88:d2:0c:b1:11:
         0f:cc:0b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org