Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/3139322e3134302e33382e302f32332d3233203d3e20323636323032.roa
File:                     3139322e3134302e33382e302f32332d3233203d3e20323636323032.roa (raw, json)
Hash identifier:          mFC6g0NwiuNDtxeH6U5o2EpaFEwdmAlXI7n+0v1Ub6U=
Subject key identifier:   E1:72:8D:A0:B4:4B:C2:55:B2:D5:9C:06:6C:B3:42:72:C9:68:15:D7
Certificate issuer:       /CN=4CF6EBAC581A90E8521B224F46F976605D537556
Certificate serial:       121EA2BED1399F1A88A45539A7FF46F86776BDB2
Authority key identifier: 4C:F6:EB:AC:58:1A:90:E8:52:1B:22:4F:46:F9:76:60:5D:53:75:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CF6EBAC581A90E8521B224F46F976605D537556.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/3139322e3134302e33382e302f32332d3233203d3e20323636323032.roa
Signing time:             Mon 23 Oct 2023 19:59:24 +0000
ROA not before:           Mon 23 Oct 2023 19:54:24 +0000
ROA not after:            Mon 21 Oct 2024 19:59:24 +0000
asID:                     266202
IP address blocks:        192.140.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1e:a2:be:d1:39:9f:1a:88:a4:55:39:a7:ff:46:f8:67:76:bd:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CF6EBAC581A90E8521B224F46F976605D537556
        Validity
            Not Before: Oct 23 19:54:24 2023 GMT
            Not After : Oct 21 19:59:24 2024 GMT
        Subject: CN=E1728DA0B44BC255B2D59C066CB34272C96815D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:5b:97:e5:95:6f:c5:6e:15:77:0c:51:e1:
                    7c:d9:58:31:ab:6a:28:2f:a8:d9:6a:1a:0c:20:91:
                    99:26:9e:b8:ee:26:8f:1e:a9:54:08:84:50:b1:d7:
                    69:3d:6c:72:a6:87:a6:3a:76:21:67:47:ce:09:f8:
                    7e:9e:ac:b5:0b:27:0c:d7:99:79:73:26:90:3f:b1:
                    61:ee:a4:9a:87:04:34:e7:a2:16:9c:22:9a:b5:23:
                    76:db:dd:5d:7e:19:52:cf:2d:7f:3d:e4:02:bb:34:
                    db:1e:fd:b1:37:32:8d:d1:f0:ea:27:e0:f4:ce:2b:
                    01:b1:cd:36:75:9a:9a:65:6f:d4:52:f9:da:1d:51:
                    4e:61:00:89:aa:b5:aa:88:74:d6:4b:b2:6e:7f:24:
                    71:63:09:d4:f1:0e:bc:c4:f5:15:95:e9:c7:4d:8a:
                    07:2a:b6:37:75:ab:a1:e4:a7:c9:7c:c7:5b:c5:45:
                    c9:9f:a3:90:4d:dc:93:59:d3:e6:3b:b8:43:b4:03:
                    7c:12:a7:34:28:39:bb:00:bd:ba:7c:7b:48:f1:8f:
                    4c:70:d9:89:8b:d9:49:c7:1a:59:14:be:0e:10:f5:
                    1e:a0:f3:ea:ae:36:5d:55:e9:f6:17:e8:df:5e:bd:
                    f4:d3:32:2d:be:ef:05:4a:66:c4:12:b6:a1:e0:8e:
                    41:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:72:8D:A0:B4:4B:C2:55:B2:D5:9C:06:6C:B3:42:72:C9:68:15:D7
            X509v3 Authority Key Identifier:
                keyid:4C:F6:EB:AC:58:1A:90:E8:52:1B:22:4F:46:F9:76:60:5D:53:75:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/4CF6EBAC581A90E8521B224F46F976605D537556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CF6EBAC581A90E8521B224F46F976605D537556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/3139322e3134302e33382e302f32332d3233203d3e20323636323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:15:c9:84:0a:8f:5e:5c:5e:e1:18:d9:4d:ba:88:09:e0:c3:
         38:44:67:c2:55:8a:e5:dd:c7:fa:54:a0:49:c7:a4:ac:fd:55:
         4c:58:3c:c6:ea:24:e8:78:e4:8e:83:3a:8d:29:b6:cd:92:91:
         87:32:f9:a4:7c:a2:fa:98:9d:11:da:e9:f7:e9:2a:d2:d3:22:
         f4:f1:d7:35:f4:4a:ae:3d:d6:a6:d3:31:7c:2f:e9:5d:06:8e:
         e4:c1:ec:2a:e1:ec:a5:be:4a:bb:4a:2d:b4:fc:cb:11:c2:17:
         1d:e9:3a:00:91:c5:83:ec:bf:44:de:92:01:21:f9:d8:17:2a:
         86:a8:55:c1:77:3a:90:ec:72:1d:d2:c0:21:04:0b:31:84:2c:
         6d:9b:38:68:44:a4:7f:5b:a8:e9:e4:7e:b2:d2:e3:f8:f9:4b:
         3e:8c:ef:a6:86:ea:e7:4a:61:87:d9:2a:1c:5b:27:9e:63:4d:
         2e:74:25:2a:55:1f:a5:90:c6:c8:52:be:9f:03:4b:51:dc:62:
         d0:f2:bd:3c:bf:59:1d:41:84:47:69:a8:69:6a:18:dc:59:e0:
         4a:96:64:d9:f5:08:3c:55:ba:d0:6d:92:ff:b8:ea:ba:62:0c:
         51:ae:2e:a9:6e:34:65:17:7d:84:ff:94:31:06:29:c1:29:4a:
         b7:5f:1f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org