Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/3139322e3134302e33382e302f32342d3234203d3e20323636323032.roa
File:                     3139322e3134302e33382e302f32342d3234203d3e20323636323032.roa (raw, json)
Hash identifier:          vyDzYE8n4SKes6KhojcVkLWo1Ohsi+jODuTnnWZJ4+A=
Subject key identifier:   23:F9:0A:29:F2:4E:1F:A2:0E:AA:72:E6:ED:2B:60:61:C6:79:36:6A
Certificate issuer:       /CN=4CF6EBAC581A90E8521B224F46F976605D537556
Certificate serial:       69CC2FF75A9C4C80B9A1EA57724B3C064F43A284
Authority key identifier: 4C:F6:EB:AC:58:1A:90:E8:52:1B:22:4F:46:F9:76:60:5D:53:75:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CF6EBAC581A90E8521B224F46F976605D537556.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/3139322e3134302e33382e302f32342d3234203d3e20323636323032.roa
Signing time:             Mon 23 Oct 2023 19:32:36 +0000
ROA not before:           Mon 23 Oct 2023 19:27:36 +0000
ROA not after:            Mon 21 Oct 2024 19:32:36 +0000
asID:                     266202
IP address blocks:        192.140.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cc:2f:f7:5a:9c:4c:80:b9:a1:ea:57:72:4b:3c:06:4f:43:a2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CF6EBAC581A90E8521B224F46F976605D537556
        Validity
            Not Before: Oct 23 19:27:36 2023 GMT
            Not After : Oct 21 19:32:36 2024 GMT
        Subject: CN=23F90A29F24E1FA20EAA72E6ED2B6061C679366A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:c3:a3:79:84:41:e6:54:b6:0c:5a:e4:cc:
                    ed:e0:42:97:00:29:34:78:4f:d8:73:e8:c0:7e:7b:
                    fc:41:bc:f1:63:d2:14:1b:8e:2e:3a:e9:7f:01:a5:
                    cd:67:82:24:e5:54:06:af:95:2e:be:55:d6:d7:60:
                    3a:a1:5c:85:ba:67:ae:61:58:0c:bc:b9:d8:2c:d4:
                    67:cb:7c:0b:90:c7:b9:7b:b6:85:61:5d:19:f1:11:
                    c0:e9:2a:ce:fe:27:22:38:74:4f:b8:f5:2c:72:46:
                    41:72:bb:f2:18:31:7c:d8:d9:80:ef:04:e3:f4:01:
                    6b:b5:2a:91:2b:32:3d:e7:e7:73:6d:66:d4:90:ba:
                    16:62:68:19:04:b9:2f:9a:71:e2:4b:ee:34:77:fe:
                    e5:43:1a:fc:73:41:7f:7b:82:4b:b4:99:d6:dd:68:
                    08:ac:25:51:27:18:fb:31:12:c1:85:8b:ef:d0:f8:
                    f1:27:73:28:04:18:c3:88:34:ed:e7:93:34:6b:68:
                    e4:e6:3f:be:db:cc:84:eb:c7:5c:2a:17:dd:44:3a:
                    21:10:b2:9b:fe:29:67:0f:58:78:20:d6:19:32:92:
                    bd:10:18:90:b9:1d:cc:94:8e:fe:fc:99:ef:92:4e:
                    8e:5e:4a:6a:46:92:ec:54:53:79:2a:ce:6e:59:31:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F9:0A:29:F2:4E:1F:A2:0E:AA:72:E6:ED:2B:60:61:C6:79:36:6A
            X509v3 Authority Key Identifier:
                keyid:4C:F6:EB:AC:58:1A:90:E8:52:1B:22:4F:46:F9:76:60:5D:53:75:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/4CF6EBAC581A90E8521B224F46F976605D537556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CF6EBAC581A90E8521B224F46F976605D537556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/3139322e3134302e33382e302f32342d3234203d3e20323636323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:c7:96:7b:61:9d:1a:e1:a4:6d:7f:b1:1c:76:0c:8b:6b:5d:
         71:14:ba:34:4c:70:1e:83:be:a6:aa:e6:e1:1d:bd:49:0a:ad:
         ba:6c:a3:51:6a:27:58:16:91:58:b6:95:fb:df:a7:40:a3:69:
         c3:46:5f:f6:86:06:47:67:42:25:6e:e3:91:02:94:7e:44:61:
         5d:00:3d:65:12:ce:4d:d3:5e:36:ca:7d:1f:b4:ac:8a:b3:84:
         2a:17:4d:62:5f:20:d7:d1:9c:37:89:5d:ba:0f:c6:d9:64:5c:
         43:9c:f0:eb:4e:f2:27:b8:5b:2f:a2:ea:e8:dd:0b:cf:c4:3f:
         a7:8b:61:fd:a4:8c:7d:1c:ab:d8:6e:4a:eb:a2:20:de:0f:a3:
         4a:9e:99:cd:e7:72:a7:40:55:2d:7a:b8:fc:f5:fb:92:5f:59:
         ff:50:52:f0:48:ef:af:86:7e:2f:f1:3b:30:ce:ed:f5:9f:0c:
         56:99:81:cf:10:b1:b8:1a:6e:59:ca:07:e5:b4:7d:f7:54:41:
         ea:6e:f2:24:ac:3d:95:7a:fc:25:4f:fc:4d:7a:4f:20:8b:ce:
         7a:d7:24:47:33:f1:9a:7c:9d:8d:87:34:0c:33:a3:8e:0f:02:
         a0:92:bc:6d:52:89:36:a5:c1:05:6b:0b:e6:f5:fa:8d:6a:c4:
         c4:43:98:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org