Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3139312e352e3234302e302f32302d3234203d3e20323633353434.roa
File:                     3139312e352e3234302e302f32302d3234203d3e20323633353434.roa (raw, json)
Hash identifier:          Cct36sOXnzz4UzTh4L6brvgZV27cbgP7YSxnRRQ0GLc=
Subject key identifier:   D5:B6:F0:8F:E3:CB:31:8A:F8:C2:C6:8D:91:62:3B:41:79:CE:92:63
Certificate issuer:       /CN=E66153261DF76D7AF85F0116373381AC74E0188B
Certificate serial:       726AEB6BA42D50BE5E8D7DFCC3D0D0877B1BC0F8
Authority key identifier: E6:61:53:26:1D:F7:6D:7A:F8:5F:01:16:37:33:81:AC:74:E0:18:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E66153261DF76D7AF85F0116373381AC74E0188B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3139312e352e3234302e302f32302d3234203d3e20323633353434.roa
Signing time:             Tue 06 Jun 2023 13:09:05 +0000
ROA not before:           Tue 06 Jun 2023 13:04:05 +0000
ROA not after:            Tue 04 Jun 2024 13:09:05 +0000
asID:                     263544
IP address blocks:        191.5.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6a:eb:6b:a4:2d:50:be:5e:8d:7d:fc:c3:d0:d0:87:7b:1b:c0:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E66153261DF76D7AF85F0116373381AC74E0188B
        Validity
            Not Before: Jun  6 13:04:05 2023 GMT
            Not After : Jun  4 13:09:05 2024 GMT
        Subject: CN=D5B6F08FE3CB318AF8C2C68D91623B4179CE9263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:a5:f6:b0:7d:06:36:bd:3e:fe:b9:ed:c3:
                    45:ec:f9:b0:50:22:b9:61:d1:ac:a8:bd:9f:9a:41:
                    28:33:8d:40:cf:88:a6:0d:29:fe:2a:25:f2:cf:99:
                    c7:cb:9d:44:c3:7b:57:1d:20:5b:d9:a1:82:4d:f1:
                    3e:ed:ed:03:89:b3:e8:0f:a7:0c:0a:87:79:1f:ed:
                    dd:1f:a8:f0:dd:0b:0d:73:3e:bc:fa:14:f6:d8:4e:
                    8b:34:3e:21:49:7b:f5:e9:b6:f1:cd:ac:14:15:58:
                    2e:3e:7f:c8:5e:17:bd:68:62:9d:a6:29:01:91:9e:
                    6e:d0:b6:8a:f7:20:b9:39:10:47:af:3e:0d:d9:b5:
                    5d:88:8e:c9:f9:5d:bf:78:a2:9e:e7:ce:04:f0:23:
                    38:e9:f7:b2:c6:61:a9:87:e4:3f:4f:34:92:88:62:
                    0d:c6:bd:92:23:11:18:fe:12:f2:f6:3f:eb:01:e1:
                    10:aa:51:75:84:44:ee:96:b2:8b:4e:99:47:68:d1:
                    e5:50:66:68:b9:5e:c8:69:8d:6a:11:a2:aa:4d:80:
                    b5:aa:aa:9b:6c:75:5f:e9:0b:1f:81:fb:f5:05:86:
                    f3:a4:57:ec:bb:15:b0:16:57:8a:6b:84:0c:a4:a2:
                    4f:0c:04:1a:6c:e0:9d:cd:0e:06:a0:7c:91:6a:9d:
                    a4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B6:F0:8F:E3:CB:31:8A:F8:C2:C6:8D:91:62:3B:41:79:CE:92:63
            X509v3 Authority Key Identifier:
                keyid:E6:61:53:26:1D:F7:6D:7A:F8:5F:01:16:37:33:81:AC:74:E0:18:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E66153261DF76D7AF85F0116373381AC74E0188B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E66153261DF76D7AF85F0116373381AC74E0188B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3139312e352e3234302e302f32302d3234203d3e20323633353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:f0:c2:6d:07:27:18:6f:91:06:75:84:0e:03:2d:2b:e0:04:
         c0:0d:9c:d1:83:aa:52:44:08:56:dd:49:5f:37:53:2c:87:cf:
         58:39:51:03:1a:8b:b1:1b:b8:83:b7:8b:5b:ba:f3:ec:24:5d:
         6b:88:56:67:95:1f:74:95:0f:1a:eb:cb:d4:22:74:39:09:1e:
         94:5a:9d:fb:97:95:0a:2c:2d:a7:86:d4:13:ea:9f:e6:97:b7:
         8a:6a:af:0c:a8:86:79:32:21:6e:a8:c6:8c:9a:89:68:ea:50:
         85:70:f6:d4:01:22:ad:cc:ea:81:b3:f4:aa:28:7a:22:94:de:
         52:3a:21:07:53:dd:0d:a2:8e:69:e8:db:30:a9:6a:88:a0:d5:
         b0:4f:ce:b2:14:eb:4f:6e:9c:a0:59:6f:c4:4a:ca:d2:81:2b:
         5e:9e:3c:08:f6:30:8a:e6:85:3a:0e:b7:62:50:2c:eb:30:64:
         af:ba:d9:99:0d:80:bc:86:6a:ab:f9:73:5a:a0:17:5c:d9:fd:
         e5:5c:2a:0a:93:78:4a:4b:eb:71:d4:69:70:25:cc:3a:64:83:
         9a:69:66:20:07:93:be:dd:f8:83:7c:d7:d5:74:9e:cc:d0:fe:
         be:cf:88:b6:5c:30:12:59:3a:83:f4:85:8b:53:3f:72:69:4b:
         56:0d:b7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org