Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/3139312e3235332e36382e302f32322d3234203d3e20323633353330.roa
File:                     3139312e3235332e36382e302f32322d3234203d3e20323633353330.roa (raw, json)
Hash identifier:          GdmuMwEX7ZcghMJNcWC/kwz0/XikqjhvOoC3g3S5QjM=
Subject key identifier:   DC:8B:7F:42:98:9D:30:7E:43:B8:6A:81:A7:E2:14:FB:E7:70:6A:13
Certificate issuer:       /CN=8C4B870CE1B8CA58C4F05E954547788D89A7BDE1
Certificate serial:       164D79614851A3B1A9EEEF7BCA419E66EFB80229
Authority key identifier: 8C:4B:87:0C:E1:B8:CA:58:C4:F0:5E:95:45:47:78:8D:89:A7:BD:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/3139312e3235332e36382e302f32322d3234203d3e20323633353330.roa
Signing time:             Mon 16 Oct 2023 16:00:01 +0000
ROA not before:           Mon 16 Oct 2023 15:55:01 +0000
ROA not after:            Mon 14 Oct 2024 16:00:01 +0000
asID:                     263530
IP address blocks:        191.253.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4d:79:61:48:51:a3:b1:a9:ee:ef:7b:ca:41:9e:66:ef:b8:02:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4B870CE1B8CA58C4F05E954547788D89A7BDE1
        Validity
            Not Before: Oct 16 15:55:01 2023 GMT
            Not After : Oct 14 16:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:c9:e6:b1:f5:93:1b:f7:a4:b4:60:ad:cb:
                    64:a4:a0:ac:22:23:2d:6d:a8:05:9c:fb:fa:07:98:
                    12:94:89:d6:3d:d6:30:1d:cc:41:f8:1e:d7:dc:33:
                    66:af:be:c7:b0:71:7f:2e:a4:3d:06:3d:ea:de:76:
                    66:30:a5:ed:cb:cb:e6:35:39:ae:dd:09:ea:38:b5:
                    aa:4c:5e:54:9c:f9:d2:07:e6:56:0c:bd:4c:64:c2:
                    fc:3b:a0:5e:dc:05:cc:e9:15:07:3e:2b:02:95:5c:
                    8d:e7:d3:bc:a7:51:6f:7f:e1:b3:b1:61:5a:37:07:
                    28:08:ee:c9:17:67:bc:d0:27:72:e1:71:46:a1:81:
                    c2:f4:e4:f0:34:8a:b7:5f:b2:0e:39:12:56:6e:8f:
                    75:85:f9:27:72:09:d5:d9:bb:27:ac:2d:37:98:6b:
                    72:38:1d:02:f8:72:02:28:43:9f:60:13:48:d4:41:
                    45:88:4c:af:a9:34:56:84:c9:10:25:49:1b:b2:fb:
                    3e:28:07:59:f4:96:97:a1:85:c5:8c:4a:6e:f1:8d:
                    19:80:69:02:9d:af:b5:46:31:55:6b:d2:e7:ac:2e:
                    6b:9f:34:cd:5f:26:b1:44:30:ce:fb:63:20:a2:1d:
                    10:5d:6a:8d:52:10:fe:aa:ce:6b:3b:e4:ce:b3:82:
                    f4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8B:7F:42:98:9D:30:7E:43:B8:6A:81:A7:E2:14:FB:E7:70:6A:13
            X509v3 Authority Key Identifier:
                keyid:8C:4B:87:0C:E1:B8:CA:58:C4:F0:5E:95:45:47:78:8D:89:A7:BD:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/3139312e3235332e36382e302f32322d3234203d3e20323633353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:66:be:86:26:b6:bf:d5:78:16:4d:8e:89:4a:9c:f6:e3:25:
         5c:eb:c1:8d:34:c5:a5:bd:11:db:81:16:0d:75:91:ad:af:3e:
         16:4b:85:8c:5d:95:4b:97:7b:99:a3:e4:05:e1:a3:b1:3b:e1:
         87:94:f6:a0:60:14:b7:87:fb:2e:46:5e:be:39:0a:3b:8b:8b:
         09:c6:8a:9d:a6:9b:56:5b:0e:67:fe:8c:bc:87:2f:32:ed:b8:
         76:b1:da:e9:f5:7c:b9:1d:7f:a4:56:06:c5:19:0c:ab:29:90:
         62:40:e6:67:0a:21:70:eb:c0:b6:84:5d:12:2b:d7:be:49:45:
         3b:66:0f:ea:3b:99:f5:0c:bf:94:bf:2a:fb:65:98:c0:07:ab:
         b1:90:b5:9b:cc:f9:56:d7:29:1f:b9:03:ea:fe:e4:d8:1f:b5:
         d3:e8:e5:34:b7:3c:b1:68:a0:3d:c7:59:d8:c8:60:42:cc:3b:
         9f:96:9e:6b:80:6c:e5:61:52:7b:01:7f:39:5c:ec:12:91:c4:
         4c:c9:f1:77:61:31:c7:88:b3:0c:19:5c:ac:93:4b:37:cf:af:
         c4:c5:fa:1d:e0:6b:6d:a6:4e:1b:62:a2:ab:6f:8b:b4:da:1d:
         6b:7a:92:56:9c:55:0b:7b:3a:b6:87:d0:a0:8a:50:8d:1d:30:
         c2:30:da:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org