Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e35382e3132382f32352d3235203d3e20323633333437.roa
File:                     3139312e33372e35382e3132382f32352d3235203d3e20323633333437.roa (raw, json)
Hash identifier:          vrOA91zrWMJ96KGaf/eMj9VYda0nRESan7Yav9USiaQ=
Subject key identifier:   0B:30:2E:32:B2:F0:BF:B9:D0:6D:AF:59:E0:CC:E7:A5:98:D6:0F:F8
Certificate issuer:       /CN=E666EF56A4FB49D30619D2516DB4846705C0FB64
Certificate serial:       24C9627408E5BD14E6A698D97D22FE999D50D9AA
Authority key identifier: E6:66:EF:56:A4:FB:49:D3:06:19:D2:51:6D:B4:84:67:05:C0:FB:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E666EF56A4FB49D30619D2516DB4846705C0FB64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e35382e3132382f32352d3235203d3e20323633333437.roa
Signing time:             Fri 03 Feb 2023 11:28:40 +0000
ROA not before:           Fri 03 Feb 2023 11:23:40 +0000
ROA not after:            Fri 02 Feb 2024 11:28:40 +0000
asID:                     263347
IP address blocks:        191.37.58.128/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c9:62:74:08:e5:bd:14:e6:a6:98:d9:7d:22:fe:99:9d:50:d9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E666EF56A4FB49D30619D2516DB4846705C0FB64
        Validity
            Not Before: Feb  3 11:23:40 2023 GMT
            Not After : Feb  2 11:28:40 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:69:c2:fe:f9:b2:ab:93:87:83:ab:75:10:5d:
                    e7:de:c5:60:fb:43:ad:11:16:c8:d6:70:37:b1:fe:
                    e8:f3:f4:d1:ce:a1:34:ff:e6:10:71:e7:3c:86:57:
                    9b:19:c4:ae:de:e8:ba:fe:7e:e1:35:3b:82:ac:53:
                    35:1d:da:bc:87:ac:2e:4c:68:6b:7c:ef:aa:a4:88:
                    c6:a5:69:02:6b:c9:1a:00:51:b2:68:9f:7c:51:00:
                    2b:8e:11:aa:73:19:28:f1:c6:8a:28:0c:cc:ff:b6:
                    0b:b7:b1:1f:79:d7:bc:e9:d6:4f:36:c3:cf:c0:ff:
                    c8:54:37:ac:e3:e8:ab:b7:fe:42:f9:25:17:b4:94:
                    3a:7b:73:54:e5:c7:de:86:cf:68:c1:16:2c:cf:a0:
                    7d:94:bb:cf:8a:bb:8e:78:bd:07:36:5b:db:86:4c:
                    54:ff:e3:15:f7:d6:e8:8e:39:78:89:e0:77:88:20:
                    f8:d9:e5:34:a6:2c:6b:51:64:4f:13:a2:e2:9a:ff:
                    26:3f:4b:e8:f0:a5:80:10:4a:3c:a1:4d:cd:09:ea:
                    92:65:03:d4:c8:1e:21:80:db:56:1d:cc:78:44:e3:
                    44:5a:85:16:41:df:b1:78:51:5a:86:87:25:f1:d5:
                    05:98:ae:54:11:b9:37:51:07:7f:b8:fc:57:2e:d1:
                    0e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:30:2E:32:B2:F0:BF:B9:D0:6D:AF:59:E0:CC:E7:A5:98:D6:0F:F8
            X509v3 Authority Key Identifier:
                keyid:E6:66:EF:56:A4:FB:49:D3:06:19:D2:51:6D:B4:84:67:05:C0:FB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/E666EF56A4FB49D30619D2516DB4846705C0FB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E666EF56A4FB49D30619D2516DB4846705C0FB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e35382e3132382f32352d3235203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.58.128/25

    Signature Algorithm: sha256WithRSAEncryption
         2f:98:d1:04:d4:e7:c5:f8:d0:11:df:df:c1:80:d7:fb:de:d6:
         e3:72:ca:c2:f4:a3:e8:4e:97:3b:fc:ba:15:71:9d:c2:c5:4f:
         d4:23:dd:37:54:5c:65:d1:71:12:cc:05:ee:85:6c:8d:b9:b2:
         93:71:d3:9e:5f:37:70:2b:32:5e:fc:34:9b:d9:9e:fd:c6:a9:
         2c:45:27:00:e4:f9:6a:b7:fc:98:aa:8a:ab:db:20:e6:8a:f5:
         df:54:16:14:4a:db:23:16:30:0c:25:88:c2:07:15:c7:ac:c6:
         da:60:36:02:57:3e:58:5e:96:d1:76:0c:97:66:e5:d7:8b:e8:
         95:c6:a7:45:22:9c:7f:72:bb:75:48:23:87:df:12:f8:38:c6:
         1d:a5:80:e6:e6:30:14:93:66:34:6a:df:f6:95:2a:28:29:7c:
         6a:52:7e:7c:1a:39:5f:89:5e:00:cd:c6:25:96:d4:af:b6:52:
         43:12:0e:42:a6:00:a8:89:0c:aa:13:4c:c4:08:95:99:25:5a:
         cf:28:24:43:7b:3e:66:03:52:af:67:30:6f:ed:05:d6:3b:f3:
         5e:8e:86:76:5e:db:b6:6e:26:3f:62:cd:f4:37:ee:0e:8e:d8:
         8b:dc:59:c9:57:09:b7:71:33:b3:f0:d0:af:2b:21:5c:1b:64:
         11:e9:72:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org