Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133372e302f32342d3234203d3e20323633333630.roa
File:                     3139312e33372e3133372e302f32342d3234203d3e20323633333630.roa (raw, json)
Hash identifier:          cVOiPLTfwOYMpwNqN+sJJdbywRc2CBON0m6Crl0/rJ4=
Subject key identifier:   FF:9E:36:24:AC:83:EB:35:31:AF:32:88:16:C3:09:4B:84:87:BE:3E
Certificate issuer:       /CN=679534B939B34FA7D85CBB2A06E0610EC372ADC7
Certificate serial:       1855BD8D748159AC3B1ED9896382BB2DDBF4751C
Authority key identifier: 67:95:34:B9:39:B3:4F:A7:D8:5C:BB:2A:06:E0:61:0E:C3:72:AD:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133372e302f32342d3234203d3e20323633333630.roa
Signing time:             Mon 22 Jan 2024 17:49:14 +0000
ROA not before:           Mon 22 Jan 2024 17:44:14 +0000
ROA not after:            Mon 20 Jan 2025 17:49:14 +0000
asID:                     263360
IP address blocks:        191.37.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:55:bd:8d:74:81:59:ac:3b:1e:d9:89:63:82:bb:2d:db:f4:75:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679534B939B34FA7D85CBB2A06E0610EC372ADC7
        Validity
            Not Before: Jan 22 17:44:14 2024 GMT
            Not After : Jan 20 17:49:14 2025 GMT
        Subject: CN=FF9E3624AC83EB3531AF328816C3094B8487BE3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:08:a1:9d:1e:a1:af:95:4c:f3:45:70:03:
                    b8:62:9e:6f:ee:a9:67:d5:a6:d4:49:ee:6b:01:43:
                    97:e0:55:0e:fb:b3:e5:c7:e5:3d:fb:ed:64:42:f6:
                    1e:5a:a1:5e:e3:58:91:2a:17:a5:12:a3:50:5c:f0:
                    4a:ba:57:49:0c:88:3b:a3:f9:65:00:d0:8a:ec:4a:
                    00:5c:01:35:86:0a:1f:db:66:68:79:62:ba:2f:21:
                    b6:01:ba:f0:61:8c:65:f4:4b:7c:d7:3c:14:df:66:
                    57:61:77:d2:ec:80:23:fa:ec:46:32:ad:78:dd:b1:
                    20:1f:a2:5e:45:37:69:1e:1c:09:98:00:7b:0e:a1:
                    f5:00:e9:90:2f:61:4a:fe:fb:5d:37:6b:22:46:56:
                    5a:3d:fb:55:43:5c:a6:fa:1b:27:5a:0a:52:5e:ad:
                    ac:a0:b2:73:56:da:bf:ef:d7:e7:06:0d:da:e5:8b:
                    07:97:3b:5a:2a:45:e9:83:1e:4f:60:70:98:3e:8e:
                    09:9b:97:ab:cb:43:79:f1:ac:a3:4b:e1:ee:dc:22:
                    99:0e:68:03:d8:76:84:df:eb:2b:f2:2f:f9:80:6f:
                    2d:17:2b:84:55:05:dc:51:73:31:11:ba:58:4c:74:
                    56:b4:c9:6c:4d:4a:d7:59:7b:c0:ab:45:64:82:8d:
                    bc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9E:36:24:AC:83:EB:35:31:AF:32:88:16:C3:09:4B:84:87:BE:3E
            X509v3 Authority Key Identifier:
                keyid:67:95:34:B9:39:B3:4F:A7:D8:5C:BB:2A:06:E0:61:0E:C3:72:AD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133372e302f32342d3234203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:37:40:7e:49:b6:84:3b:b3:8d:e0:e3:b2:65:ab:63:30:39:
         60:cc:84:1b:e8:9a:bd:70:a8:33:61:0f:b9:48:3b:52:d2:ec:
         74:91:9e:8d:cb:eb:52:27:b7:89:df:d4:9a:cd:1c:54:fb:c5:
         4a:a0:8c:ae:bf:4e:3b:61:9f:50:fb:87:d4:7f:e7:b9:d3:4c:
         9a:78:61:5d:4c:a4:d3:6c:fa:8e:e0:e5:eb:72:a7:05:0b:0e:
         3c:5a:fc:4f:2c:a1:c6:ba:a7:c1:38:c5:ec:d0:fb:bf:bb:a9:
         e8:41:26:b6:a7:4a:a4:b2:77:d6:f0:2d:a4:0c:b9:51:f7:8f:
         c2:ae:d9:49:9e:0b:c3:6f:49:0f:9b:63:23:0e:ff:6f:79:e9:
         b3:5c:23:19:32:3b:5a:e5:c3:5b:0a:86:85:ef:21:14:49:bd:
         f6:04:a3:3a:9d:ed:b9:da:f7:e5:20:dc:92:44:e3:c8:02:27:
         49:7d:89:42:28:d0:19:31:d7:9f:a6:59:61:a3:94:7c:72:cf:
         dc:8e:e0:52:13:34:12:30:e7:2c:b9:36:80:ac:7b:4e:17:91:
         ba:19:07:89:f9:71:c9:70:2c:04:97:7e:0a:d2:09:89:6d:e7:
         e9:6a:52:ac:a6:e8:69:c7:80:9b:7b:46:0b:3d:72:9b:50:67:
         2c:54:9d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org