Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa
File:                     3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa (raw, json)
Hash identifier:          DMSgkIm239I+oHGU/6FMLOv8DXW1ufdVI1vwylHEHhE=
Subject key identifier:   B9:11:11:D4:00:AD:6E:96:95:E8:62:83:32:54:D4:FE:04:38:11:9D
Certificate issuer:       /CN=679534B939B34FA7D85CBB2A06E0610EC372ADC7
Certificate serial:       5F24119FE499B525E754C1A80E23F968240A0E20
Authority key identifier: 67:95:34:B9:39:B3:4F:A7:D8:5C:BB:2A:06:E0:61:0E:C3:72:AD:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa
Signing time:             Mon 18 Dec 2023 14:49:11 +0000
ROA not before:           Mon 18 Dec 2023 14:44:11 +0000
ROA not after:            Mon 16 Dec 2024 14:49:11 +0000
asID:                     263360
IP address blocks:        191.37.138.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:24:11:9f:e4:99:b5:25:e7:54:c1:a8:0e:23:f9:68:24:0a:0e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679534B939B34FA7D85CBB2A06E0610EC372ADC7
        Validity
            Not Before: Dec 18 14:44:11 2023 GMT
            Not After : Dec 16 14:49:11 2024 GMT
        Subject: CN=B91111D400AD6E9695E862833254D4FE0438119D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0f:c1:1d:b2:c0:29:97:e1:a0:aa:a6:a0:d6:
                    c8:70:93:e8:c9:5c:62:7d:b9:47:1e:ce:ee:14:94:
                    80:bd:9a:4d:d6:26:9b:a8:4f:14:01:89:a8:c5:e0:
                    be:97:1a:0d:bd:f8:94:80:27:19:7d:3f:e3:79:e5:
                    7e:89:40:5f:6f:12:9e:a8:02:91:8c:0e:0c:af:2b:
                    33:7c:15:c9:b3:bc:3f:ed:59:ee:f3:31:81:23:fd:
                    f3:fa:54:2f:48:72:00:ca:80:b2:0e:97:5f:a8:96:
                    20:e1:79:8e:07:13:a7:3e:d7:66:e9:0e:88:c5:bf:
                    f2:28:72:23:1f:41:e2:80:41:f6:21:01:ce:d1:ad:
                    25:3e:17:bc:29:9c:a5:ec:ae:e9:cb:b6:e1:52:ad:
                    6f:d4:18:58:55:27:3e:40:ab:ef:36:8f:45:ae:7e:
                    3a:4b:62:2d:cf:33:3f:1c:54:c4:21:00:ea:b6:1e:
                    70:99:89:f8:7f:3a:52:ab:b9:ea:f0:96:82:46:cf:
                    aa:e0:67:c0:d1:0c:2b:50:bb:83:ef:a8:e4:8c:46:
                    20:63:5c:c2:2f:6c:9c:3f:66:ac:94:f5:3e:63:20:
                    dc:da:de:26:0f:da:8e:6a:52:fc:b8:81:c3:62:d6:
                    9f:a0:ba:e4:0a:c5:77:24:d8:63:c4:46:2e:b9:94:
                    99:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:11:11:D4:00:AD:6E:96:95:E8:62:83:32:54:D4:FE:04:38:11:9D
            X509v3 Authority Key Identifier:
                keyid:67:95:34:B9:39:B3:4F:A7:D8:5C:BB:2A:06:E0:61:0E:C3:72:AD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:70:e9:78:62:14:a7:52:78:62:49:77:f5:ab:4b:87:46:c0:
         c3:6d:cd:c2:1d:8c:a2:0e:1f:98:f4:e0:de:71:4e:76:15:c7:
         1e:c5:75:ea:85:13:1e:c4:cf:d9:1e:61:9f:24:23:23:b1:80:
         b6:ad:d1:bf:1e:dd:97:93:eb:59:4b:0f:fc:21:20:eb:00:ca:
         a4:ad:6f:3b:15:21:df:42:4b:f2:7f:6c:32:80:57:a6:b5:92:
         10:55:f1:2e:7f:f9:db:8d:6c:e3:3b:83:e0:2e:1b:2f:3a:71:
         3f:70:4b:82:ac:56:cf:3a:6b:05:aa:d1:ea:db:30:1a:25:d5:
         f1:32:c8:42:92:89:24:6f:10:ed:b0:3a:98:35:d9:ea:c5:8f:
         c5:1f:3a:a7:89:a7:d3:ed:6b:16:ba:3b:af:e1:e0:f7:6b:f2:
         c4:57:06:67:da:bd:f1:dd:62:d0:ee:3a:2c:4b:04:a3:3b:c1:
         f9:1f:0f:22:d5:de:f6:82:64:4c:44:ca:d9:9d:ce:f6:25:4d:
         56:e0:83:08:2d:60:9a:5f:5e:c8:e9:82:c9:03:0d:ad:c4:f6:
         2b:3b:d5:7d:36:2b:7b:6f:8a:ae:54:0a:68:75:38:ce:1d:12:
         cd:f2:f7:b8:49:1d:d4:50:a8:65:f7:ff:12:c6:99:a2:0d:4f:
         ac:47:56:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org