Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133392e302f32342d3234203d3e20323633333630.roa
File:                     3139312e33372e3133392e302f32342d3234203d3e20323633333630.roa (raw, json)
Hash identifier:          aWrVY0zUHbnhm24rWB8/uggEAN/KgK9pPiO+ctDDDOM=
Subject key identifier:   32:B8:A3:AE:44:DB:7C:69:ED:05:44:39:90:3B:D1:A7:F4:C3:0A:AD
Certificate issuer:       /CN=679534B939B34FA7D85CBB2A06E0610EC372ADC7
Certificate serial:       58C5CB11F5B2801A7CBD77C6FE60AECBDF479E1C
Authority key identifier: 67:95:34:B9:39:B3:4F:A7:D8:5C:BB:2A:06:E0:61:0E:C3:72:AD:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133392e302f32342d3234203d3e20323633333630.roa
Signing time:             Mon 22 Jan 2024 17:50:18 +0000
ROA not before:           Mon 22 Jan 2024 17:45:18 +0000
ROA not after:            Mon 20 Jan 2025 17:50:18 +0000
asID:                     263360
IP address blocks:        191.37.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c5:cb:11:f5:b2:80:1a:7c:bd:77:c6:fe:60:ae:cb:df:47:9e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679534B939B34FA7D85CBB2A06E0610EC372ADC7
        Validity
            Not Before: Jan 22 17:45:18 2024 GMT
            Not After : Jan 20 17:50:18 2025 GMT
        Subject: CN=32B8A3AE44DB7C69ED054439903BD1A7F4C30AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:8b:ee:60:c2:da:57:7e:b1:10:ae:55:ac:
                    52:9c:86:49:6a:72:ec:48:26:c2:49:3c:02:ff:db:
                    c0:e3:0f:0a:c3:4c:a4:bb:71:c1:00:cf:5a:cc:aa:
                    96:9b:30:60:95:55:d3:90:3c:8a:c6:c6:7d:bf:a6:
                    db:ec:ff:a1:28:26:e0:13:c7:f4:9f:64:a8:98:78:
                    32:64:e0:e7:ef:51:f7:1b:6a:68:b3:e8:9c:19:1f:
                    89:7c:ab:d2:df:17:01:5a:41:2f:fd:ad:27:43:ed:
                    76:f0:a0:e1:5d:85:f5:91:20:53:a9:9b:5b:aa:4b:
                    07:07:3a:b2:50:38:f9:9b:f8:74:99:8c:fc:83:16:
                    27:87:de:2b:45:2f:eb:22:e4:d3:9b:a6:e9:a4:a4:
                    67:54:66:15:99:ee:04:d7:9f:00:3b:71:11:62:78:
                    d2:56:43:18:3c:3d:7d:56:79:ef:91:41:f7:f5:ed:
                    75:19:b0:4c:43:35:8a:c0:2c:ea:e9:c6:69:c5:02:
                    cb:9a:64:b3:ac:fe:a9:3a:4b:b7:49:e3:8c:4d:86:
                    6e:e7:2e:4c:22:b1:ee:15:83:6e:ae:f1:90:a7:d1:
                    82:50:92:31:51:6a:ad:be:9f:ab:6e:98:88:c9:cf:
                    39:26:03:ae:94:c5:9a:2e:4a:dd:7b:b1:fe:ce:55:
                    c2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B8:A3:AE:44:DB:7C:69:ED:05:44:39:90:3B:D1:A7:F4:C3:0A:AD
            X509v3 Authority Key Identifier:
                keyid:67:95:34:B9:39:B3:4F:A7:D8:5C:BB:2A:06:E0:61:0E:C3:72:AD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133392e302f32342d3234203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:6a:ec:c9:a3:78:a2:ef:d3:1c:9e:79:72:3b:99:6d:75:86:
         1f:1d:43:7b:5d:ed:68:df:de:b5:07:56:5f:1d:dd:c1:64:8d:
         4e:29:d7:f2:b5:74:e1:e1:ed:15:0f:31:c9:97:3a:f9:fb:91:
         78:ee:42:ea:5d:78:f5:2c:95:b9:04:39:b4:16:f1:a9:7a:62:
         5f:54:0d:6d:29:99:24:4a:bd:9c:bc:6a:73:9c:1b:ad:dd:fb:
         56:39:13:69:0b:e2:ba:db:67:6c:d4:d4:f0:c0:89:ba:53:0c:
         38:64:ce:10:37:18:68:70:f2:44:6e:75:25:e4:00:5b:6f:5f:
         ff:2b:fb:ee:87:45:d9:c3:b3:ec:e1:f9:6b:53:ed:43:ae:1d:
         b7:ef:e9:07:df:bd:80:dd:e7:00:38:32:66:c3:ce:1b:3d:3a:
         f8:fd:96:9f:15:26:72:6d:67:b8:9b:5a:70:fc:04:1c:8c:f7:
         3c:89:bf:b0:66:a4:cf:28:b1:11:6e:85:db:15:57:34:94:48:
         de:f3:58:1c:86:e2:f8:6e:64:7c:7b:83:64:5f:26:db:d9:68:
         29:66:70:4f:30:2d:1c:ca:45:cd:0d:2d:69:e7:ae:ee:19:dd:
         06:92:5a:cb:6d:a6:fb:84:03:05:5f:59:75:a8:62:bb:f8:de:
         6a:97:f1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org