Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/3139312e33372e3133382e302f32342d3234203d3e20323633333630.roa
File:                     3139312e33372e3133382e302f32342d3234203d3e20323633333630.roa (raw, json)
Hash identifier:          6HpdmLBko3U4FV4SFb0yTaeObi6inOVpTxYrwepVKn0=
Subject key identifier:   2C:58:86:BF:56:9D:88:44:1F:45:F2:3A:69:E2:E9:A0:9C:FA:33:47
Certificate issuer:       /CN=4FB17D6B476EA1DAC3EBCED07CD52AEEF1422F00
Certificate serial:       4E85AA42BA5A2E95F200A09CD38BAF226E4A9385
Authority key identifier: 4F:B1:7D:6B:47:6E:A1:DA:C3:EB:CE:D0:7C:D5:2A:EE:F1:42:2F:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FB17D6B476EA1DAC3EBCED07CD52AEEF1422F00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/3139312e33372e3133382e302f32342d3234203d3e20323633333630.roa
Signing time:             Tue 11 Jul 2023 17:40:05 +0000
ROA not before:           Tue 11 Jul 2023 17:35:05 +0000
ROA not after:            Tue 09 Jul 2024 17:40:05 +0000
asID:                     263360
IP address blocks:        191.37.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:85:aa:42:ba:5a:2e:95:f2:00:a0:9c:d3:8b:af:22:6e:4a:93:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB17D6B476EA1DAC3EBCED07CD52AEEF1422F00
        Validity
            Not Before: Jul 11 17:35:05 2023 GMT
            Not After : Jul  9 17:40:05 2024 GMT
        Subject: CN=2C5886BF569D88441F45F23A69E2E9A09CFA3347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:84:c6:16:54:91:c1:fc:9b:eb:17:35:ce:0a:
                    cd:47:26:89:49:8c:26:57:28:d1:6e:a2:87:07:1a:
                    2a:77:ac:de:ce:f4:43:46:af:64:d1:8c:b9:16:04:
                    d3:33:bc:75:13:4a:e1:d1:03:a7:42:b8:b3:4e:d6:
                    31:46:c5:48:60:94:0f:06:cd:b8:76:8f:53:f0:1c:
                    00:38:89:45:d9:d1:1b:e0:4d:cb:d9:c4:3e:05:08:
                    dc:12:04:60:04:a7:a8:38:d7:ef:03:b5:54:d4:85:
                    3b:51:f6:40:41:c8:16:c5:d7:3e:9f:35:ed:52:ff:
                    7f:a5:cb:4a:ab:5e:d4:ff:8a:bd:6b:4d:3f:3b:82:
                    74:2b:b5:dc:92:25:a2:db:fb:8b:77:af:1f:69:46:
                    4e:c9:88:50:55:cb:7d:21:a0:c1:e4:88:6f:46:57:
                    a3:24:e5:e1:18:47:ae:d9:82:bd:b2:52:a0:5d:33:
                    2b:28:ec:be:ed:23:15:56:66:51:d3:7f:17:67:41:
                    02:b2:bc:de:cb:d8:82:f3:3d:0a:13:a6:db:90:d5:
                    15:53:5b:54:fb:30:df:d8:ce:78:72:b2:a0:d0:74:
                    58:3f:34:74:e8:20:58:dd:d3:fe:76:cc:ae:51:cc:
                    b6:92:5a:eb:c1:91:1a:1e:fc:76:0c:df:ac:e6:bc:
                    1f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:58:86:BF:56:9D:88:44:1F:45:F2:3A:69:E2:E9:A0:9C:FA:33:47
            X509v3 Authority Key Identifier:
                keyid:4F:B1:7D:6B:47:6E:A1:DA:C3:EB:CE:D0:7C:D5:2A:EE:F1:42:2F:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/4FB17D6B476EA1DAC3EBCED07CD52AEEF1422F00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FB17D6B476EA1DAC3EBCED07CD52AEEF1422F00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/3139312e33372e3133382e302f32342d3234203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:fb:cb:0b:af:13:e6:6f:c0:8a:fb:ce:27:92:3f:49:5c:57:
         49:6e:5c:b3:dd:a6:d5:80:13:16:0f:8f:20:0d:37:bb:42:5d:
         e2:55:45:82:40:0b:23:c8:db:ec:35:fe:03:a0:50:b3:20:1e:
         01:81:bf:83:4a:eb:e7:58:b4:56:32:ed:5a:83:07:86:7c:aa:
         d2:25:c2:07:ee:07:bc:cc:e7:00:bc:8b:26:96:21:35:3a:f7:
         35:bd:07:b1:db:8f:6a:18:ae:c7:fa:d8:fd:40:64:ee:88:fc:
         5d:78:92:32:41:66:fc:d1:e4:7e:4b:f7:0f:be:ec:f5:26:c0:
         db:18:8b:5a:19:2c:16:77:74:05:a2:8e:90:0a:48:e9:0c:3b:
         77:99:8f:8e:98:90:db:75:82:c0:da:44:a3:51:15:1e:27:4f:
         1d:be:08:43:4f:6a:e1:ea:a4:21:54:a4:16:e3:f8:66:09:dd:
         2a:55:2f:ef:6f:04:0d:01:bf:4e:bf:e9:d5:2b:d8:72:b6:72:
         4b:8f:b8:b7:f9:8f:95:46:6a:7c:3c:f7:4e:a1:fd:b2:3a:74:
         d0:1d:06:e9:1d:08:b5:6c:ff:53:8e:cb:3c:17:6b:4a:9c:fd:
         0b:54:af:8d:84:0d:28:71:60:76:1b:be:1e:33:02:cf:81:1e:
         c0:20:0c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org