Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DwaJ31p6VNGJUzE3RUixumqG71kU7EvWcv5CVTcsgv8/0/3139312e362e3132382e302f32322d3234203d3e20323632383235.roa
File:                     3139312e362e3132382e302f32322d3234203d3e20323632383235.roa (raw, json)
Hash identifier:          4Zf9Qbzf18xEnjU5jlo22zWm09UNRSLjwhy7/SvbXKQ=
Subject key identifier:   A3:79:B5:8E:1D:3F:2A:AC:B2:30:E3:B7:1B:D8:23:F6:07:E7:03:A8
Certificate issuer:       /CN=1E7BDDC05749084172E1A6131787240A66BB5D43
Certificate serial:       78C502EF9ABBB675525CD7DF397AED7D82592FE1
Authority key identifier: 1E:7B:DD:C0:57:49:08:41:72:E1:A6:13:17:87:24:0A:66:BB:5D:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E7BDDC05749084172E1A6131787240A66BB5D43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DwaJ31p6VNGJUzE3RUixumqG71kU7EvWcv5CVTcsgv8/0/3139312e362e3132382e302f32322d3234203d3e20323632383235.roa
Signing time:             Tue 28 Nov 2023 20:04:23 +0000
ROA not before:           Tue 28 Nov 2023 19:59:23 +0000
ROA not after:            Tue 26 Nov 2024 20:04:23 +0000
asID:                     262825
IP address blocks:        191.6.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c5:02:ef:9a:bb:b6:75:52:5c:d7:df:39:7a:ed:7d:82:59:2f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E7BDDC05749084172E1A6131787240A66BB5D43
        Validity
            Not Before: Nov 28 19:59:23 2023 GMT
            Not After : Nov 26 20:04:23 2024 GMT
        Subject: CN=A379B58E1D3F2AACB230E3B71BD823F607E703A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:8b:21:cf:50:45:0a:1d:2f:03:3b:4a:3c:62:
                    f3:9b:fd:dd:a3:0e:0a:df:d5:56:da:97:d0:a0:d4:
                    4f:c6:f4:bd:23:19:42:35:67:e2:af:23:db:03:cb:
                    a0:e6:ff:89:df:19:0d:66:b5:27:0a:73:fe:84:33:
                    91:7a:0b:5e:7a:9b:57:51:8d:0d:75:f3:55:3f:f7:
                    37:92:37:cc:af:2e:bf:0c:02:2d:15:f4:12:bc:4b:
                    6c:17:c4:dd:ac:03:6c:23:4b:d9:dc:2d:d5:20:5c:
                    c0:ff:5e:8d:e8:34:90:53:07:09:81:51:a3:9f:63:
                    4a:86:f8:9d:3f:77:f4:38:b9:88:d0:df:16:cf:8b:
                    09:dd:96:df:4e:a1:13:aa:9b:2d:f3:6f:a0:dc:d7:
                    76:ba:da:e1:85:cb:38:dd:ba:b4:ee:d6:fa:08:51:
                    df:17:22:cc:9a:8b:2a:77:20:7d:c0:3c:a5:47:09:
                    a8:3c:62:69:7b:ec:fe:94:1f:22:33:73:93:52:a5:
                    bc:4d:65:80:c8:0b:47:9d:b9:1f:78:79:33:43:8d:
                    eb:11:4d:01:2e:9b:91:80:14:19:b7:40:ea:fa:19:
                    75:95:7a:10:c9:31:ae:7e:50:2a:df:f0:b8:fe:2b:
                    f8:19:f0:1a:fe:74:eb:97:45:3d:f5:c4:9a:b0:4a:
                    1c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:79:B5:8E:1D:3F:2A:AC:B2:30:E3:B7:1B:D8:23:F6:07:E7:03:A8
            X509v3 Authority Key Identifier:
                keyid:1E:7B:DD:C0:57:49:08:41:72:E1:A6:13:17:87:24:0A:66:BB:5D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DwaJ31p6VNGJUzE3RUixumqG71kU7EvWcv5CVTcsgv8/0/1E7BDDC05749084172E1A6131787240A66BB5D43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E7BDDC05749084172E1A6131787240A66BB5D43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DwaJ31p6VNGJUzE3RUixumqG71kU7EvWcv5CVTcsgv8/0/3139312e362e3132382e302f32322d3234203d3e20323632383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:93:ec:32:00:6b:aa:1f:3e:bf:ce:23:01:db:41:2c:a3:87:
         21:2a:c4:8a:74:43:fc:84:6f:8a:3b:bd:42:24:f5:0b:90:25:
         aa:f3:5d:7f:23:38:0b:dd:2e:01:54:de:77:d6:04:3d:e5:fe:
         3e:41:0c:51:14:eb:08:51:0a:b0:34:fe:e8:25:21:9d:4e:ea:
         ac:85:83:d5:00:41:c6:eb:5f:2b:e5:f1:b5:4f:eb:06:7d:b5:
         16:09:7a:4c:3b:0e:8a:a6:ee:7c:65:4f:80:ca:36:8c:d8:f3:
         c5:f8:7a:a8:a2:3f:ca:af:25:8b:49:33:4d:81:4c:a9:d4:f5:
         6a:3a:24:bd:88:53:b6:b0:13:8d:fd:21:eb:61:18:bf:58:8b:
         64:4b:d7:88:db:4a:1c:8d:25:66:16:4f:91:15:6c:18:79:90:
         66:dc:00:ab:b3:ff:de:df:84:34:2c:ef:0c:1f:6f:f7:82:ce:
         cd:7c:b0:55:3e:e0:d7:4a:2b:21:d7:9f:5a:f8:cc:50:08:1e:
         b7:27:d2:d6:f1:7d:2e:02:96:4e:38:00:94:26:4e:8e:0d:4e:
         67:a1:d0:a9:09:c8:86:f6:70:04:6b:f6:b0:fd:81:40:c2:44:
         f0:b3:62:c2:69:57:72:53:f0:34:69:50:7a:e7:6f:79:9d:97:
         bc:63:ce:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org