Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NT8hFXtXbqmYsgfoE53gPG5xUYPQ1iR9sUwA6joHw4g/0/3139312e33372e3134342e302f32312d3234203d3e20323633333631.roa
File:                     3139312e33372e3134342e302f32312d3234203d3e20323633333631.roa (raw, json)
Hash identifier:          zCfC8Z2JiiHbjSTBrPOEbJkKzdBZXH0WUUi1RsmqAN8=
Subject key identifier:   8E:62:96:AD:DF:81:00:B5:43:7F:F1:78:8D:5E:44:02:31:3C:66:32
Certificate issuer:       /CN=BBD51503988DC6E2131E817A069616041C6B024E
Certificate serial:       38B2B7E405C89890ECBCAADC65C6128218349A03
Authority key identifier: BB:D5:15:03:98:8D:C6:E2:13:1E:81:7A:06:96:16:04:1C:6B:02:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBD51503988DC6E2131E817A069616041C6B024E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NT8hFXtXbqmYsgfoE53gPG5xUYPQ1iR9sUwA6joHw4g/0/3139312e33372e3134342e302f32312d3234203d3e20323633333631.roa
Signing time:             Tue 18 Apr 2023 12:55:51 +0000
ROA not before:           Tue 18 Apr 2023 12:50:51 +0000
ROA not after:            Tue 16 Apr 2024 12:55:51 +0000
asID:                     263361
IP address blocks:        191.37.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b2:b7:e4:05:c8:98:90:ec:bc:aa:dc:65:c6:12:82:18:34:9a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBD51503988DC6E2131E817A069616041C6B024E
        Validity
            Not Before: Apr 18 12:50:51 2023 GMT
            Not After : Apr 16 12:55:51 2024 GMT
        Subject: CN=8E6296ADDF8100B5437FF1788D5E4402313C6632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bf:38:1f:3b:d8:13:f7:4e:a5:2a:d3:9b:53:
                    29:dc:ed:30:c1:c4:39:c8:3e:b7:96:2a:e3:24:81:
                    c3:fb:a7:69:53:66:0b:49:95:05:59:31:6d:22:6e:
                    7e:8a:9f:e3:16:2e:ff:07:36:81:c9:64:11:9a:bf:
                    90:bd:d0:e9:46:e4:82:89:40:5d:96:99:fc:2c:02:
                    50:bb:1f:8b:47:7b:00:0f:48:df:b6:5d:56:f9:5a:
                    e0:fa:6d:6a:30:f6:fd:f4:6c:5d:90:69:88:16:7c:
                    42:98:79:77:99:79:b9:0f:7b:03:a2:76:e0:8f:f8:
                    e3:b5:04:00:68:9a:03:55:bb:3b:18:65:de:82:8c:
                    86:24:b7:31:ad:fc:f3:36:7d:90:d4:ac:66:11:14:
                    1b:52:00:b2:f9:f1:fa:58:d7:07:e6:f0:a0:63:82:
                    b9:a5:da:01:3a:8b:4a:68:44:9c:33:42:3b:f1:1a:
                    d8:49:34:35:8e:c3:bf:1d:84:6f:2d:ae:85:6f:07:
                    f4:a3:4c:c7:a1:e0:6f:1c:91:4d:c2:0a:d4:73:67:
                    f5:0a:60:7d:38:68:f9:ea:03:60:ad:8d:61:37:29:
                    95:7c:ad:9f:0f:a0:df:44:14:0a:c1:9c:c5:a9:2b:
                    a1:41:72:29:73:be:06:6e:a3:49:4f:28:e5:78:6b:
                    9a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:62:96:AD:DF:81:00:B5:43:7F:F1:78:8D:5E:44:02:31:3C:66:32
            X509v3 Authority Key Identifier:
                keyid:BB:D5:15:03:98:8D:C6:E2:13:1E:81:7A:06:96:16:04:1C:6B:02:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NT8hFXtXbqmYsgfoE53gPG5xUYPQ1iR9sUwA6joHw4g/0/BBD51503988DC6E2131E817A069616041C6B024E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBD51503988DC6E2131E817A069616041C6B024E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NT8hFXtXbqmYsgfoE53gPG5xUYPQ1iR9sUwA6joHw4g/0/3139312e33372e3134342e302f32312d3234203d3e20323633333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c9:0a:d8:55:17:88:36:10:b4:2d:00:be:c7:04:6c:bd:32:7e:
         77:43:00:33:12:18:9a:fc:6a:22:d8:e2:11:a6:96:ff:ae:69:
         b1:59:2d:c8:c2:fc:39:a1:19:c2:b3:72:a9:64:04:fb:93:5b:
         b3:b2:e4:48:ed:ef:b7:df:e6:98:52:b3:e5:aa:08:f0:98:af:
         60:5e:aa:62:65:24:af:0d:32:da:84:9e:be:42:38:0d:ea:44:
         11:50:08:0f:ee:d0:93:d0:99:de:63:6d:c0:a1:21:10:2d:85:
         1e:7c:69:30:6f:3a:53:8d:aa:c8:5e:43:f8:9f:6f:6a:0b:b3:
         69:5a:ff:48:62:5d:35:12:65:8e:37:97:ef:f5:e8:6c:4c:8f:
         1a:ff:36:90:6f:b3:5f:65:8a:ea:16:3f:95:0a:23:d2:0d:33:
         1c:7b:fd:71:ed:e5:e8:41:a3:28:0a:6e:e6:7c:fd:8d:20:82:
         62:a8:4c:55:9a:47:cb:d1:1e:27:36:a7:ba:0b:b4:50:94:84:
         a7:76:d9:fd:6b:9f:5d:b6:fc:eb:a8:d6:b8:cc:38:2d:b5:23:
         93:74:9a:69:ac:51:7e:37:f9:af:fb:6c:44:10:33:f2:c1:b2:
         3e:1e:0d:d2:2c:ae:15:2a:8d:8b:0d:86:b4:10:0c:3c:b1:bf:
         c8:42:2d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org