Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230302e302f32332d3233203d3e20323633353132.roa
File:                     3139312e3234332e3230302e302f32332d3233203d3e20323633353132.roa (raw, json)
Hash identifier:          sIKHMq5xwTrfWMC8heH55ANgINkgzHlPkNiusqH8bYw=
Subject key identifier:   77:0F:94:6D:5D:1D:0F:C6:0F:32:88:0D:40:CF:37:0D:74:68:F3:73
Certificate issuer:       /CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Certificate serial:       3647B31CD8AB7961ED9F03657E4F6A14AB2B93E9
Authority key identifier: 8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230302e302f32332d3233203d3e20323633353132.roa
Signing time:             Thu 25 Jan 2024 15:31:44 +0000
ROA not before:           Thu 25 Jan 2024 15:26:44 +0000
ROA not after:            Thu 23 Jan 2025 15:31:44 +0000
asID:                     263512
IP address blocks:        191.243.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:47:b3:1c:d8:ab:79:61:ed:9f:03:65:7e:4f:6a:14:ab:2b:93:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
        Validity
            Not Before: Jan 25 15:26:44 2024 GMT
            Not After : Jan 23 15:31:44 2025 GMT
        Subject: CN=770F946D5D1D0FC60F32880D40CF370D7468F373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3d:c0:28:ce:46:d5:18:13:a6:fc:ce:90:05:
                    21:ad:cf:68:e5:70:96:f6:46:0c:41:b7:56:f1:4a:
                    95:a7:90:4a:b9:2d:df:50:de:c1:cd:a0:0e:e2:3f:
                    44:27:86:94:96:7d:25:54:31:14:41:01:1c:f7:db:
                    1c:83:6e:56:97:51:54:2a:a7:fc:c4:ca:27:73:24:
                    65:bf:1c:aa:a2:7b:ca:3e:63:06:24:0c:68:bd:5b:
                    ae:28:ed:11:71:4a:64:43:78:d5:92:6c:82:f6:a4:
                    17:ea:c9:a5:a7:ce:8c:36:23:d7:8b:2c:c5:4d:5d:
                    90:d2:15:f5:2d:59:7c:de:ec:c9:b0:f9:94:e8:b9:
                    83:02:25:21:40:96:e5:5b:b4:f5:d2:94:4c:a1:af:
                    95:0e:35:cf:63:d6:cc:b2:b1:30:70:0a:02:3d:c2:
                    00:4c:ae:b2:c9:3b:b5:45:8e:fa:95:c2:a8:14:14:
                    5c:4a:95:dd:1a:97:3d:10:f4:86:4f:f7:ca:eb:f4:
                    15:89:c6:c1:bb:80:31:d1:13:1b:ab:5c:e9:e3:b4:
                    05:49:9f:7b:e5:40:5c:ce:01:d3:9e:8f:aa:0a:e8:
                    11:0d:dc:23:81:03:9e:fb:45:bf:cc:94:44:be:59:
                    19:b8:29:6f:7e:b8:51:8f:d4:6d:4c:27:2b:66:c7:
                    ea:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0F:94:6D:5D:1D:0F:C6:0F:32:88:0D:40:CF:37:0D:74:68:F3:73
            X509v3 Authority Key Identifier:
                keyid:8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230302e302f32332d3233203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:f3:ef:3e:2a:f5:e2:c9:00:7f:83:c1:74:82:6b:c7:65:72:
         64:c8:6f:5a:0a:76:27:a7:fa:95:63:c7:18:f2:20:51:db:40:
         6a:d3:55:da:13:dc:f3:90:36:a8:73:d8:20:ae:a0:89:43:a4:
         f9:73:02:82:3d:6f:cc:eb:99:cb:57:0a:31:88:51:80:8a:80:
         b6:84:fc:02:01:8c:b9:9f:82:a1:34:04:50:49:8b:41:e9:53:
         bb:98:70:bd:9b:bf:46:d4:ca:0b:60:e7:49:89:b6:13:b7:0e:
         ba:7b:2a:28:09:a7:5c:42:bf:e6:95:c3:35:8f:99:ad:1e:72:
         30:9e:c4:80:20:09:19:d7:63:09:22:d4:88:f6:b6:25:2d:ec:
         dc:92:73:3d:02:51:41:c0:2d:b3:86:a7:a5:75:77:93:42:ea:
         cc:6c:41:16:e5:ba:86:49:ca:21:fd:98:b1:f0:68:71:16:72:
         0a:47:7d:87:f7:3f:a4:a9:f5:73:54:d2:69:a4:b1:46:1e:6e:
         13:71:76:4d:10:b6:b4:26:f7:d6:ef:27:df:34:8e:b9:bb:0b:
         01:fc:98:71:42:19:59:2f:5e:a6:a1:bc:15:e6:25:c7:f0:b1:
         97:84:7f:a4:72:42:23:91:92:af:29:c8:c0:99:e2:06:4b:44:
         43:00:20:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org