Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230302e302f32342d3234203d3e20323633353132.roa
File:                     3139312e3234332e3230302e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier:          rbptq0/6qkxrk/fWx+oWP/TnnMPX1MCAV2F2BLisfrc=
Subject key identifier:   EE:C6:55:72:E0:FE:A6:0E:D1:EB:12:EE:76:E4:82:32:9B:B8:47:C7
Certificate issuer:       /CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Certificate serial:       24EB20468B9894D7F97320F5419218D968F35A59
Authority key identifier: 8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230302e302f32342d3234203d3e20323633353132.roa
Signing time:             Tue 16 Jan 2024 16:53:19 +0000
ROA not before:           Tue 16 Jan 2024 16:48:19 +0000
ROA not after:            Tue 14 Jan 2025 16:53:19 +0000
asID:                     263512
IP address blocks:        191.243.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:eb:20:46:8b:98:94:d7:f9:73:20:f5:41:92:18:d9:68:f3:5a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
        Validity
            Not Before: Jan 16 16:48:19 2024 GMT
            Not After : Jan 14 16:53:19 2025 GMT
        Subject: CN=EEC65572E0FEA60ED1EB12EE76E482329BB847C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:7e:87:8f:3b:5c:28:49:1d:df:70:6c:0c:
                    06:cd:c4:b8:50:c2:b6:0a:b2:c1:2a:c3:79:a2:41:
                    75:e6:e8:a0:b9:e7:01:2d:e9:ae:0d:0b:01:a1:e1:
                    1d:19:4b:a5:37:57:f8:86:ea:ce:40:ce:8e:df:b3:
                    68:6c:b5:ef:8e:30:83:9f:f9:ef:79:ca:e3:eb:7f:
                    41:6c:b8:ee:8f:8f:40:bd:a7:ed:05:32:78:22:09:
                    e8:3d:4f:7e:93:6e:31:2b:ff:69:e8:ff:58:14:2e:
                    4b:a4:1e:96:24:9a:24:f2:eb:4c:d9:7e:31:d3:95:
                    d8:3d:28:71:8a:d8:3a:e5:a0:c4:bb:39:11:1e:16:
                    52:4c:ca:79:d5:df:c5:60:3b:d0:d1:e8:6d:af:15:
                    aa:25:bf:e8:c2:cd:4b:cc:40:98:d8:28:c3:d8:c5:
                    df:0c:b3:c6:d7:94:72:4c:a1:23:b5:87:b2:0f:68:
                    fe:ea:ff:19:ef:4d:0c:e7:c0:e1:b3:9f:3a:c4:d6:
                    80:3c:3e:8f:84:6c:0c:72:99:9a:8f:05:f0:db:cc:
                    6e:82:0d:06:28:9a:66:76:53:23:9e:60:32:d0:ef:
                    ff:0d:c4:96:db:63:71:38:36:f8:47:53:81:d3:71:
                    e5:90:7e:c0:2c:4a:7e:ce:ee:07:1d:53:bf:94:10:
                    cd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C6:55:72:E0:FE:A6:0E:D1:EB:12:EE:76:E4:82:32:9B:B8:47:C7
            X509v3 Authority Key Identifier:
                keyid:8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230302e302f32342d3234203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:ef:00:73:81:d0:60:0e:da:04:67:21:fe:fa:a6:ab:54:a8:
         5d:48:c0:96:12:fa:6a:2d:ad:09:0c:94:5c:82:bb:11:fe:c2:
         96:0a:a0:51:03:ac:a6:10:01:6b:e8:b4:9b:f0:82:3a:d1:64:
         f3:33:44:fb:ca:d6:f1:1b:77:72:08:de:50:a7:82:3d:fb:5f:
         45:92:d0:00:4a:3e:2e:b3:27:3b:7c:69:e1:46:4b:17:32:54:
         e5:6b:52:2a:3a:77:c9:df:af:19:a9:6d:3d:02:b4:18:78:4e:
         fe:df:48:c5:8f:f7:87:32:0c:ce:55:79:62:77:36:fb:38:7f:
         48:88:c9:fd:48:f3:61:62:6e:99:06:8b:0d:24:68:d2:65:ff:
         b2:b8:e2:fc:b5:83:ee:c8:c8:54:c6:c3:d7:15:52:b5:43:77:
         42:09:d6:54:a7:e4:05:98:20:3e:df:a4:d7:b0:97:90:aa:56:
         d4:c8:44:93:c0:f5:b4:58:dd:82:d7:33:95:b6:51:0c:8f:8d:
         64:75:94:92:b5:bc:a1:d1:a6:c3:89:65:f4:90:2a:ce:ba:d0:
         66:5f:44:df:ac:91:46:7d:fd:c2:0f:94:2c:d5:63:30:c3:68:
         82:bb:f4:8a:cd:3f:22:17:9a:d0:6f:f8:5e:7d:5e:89:a7:79:
         27:9b:dc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org