Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230322e302f32342d3234203d3e20323633353132.roa
File:                     3139312e3234332e3230322e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier:          q5hY2LPduWj8FQvC4fMEq8clMU3nJyAf3Fi/vkAU10A=
Subject key identifier:   1C:33:D7:F7:A1:4A:F3:F2:FB:B9:C4:16:B3:92:38:EA:C8:F2:D9:9C
Certificate issuer:       /CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Certificate serial:       6C4E6846CD597724CC8E654E51A083EC309762D9
Authority key identifier: 8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230322e302f32342d3234203d3e20323633353132.roa
Signing time:             Thu 25 Jan 2024 15:32:16 +0000
ROA not before:           Thu 25 Jan 2024 15:27:16 +0000
ROA not after:            Thu 23 Jan 2025 15:32:16 +0000
asID:                     263512
IP address blocks:        191.243.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4e:68:46:cd:59:77:24:cc:8e:65:4e:51:a0:83:ec:30:97:62:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
        Validity
            Not Before: Jan 25 15:27:16 2024 GMT
            Not After : Jan 23 15:32:16 2025 GMT
        Subject: CN=1C33D7F7A14AF3F2FBB9C416B39238EAC8F2D99C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:4c:a9:14:29:bb:99:18:4b:ca:a0:05:b4:
                    59:0f:7b:b3:ec:ca:6c:fd:6b:33:b0:28:4d:1e:5a:
                    5b:0f:0f:ce:49:94:3e:b2:5b:98:fb:aa:bf:19:e6:
                    25:5a:8f:6f:8e:28:bf:f4:7d:4e:b6:0c:d6:5b:41:
                    96:bc:c7:5f:90:7f:0f:4b:2e:b8:59:13:ff:2e:51:
                    8a:76:ea:e3:c9:e7:9c:93:08:2c:56:64:fc:c6:62:
                    b8:d6:7f:6b:d8:ef:c2:57:da:dc:e3:87:7a:22:42:
                    a0:a8:90:bc:ef:99:01:62:6a:5d:87:02:d8:db:f5:
                    ff:64:76:f2:d3:2a:22:7b:57:60:05:02:0f:76:14:
                    cb:89:a3:41:7a:f8:48:92:f6:c7:f0:b2:0e:9e:7c:
                    f3:c3:de:59:7a:bd:8d:f0:fd:82:c6:93:8a:c3:f8:
                    da:41:f0:af:d2:13:df:ab:be:44:cb:8f:c4:e6:24:
                    f1:87:35:6e:8b:1f:06:c6:db:39:39:e3:f5:c3:f8:
                    bc:d9:9c:c4:b7:de:0b:54:96:12:7f:c2:eb:bd:d7:
                    db:52:4a:5d:cb:b9:56:c2:fe:69:3c:56:a1:dc:d2:
                    eb:73:7e:23:27:65:79:09:fe:5a:0c:67:7c:d2:f0:
                    ae:10:fc:6e:07:d0:47:be:63:11:20:dc:a5:50:9d:
                    72:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:33:D7:F7:A1:4A:F3:F2:FB:B9:C4:16:B3:92:38:EA:C8:F2:D9:9C
            X509v3 Authority Key Identifier:
                keyid:8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230322e302f32342d3234203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:0c:7f:a6:05:1f:ff:18:be:2e:d8:78:53:1a:67:5c:1a:03:
         75:db:1f:fa:86:6c:c8:a6:a1:31:16:00:39:7e:3c:fd:a8:fb:
         98:bf:8c:f1:6a:28:39:ab:f6:f6:d6:e4:82:89:cf:ae:0f:05:
         3b:80:be:fd:0e:56:f9:c2:ab:be:92:9c:9d:e7:a4:d4:12:31:
         83:f8:81:39:f2:c3:80:a4:3c:4b:8d:34:5e:63:c1:70:a8:ea:
         aa:95:d8:a9:1c:df:c3:95:fc:5d:04:cd:3a:92:05:39:dc:3e:
         80:25:59:20:50:29:d3:9f:1e:76:a4:0d:ce:77:a2:7c:e9:55:
         ab:75:63:47:46:12:5b:be:95:cc:c3:e6:04:01:df:3e:f8:fa:
         84:e7:ef:13:f2:c9:29:8d:2f:be:74:0f:a7:14:01:f2:dc:c5:
         2f:47:9f:3f:bb:92:04:21:1d:0f:9e:83:6f:75:59:80:58:c4:
         35:10:e7:e9:b3:2d:1a:15:20:f9:2a:d1:fe:99:c5:70:db:07:
         da:c8:50:3a:f2:d7:81:41:09:03:b2:94:8b:84:72:94:30:3e:
         71:b1:fa:b3:a6:7b:9f:b6:23:92:fa:ee:a4:68:48:c0:a9:fe:
         3a:7e:3c:f1:bc:29:6f:3a:77:0e:2d:10:20:0c:33:5f:f1:3c:
         be:55:21:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org