Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230342e302f32332d3233203d3e20323633353132.roa
File:                     3139312e3234332e3230342e302f32332d3233203d3e20323633353132.roa (raw, json)
Hash identifier:          EsE/eUKVNSZxvVaBviIoTIQMv9amto53I9ijm/GlEwM=
Subject key identifier:   B2:1D:C6:FA:47:EA:6F:30:C8:73:AC:AA:32:C6:D6:C9:C7:7C:48:E2
Certificate issuer:       /CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Certificate serial:       18C28C8609AB3A4B5F8E49BEDF6171F65933BDAC
Authority key identifier: 8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230342e302f32332d3233203d3e20323633353132.roa
Signing time:             Thu 25 Jan 2024 15:31:08 +0000
ROA not before:           Thu 25 Jan 2024 15:26:08 +0000
ROA not after:            Thu 23 Jan 2025 15:31:08 +0000
asID:                     263512
IP address blocks:        191.243.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c2:8c:86:09:ab:3a:4b:5f:8e:49:be:df:61:71:f6:59:33:bd:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
        Validity
            Not Before: Jan 25 15:26:08 2024 GMT
            Not After : Jan 23 15:31:08 2025 GMT
        Subject: CN=B21DC6FA47EA6F30C873ACAA32C6D6C9C77C48E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b7:6e:1f:7b:9b:2c:99:34:0a:8b:21:fc:4c:
                    d0:31:ac:4b:fd:68:0f:58:e8:6a:ce:90:fe:0a:e0:
                    8c:c7:44:88:cf:56:93:09:e6:d5:2b:18:be:b9:9f:
                    1e:ea:04:66:7e:7b:93:b4:e1:7e:ce:81:f4:a6:47:
                    d8:88:93:2d:97:82:5b:09:30:aa:40:b6:8c:05:82:
                    76:d0:d8:28:b2:af:22:a9:82:fd:70:49:b3:f7:d6:
                    45:52:e2:89:c7:65:9d:ca:9c:1b:48:c1:1a:1b:a5:
                    5d:e2:2f:e8:ab:d3:8b:e5:fd:7d:ba:60:35:aa:4e:
                    3d:61:a2:2e:35:1f:66:46:83:6e:db:12:4d:49:b2:
                    bb:0d:8d:75:22:4c:11:20:c9:77:85:18:56:2e:03:
                    4b:ba:0c:7d:68:a7:9e:e9:2d:6b:33:66:2b:50:e7:
                    a4:ee:d6:b4:9d:57:df:16:b6:ae:6f:96:3d:4c:10:
                    17:28:fe:47:51:3f:53:4b:55:ea:7c:03:0a:f8:6c:
                    3a:71:5a:a5:6a:15:57:1a:f6:1c:37:4f:39:32:98:
                    ec:75:f7:65:37:6f:b4:73:38:10:4e:cf:8d:19:68:
                    f7:3e:d2:b7:5d:e7:1e:bf:a1:a5:38:51:f7:b4:7c:
                    53:0c:d0:cb:ad:f0:4b:d5:3f:0c:bb:c4:28:c5:b0:
                    04:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1D:C6:FA:47:EA:6F:30:C8:73:AC:AA:32:C6:D6:C9:C7:7C:48:E2
            X509v3 Authority Key Identifier:
                keyid:8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230342e302f32332d3233203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:db:d0:aa:4f:7c:45:44:b4:24:57:42:47:ae:dd:02:c4:81:
         1b:a0:22:e8:73:55:fb:75:c0:8c:09:c6:91:a9:9a:a7:48:00:
         f2:a1:23:3d:10:4c:82:1f:d5:93:20:17:3a:fb:3a:e0:4c:d7:
         1e:52:5e:eb:e7:fa:02:51:4e:cb:74:84:2b:57:93:14:50:5d:
         00:db:55:95:16:3f:48:9b:37:0e:3e:6d:6c:15:ff:d0:0d:b5:
         f4:09:f3:57:e0:8c:b3:30:7c:fd:cb:fd:90:c7:c2:89:95:cf:
         87:38:60:76:5d:a9:57:67:22:7e:f8:79:14:a9:59:b1:f7:ec:
         1a:db:8e:f6:a4:84:f7:41:4c:b9:87:8a:7e:9a:58:2a:fe:62:
         39:6c:2c:77:1d:8a:25:a9:ef:0e:af:92:4a:2d:20:c0:d6:89:
         56:88:50:c0:67:2c:22:49:19:92:ec:6d:c6:bf:16:cb:b1:24:
         57:0e:c7:f9:68:29:29:fe:5b:53:49:64:ee:f8:2e:ca:10:b3:
         d9:e6:64:9f:91:87:f5:b9:41:30:8d:68:e6:e5:5d:3b:b6:91:
         fe:e3:e1:8a:61:b2:2b:e7:0a:fd:a7:2e:5b:10:76:d4:03:95:
         6a:24:43:a8:d3:2d:8a:c4:70:7f:bc:91:bf:01:cf:29:72:a6:
         df:b0:73:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org