Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230372e302f32342d3234203d3e20323633353132.roa
File:                     3139312e3234332e3230372e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier:          Jy82vd/nWnOnGKvGIjaw6RG+HyMXeus6MAlMMHcp0u0=
Subject key identifier:   8F:D4:B6:59:4F:93:DF:A0:C1:BE:A1:62:D1:FD:A8:ED:CC:DD:EE:F0
Certificate issuer:       /CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Certificate serial:       68B160DB350017639E4615BA0C9945CDF27CB3A1
Authority key identifier: 8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230372e302f32342d3234203d3e20323633353132.roa
Signing time:             Thu 25 Jan 2024 15:29:21 +0000
ROA not before:           Thu 25 Jan 2024 15:24:21 +0000
ROA not after:            Thu 23 Jan 2025 15:29:21 +0000
asID:                     263512
IP address blocks:        191.243.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b1:60:db:35:00:17:63:9e:46:15:ba:0c:99:45:cd:f2:7c:b3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
        Validity
            Not Before: Jan 25 15:24:21 2024 GMT
            Not After : Jan 23 15:29:21 2025 GMT
        Subject: CN=8FD4B6594F93DFA0C1BEA162D1FDA8EDCCDDEEF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4b:80:13:3e:fc:26:91:3b:7c:4c:c2:e6:0b:
                    0a:bc:74:4a:a0:c2:25:48:6e:7a:61:03:26:ce:b6:
                    df:5b:91:1d:18:f0:35:f4:7a:21:49:ec:2a:25:4e:
                    66:19:a2:2f:20:21:87:42:34:ae:a2:20:17:94:e0:
                    15:34:b2:cd:4b:c2:8b:17:01:be:9e:e4:0f:91:4b:
                    84:79:56:77:9b:cb:23:c0:f5:20:97:35:1a:06:06:
                    25:24:cd:00:61:2f:4c:d1:9f:3f:85:96:a3:f5:14:
                    7f:1e:7a:78:3f:1b:1d:19:ce:79:e8:a1:18:aa:f7:
                    c8:57:1e:7e:ce:a5:3a:4f:85:8e:df:34:0b:7f:db:
                    29:da:c9:9d:fe:dc:d2:96:a3:44:1d:93:2d:cb:1f:
                    f8:28:8d:13:50:bd:62:24:c4:b4:31:d1:26:a4:52:
                    7a:8c:72:b6:2d:ed:c0:7b:cf:26:84:9d:c3:76:ce:
                    3a:0e:54:6f:e7:8f:42:3d:a0:2b:9f:72:49:f0:3f:
                    49:3f:e1:5f:0c:39:f9:cb:6f:f7:40:2a:8a:3b:ce:
                    3f:87:de:88:b2:b3:3a:60:82:aa:61:8f:1d:22:9e:
                    62:08:2c:cc:9c:a2:ef:05:90:f2:ac:ef:74:56:73:
                    4a:7f:8d:49:95:0a:44:e6:53:87:d2:c2:f0:47:76:
                    27:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D4:B6:59:4F:93:DF:A0:C1:BE:A1:62:D1:FD:A8:ED:CC:DD:EE:F0
            X509v3 Authority Key Identifier:
                keyid:8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230372e302f32342d3234203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:5e:41:e3:63:d9:d7:5f:7a:53:bb:31:7a:5d:e3:7d:22:60:
         73:2f:34:65:4a:7e:9e:cf:36:ce:ea:91:1d:ef:af:90:52:7a:
         47:49:48:68:e1:0d:88:5d:af:fa:37:91:d0:c9:98:45:67:e1:
         86:1e:8a:ec:b8:09:70:30:2e:8b:45:7f:98:45:b8:b2:ca:f1:
         75:55:5a:5a:83:0a:eb:1d:73:f2:9c:cb:c5:c3:b8:82:95:6a:
         a6:da:22:53:f4:89:f7:77:63:5c:f6:53:b2:8e:af:e9:25:67:
         78:fc:b1:fc:4b:14:88:1e:09:ee:87:c0:c3:a7:bd:d8:14:d2:
         bb:db:2a:a0:6a:ad:f5:21:ab:0d:fa:30:a3:56:38:fe:22:2b:
         1d:cb:14:9f:ce:8b:46:64:b4:bd:97:68:ab:db:67:52:12:38:
         5e:30:82:4a:7e:cf:38:52:59:e0:5c:91:30:4a:75:75:66:79:
         36:be:15:8b:0a:3e:48:28:5b:5d:7f:ad:3d:0f:d4:f5:19:ad:
         2f:77:3a:89:d0:2a:d7:f4:d8:b1:0d:d3:84:d7:fe:98:d4:20:
         d5:54:40:63:60:01:b9:b6:1a:ec:7d:e7:13:35:7f:2f:61:c5:
         8a:64:5a:fa:62:46:07:40:cc:06:99:d7:4d:31:54:08:28:73:
         ce:02:45:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org