Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231342e302f32342d3234203d3e20323632383038.roa
File:                     3139312e3235332e3231342e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          +/3JJXWp0+74wtFMApliabVSnZLfNh+5Su8Nf/iB22A=
Subject key identifier:   5F:D1:E7:3E:D7:89:2E:D1:C6:8B:DC:6A:F9:AF:03:E7:9B:7B:55:CC
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       01AEC73071FF676FF63344C16123AB26A51BF864
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231342e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:24 +0000
ROA not before:           Tue 10 Oct 2023 13:52:24 +0000
ROA not after:            Tue 08 Oct 2024 13:57:24 +0000
asID:                     262808
IP address blocks:        191.253.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ae:c7:30:71:ff:67:6f:f6:33:44:c1:61:23:ab:26:a5:1b:f8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:24 2023 GMT
            Not After : Oct  8 13:57:24 2024 GMT
        Subject: CN=5FD1E73ED7892ED1C68BDC6AF9AF03E79B7B55CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f3:9e:e3:2a:22:51:94:ac:b9:ef:ac:fd:f8:
                    51:f7:39:81:2f:e4:e1:29:2e:7d:87:6b:d6:0b:57:
                    ce:c1:13:bc:6d:5c:75:2a:0e:fb:e9:60:c1:50:c8:
                    bf:2f:a5:69:cb:7e:ec:92:5f:f4:e0:f0:89:22:3d:
                    b9:e6:cf:c7:92:93:4f:20:1a:0a:da:3b:1b:a0:1a:
                    c6:95:70:47:32:3f:26:87:6e:ef:92:1a:a0:de:5d:
                    35:74:16:41:ce:a4:94:0f:34:ac:8e:6a:c4:fc:21:
                    f4:12:09:b0:7c:32:3c:d7:6b:c1:98:9d:e7:f1:21:
                    82:04:10:1d:0c:8f:e6:b5:ed:e1:bd:c7:2c:ba:67:
                    1d:33:6e:32:08:e5:9e:9d:e3:ca:09:f2:1d:3d:bd:
                    b7:dc:71:5e:5d:2e:4f:31:8f:64:35:50:cc:15:5d:
                    30:41:0c:ec:72:4c:64:02:89:01:46:bf:4c:0d:11:
                    99:01:2a:85:61:ce:45:fc:0a:fa:a8:0e:5a:5a:07:
                    fa:8a:3c:4b:2b:24:27:97:a8:ca:cb:23:c6:e0:b2:
                    cc:3a:52:35:b5:27:b2:b6:3a:21:b1:07:8e:cf:01:
                    a4:dd:80:46:7a:fb:86:86:11:4f:fc:c1:23:18:0c:
                    ec:6d:c9:a7:6e:2f:02:86:09:44:11:70:64:04:0e:
                    f4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D1:E7:3E:D7:89:2E:D1:C6:8B:DC:6A:F9:AF:03:E7:9B:7B:55:CC
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231342e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:6d:64:c7:33:ae:f4:c2:a6:90:50:c0:8c:fb:a6:ec:ed:4c:
         99:ad:44:49:22:19:3b:22:44:c5:ef:11:88:2e:3f:39:cf:97:
         aa:f0:45:69:bd:a5:3d:2f:ec:1a:a1:29:02:dd:91:1d:c5:80:
         c4:ce:4c:b9:28:6c:65:98:f2:fd:8b:07:65:b7:1b:dc:a6:95:
         5f:3d:65:6e:35:2f:8c:05:da:86:cb:a6:ae:c0:25:93:a2:a9:
         52:65:45:83:a8:bf:8d:b5:fd:47:d5:97:92:c1:56:18:d4:f0:
         8b:c6:24:8b:5a:58:3e:d6:5c:b2:09:51:ed:d9:2c:fb:bc:81:
         cf:3a:13:bf:72:bf:e9:c1:cc:ca:fd:cd:6a:30:c8:1b:5f:61:
         e8:3d:61:98:a8:01:3f:cb:ca:62:dd:f5:16:06:46:8d:67:8c:
         1d:fc:52:6d:1c:db:4d:a9:85:f4:25:3a:54:28:bb:18:0c:04:
         04:64:ba:4b:f8:1f:76:4d:56:44:8c:2b:a4:65:c3:75:3d:c8:
         b6:90:38:f0:c9:81:5f:3b:c9:22:9e:b3:1d:7e:9a:a8:a9:7e:
         08:d1:d3:c9:ee:e4:32:a4:02:cf:24:c1:65:79:8a:48:41:d9:
         bb:8d:e1:ff:e5:db:76:be:ff:39:a8:7c:6b:e3:1a:cf:e5:60:
         93:66:83:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org