Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231362e302f32312d3231203d3e20323632383038.roa
File:                     3139312e3235332e3231362e302f32312d3231203d3e20323632383038.roa (raw, json)
Hash identifier:          rTlwKPkfR712TKpQeOFpQRiR4onVVA2lSjKTo1U58ps=
Subject key identifier:   1D:5E:EB:DA:69:D6:93:04:D7:2D:DA:A7:9C:39:70:9A:9F:F7:E0:9F
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       682DA39B7B8A366DFB3F1A118128265B445DA2B8
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231362e302f32312d3231203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:28 +0000
ROA not before:           Tue 10 Oct 2023 13:52:28 +0000
ROA not after:            Tue 08 Oct 2024 13:57:28 +0000
asID:                     262808
IP address blocks:        191.253.216.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2d:a3:9b:7b:8a:36:6d:fb:3f:1a:11:81:28:26:5b:44:5d:a2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:28 2023 GMT
            Not After : Oct  8 13:57:28 2024 GMT
        Subject: CN=1D5EEBDA69D69304D72DDAA79C39709A9FF7E09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:c1:fd:b3:a4:2a:4a:27:0c:51:e2:b6:d1:
                    6a:bd:81:1e:63:e7:50:d5:bb:f7:b4:c8:20:c5:30:
                    4a:c3:28:cc:77:1e:38:79:50:15:a0:d2:08:c6:71:
                    c6:7d:a1:c8:38:d5:0c:9b:eb:c2:f3:58:85:74:45:
                    56:7f:55:b7:e0:e9:37:e1:51:1a:83:a7:2d:8e:fb:
                    79:d6:95:61:f1:18:8d:61:e6:b6:21:50:42:9a:d5:
                    11:bd:af:4d:7a:d6:c9:4f:92:63:5a:81:1d:8f:02:
                    6e:93:29:81:fd:6c:57:c8:2a:39:f4:a7:25:22:4c:
                    4e:58:3c:1f:f7:98:3f:64:51:4c:ec:26:24:ea:36:
                    b4:ed:2b:b8:a5:8e:49:d4:e8:f0:02:1d:82:4c:99:
                    6b:84:4c:3f:b3:77:c5:ec:80:8d:b8:95:23:ce:2b:
                    12:f7:ec:e2:14:20:17:6d:f1:6c:99:4a:6e:b0:23:
                    56:6b:bc:8d:b3:7b:f0:61:1f:c9:76:c7:b7:25:df:
                    9c:cf:b5:66:cb:69:92:44:7a:32:fb:7e:65:63:3a:
                    b7:54:ac:ce:b1:83:d7:62:07:e0:87:5e:32:d9:3c:
                    f2:4f:c9:99:b3:66:22:4d:dc:6b:aa:57:c9:f6:fa:
                    8f:41:be:c9:64:2f:17:70:8a:a7:ab:f0:d8:cb:26:
                    f2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5E:EB:DA:69:D6:93:04:D7:2D:DA:A7:9C:39:70:9A:9F:F7:E0:9F
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231362e302f32312d3231203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ce:b9:f7:b6:fc:c6:b8:96:30:6d:da:4a:a9:1f:d7:80:e6:19:
         cb:b8:30:9d:36:7b:74:1f:aa:e9:c9:ce:d0:b4:65:10:58:3f:
         73:e2:06:92:1c:92:a8:22:e5:e7:ab:8d:6c:7a:f1:5b:da:81:
         f1:ee:fa:da:1e:a3:96:a5:39:c2:dc:6e:90:35:ff:48:f1:6b:
         32:b8:65:29:f6:6f:07:d1:d7:d2:6a:32:05:41:92:c2:0a:fe:
         08:0d:fc:e4:82:1e:f7:c2:23:e6:a6:b6:0b:2d:5a:c6:29:4b:
         e7:e3:8d:41:08:78:4f:eb:d0:52:9c:aa:bf:db:54:e8:a0:e1:
         d0:33:a9:47:4e:66:01:90:c5:41:d0:cd:cb:11:c8:55:4f:d7:
         f1:03:2c:7c:f3:61:97:54:cd:25:67:89:58:2e:bc:ef:89:78:
         0f:36:00:e6:b8:98:c1:8e:0e:9a:5c:83:53:05:02:49:7c:fb:
         c6:d2:83:6e:9f:7a:74:70:87:cb:b2:2f:bb:27:48:02:8b:b0:
         6c:b5:d2:07:7d:b5:f3:d1:9a:d7:6e:67:c3:cd:a6:c5:7b:6b:
         5d:2f:95:f6:8f:94:fc:c9:7a:db:da:ed:5a:b8:10:b5:28:90:
         b7:6b:01:ee:b2:ad:fb:68:f8:d1:ba:cb:9d:6f:8a:58:96:41:
         28:0e:88:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org