Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231382e302f32342d3234203d3e20323632383038.roa
File:                     3139312e3235332e3231382e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          iPY6CVl+gJgQsiswDECmewzQhYM7DEABiXLSVhh1EZs=
Subject key identifier:   D0:9A:9B:16:57:15:4B:07:E4:C6:BB:27:05:A0:AB:8E:B4:7D:E6:58
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       5B4305C49E702F38349A184F64E71F9B6DA3B0CC
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231382e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:23 +0000
ROA not before:           Tue 10 Oct 2023 13:52:23 +0000
ROA not after:            Tue 08 Oct 2024 13:57:23 +0000
asID:                     262808
IP address blocks:        191.253.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:43:05:c4:9e:70:2f:38:34:9a:18:4f:64:e7:1f:9b:6d:a3:b0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:23 2023 GMT
            Not After : Oct  8 13:57:23 2024 GMT
        Subject: CN=D09A9B1657154B07E4C6BB2705A0AB8EB47DE658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:b9:96:0f:4d:86:49:fe:9a:e5:ce:c9:e3:
                    82:b8:52:b6:ab:fc:f5:1a:4f:a1:03:18:c8:a7:13:
                    df:b3:2d:3c:a6:90:ad:79:c2:b0:12:87:3e:48:b2:
                    d1:d0:98:ea:24:96:88:08:da:47:53:be:03:a4:a9:
                    ad:cc:48:4b:9d:89:97:8e:05:bb:d1:7d:36:c1:23:
                    79:8b:73:c6:7d:c6:0d:75:92:31:fe:6f:ac:1c:45:
                    6c:ce:34:ea:be:18:10:06:23:25:7e:87:f8:2f:aa:
                    68:87:38:6a:98:9e:c1:8c:27:1f:fe:7f:77:4d:87:
                    13:5e:05:36:a0:d8:4d:34:68:28:c9:85:14:03:fd:
                    d8:d8:2b:3c:08:f1:4c:be:75:ea:8e:0f:68:4e:6e:
                    c1:87:0a:d0:6a:74:e3:24:de:49:c6:65:99:ba:a7:
                    8a:8a:16:4a:9e:93:fc:ef:12:50:1f:f6:0f:2c:9a:
                    9e:44:5a:7f:3d:6c:67:a1:13:88:df:e4:e6:6d:3d:
                    4c:a0:6f:55:ac:79:31:67:c2:54:de:8d:09:27:97:
                    a9:55:14:a2:d2:b4:d6:48:f7:d3:83:a3:ae:04:f9:
                    7b:b7:0d:1e:63:86:45:3f:8c:47:0e:d1:eb:e0:d1:
                    72:5c:2f:d0:9a:04:be:02:f5:3f:2e:9f:00:e0:2c:
                    9b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9A:9B:16:57:15:4B:07:E4:C6:BB:27:05:A0:AB:8E:B4:7D:E6:58
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231382e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:52:ab:c1:ca:59:a9:64:74:57:a7:a8:6c:e1:ba:f3:c1:d8:
         80:ac:c9:80:9a:74:4d:45:1f:b2:7c:1a:4c:3f:1d:62:aa:d5:
         e1:d8:70:dd:ce:0b:8f:46:ee:33:56:41:e7:78:26:0e:87:50:
         5c:c2:d3:dd:06:73:3c:56:c3:9e:c0:05:53:83:3b:27:a6:ed:
         d7:29:6c:42:80:24:3e:56:74:20:55:85:e4:69:4b:5b:a1:08:
         fa:dd:ce:04:bb:b5:40:2d:06:b5:a6:01:a7:b3:f9:a2:cb:89:
         c5:39:d8:2a:94:36:9a:cb:46:12:01:98:b6:cd:dd:1e:b9:38:
         72:5a:b0:00:15:c6:ea:6c:c4:2e:d3:91:64:d9:e3:f6:53:5e:
         96:2e:42:4f:63:87:5b:35:31:7b:87:3b:51:09:14:1e:ce:42:
         70:cb:5b:c7:9a:05:13:17:d8:f4:17:16:65:4a:ce:dd:15:fc:
         2a:f5:7f:05:63:7a:d1:8a:bd:f7:51:c1:33:b8:26:50:91:fa:
         fd:6a:dd:ac:ab:01:69:08:ac:ad:34:0d:43:a1:cb:10:e5:55:
         f2:50:0f:93:67:aa:bb:07:47:ae:b5:25:5c:02:6a:05:25:6d:
         bc:05:42:32:d5:30:fd:be:f5:c4:b4:f4:3a:eb:04:31:d8:05:
         70:3f:e0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org