Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3232322e302f32342d3234203d3e20323632383038.roa
File:                     3139312e3235332e3232322e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          M8m9JNweJn927PrSP1mTWvaT4GvOQvTtpw5/wFBenyA=
Subject key identifier:   DD:8E:CB:B4:D6:96:32:B6:CB:8E:6D:5E:85:75:57:91:A3:DD:AD:17
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       3369F840A59B759F59AE46C3A848626F214E924D
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3232322e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:23 +0000
ROA not before:           Tue 10 Oct 2023 13:52:23 +0000
ROA not after:            Tue 08 Oct 2024 13:57:23 +0000
asID:                     262808
IP address blocks:        191.253.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:69:f8:40:a5:9b:75:9f:59:ae:46:c3:a8:48:62:6f:21:4e:92:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:23 2023 GMT
            Not After : Oct  8 13:57:23 2024 GMT
        Subject: CN=DD8ECBB4D69632B6CB8E6D5E85755791A3DDAD17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:30:83:a5:34:62:45:27:e8:52:10:aa:7f:f4:
                    3e:67:f7:2c:dc:f6:7b:24:86:0d:3d:1c:0a:32:ce:
                    84:6f:bb:26:05:e2:3e:c6:35:e9:07:af:31:a4:1f:
                    68:c8:b6:7a:17:ec:c3:b0:1d:6d:d0:4f:db:6a:87:
                    da:ce:c3:53:06:0a:b0:0d:e1:d3:31:d2:c1:91:51:
                    00:e6:d5:c1:5f:4f:75:0a:01:ac:20:74:62:af:08:
                    3a:60:07:92:92:ca:08:f2:24:6c:c5:9d:36:08:c3:
                    b0:17:4f:30:ee:62:56:73:58:21:83:cf:e4:ca:08:
                    c2:98:1c:20:9c:64:0d:03:f1:78:96:5f:9e:bd:f1:
                    bf:3a:fa:f0:29:5d:06:59:3c:df:67:8a:c3:bb:c4:
                    0b:3b:df:10:65:19:5b:3d:bf:cf:6e:56:91:16:d2:
                    06:8d:b7:2a:67:67:52:33:79:98:f4:63:01:60:5c:
                    41:ab:7e:7c:a5:5d:47:58:87:f3:57:c0:e9:62:65:
                    8c:d5:23:f2:a3:d7:09:d0:e7:6f:97:74:34:9b:38:
                    9f:ee:7e:e0:39:ff:1f:ec:ba:05:8f:51:76:44:ad:
                    f2:8a:3c:e1:97:d0:01:48:95:62:d8:e5:16:08:19:
                    32:5f:db:73:75:cd:c3:87:ab:2a:b4:39:d9:d8:bf:
                    1f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8E:CB:B4:D6:96:32:B6:CB:8E:6D:5E:85:75:57:91:A3:DD:AD:17
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3232322e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:4e:13:a2:31:64:67:e4:c2:6a:ed:e3:47:09:af:3e:a0:9f:
         68:ad:94:56:9a:bc:07:b3:fb:bd:4c:86:7a:9a:fa:5d:c3:f1:
         88:5a:71:89:8f:97:99:d9:16:a7:26:22:6c:5f:79:8f:23:ed:
         0c:df:12:3d:12:fd:76:20:cf:1a:00:7e:f3:6b:e4:8a:64:59:
         60:e3:a6:fe:f8:d7:2e:c6:42:ae:3d:44:24:10:39:9d:a7:30:
         69:be:82:31:e9:5d:40:83:16:d1:43:da:04:99:1b:77:fd:4e:
         fd:41:a6:a5:70:9e:56:c4:d6:63:c3:fe:ea:11:7a:c5:46:be:
         29:61:e3:47:e2:5d:84:94:51:6c:8f:bb:df:2b:b7:7f:74:4c:
         3b:9b:ed:49:da:3e:c4:38:c9:09:d0:4d:38:50:22:c2:d1:67:
         4a:6c:41:fc:ef:87:bd:70:20:1b:57:ea:b7:64:10:7b:75:9d:
         b1:ac:c6:c7:37:c4:e3:74:34:b7:10:f4:13:d2:fb:53:10:31:
         b8:9a:08:83:1e:66:d4:c3:91:d3:50:a7:1b:ae:b6:9f:d5:3d:
         5e:1a:5a:db:3a:5a:be:c7:bb:85:b1:74:60:8f:4f:12:b5:1f:
         e2:a8:af:5b:bc:5b:5f:88:a1:48:de:37:d9:12:ac:cd:00:8b:
         ea:fc:5a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org