Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/3139312e362e3136342e302f32322d3234203d3e20323633313634.roa
File:                     3139312e362e3136342e302f32322d3234203d3e20323633313634.roa (raw, json)
Hash identifier:          ES9MxAf4NFtAJKQ6xF3yR9TdZ7ETgH0pXdC76v+KhaQ=
Subject key identifier:   39:24:70:34:FA:2A:65:0F:AF:90:E5:4A:CE:4C:0A:9E:0F:2A:02:51
Certificate issuer:       /CN=E0FA40C9CDFDACDD45349DCD5D0E415422D2B220
Certificate serial:       143FE4A763BB9315D35FD6ACAE187556C84CE6ED
Authority key identifier: E0:FA:40:C9:CD:FD:AC:DD:45:34:9D:CD:5D:0E:41:54:22:D2:B2:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0FA40C9CDFDACDD45349DCD5D0E415422D2B220.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/3139312e362e3136342e302f32322d3234203d3e20323633313634.roa
Signing time:             Sat 29 Apr 2023 03:00:00 +0000
ROA not before:           Sat 29 Apr 2023 02:55:00 +0000
ROA not after:            Mon 29 Apr 2024 03:00:00 +0000
asID:                     263164
IP address blocks:        191.6.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3f:e4:a7:63:bb:93:15:d3:5f:d6:ac:ae:18:75:56:c8:4c:e6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0FA40C9CDFDACDD45349DCD5D0E415422D2B220
        Validity
            Not Before: Apr 29 02:55:00 2023 GMT
            Not After : Apr 29 03:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:c4:3f:58:4d:e4:2f:dc:cd:c9:fc:54:7e:
                    4d:eb:25:84:7c:1b:30:d2:73:c7:73:1d:b6:71:dc:
                    8d:84:a9:fb:f2:23:16:de:50:fc:08:65:87:16:54:
                    5e:4a:35:50:72:59:cd:b7:26:5d:17:06:85:54:81:
                    ba:ba:c0:03:ff:1c:49:a2:ad:75:a4:b0:7b:ef:86:
                    c5:5f:52:94:cb:09:fa:01:31:8c:6c:47:f7:be:6e:
                    60:20:d7:b4:91:06:35:16:68:8c:ef:30:01:41:9c:
                    77:23:d4:97:48:53:f1:8b:a7:d1:d8:49:8e:ef:44:
                    67:3e:84:e6:8c:47:0d:d2:6b:59:8f:12:6a:fe:35:
                    ea:18:ee:56:00:45:54:d4:25:cc:7e:48:bf:ea:33:
                    42:db:ba:2a:92:a0:96:f3:c9:bb:5d:68:85:e6:1e:
                    c3:6e:30:10:08:eb:8f:80:d7:c3:07:89:ba:5e:2b:
                    44:1c:f9:0e:43:01:65:3a:ac:c6:ca:4a:a2:f2:e0:
                    c1:7f:63:0f:35:f3:27:b8:22:6e:0d:c7:ca:be:60:
                    e0:d5:b5:d3:c0:c9:89:57:78:2d:66:cb:01:8e:37:
                    33:2f:a9:3d:1e:63:32:1b:be:ec:e7:47:b1:ac:40:
                    e5:a1:44:ba:83:95:2f:a2:14:ff:de:b5:76:6d:34:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:24:70:34:FA:2A:65:0F:AF:90:E5:4A:CE:4C:0A:9E:0F:2A:02:51
            X509v3 Authority Key Identifier:
                keyid:E0:FA:40:C9:CD:FD:AC:DD:45:34:9D:CD:5D:0E:41:54:22:D2:B2:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/E0FA40C9CDFDACDD45349DCD5D0E415422D2B220.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0FA40C9CDFDACDD45349DCD5D0E415422D2B220.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/3139312e362e3136342e302f32322d3234203d3e20323633313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:d3:e4:87:1e:3d:a8:8b:e7:96:04:52:54:00:9f:3c:fb:25:
         cb:17:c5:cc:05:b8:14:6b:7f:30:eb:7e:ff:32:73:a3:e5:58:
         85:de:e5:21:b5:d1:1e:8e:e0:81:0f:5a:e7:f5:35:da:db:f8:
         c2:d9:b0:1f:dc:14:f9:55:ef:20:b2:63:1c:9d:8e:2f:f2:4e:
         aa:56:a1:bf:6c:03:9f:b8:8a:e6:88:c7:ab:09:cd:5b:32:4b:
         07:56:49:5d:18:91:37:48:a7:a3:93:32:0a:5e:a3:9a:bb:ee:
         40:e2:a7:1f:81:40:23:e3:4f:3a:8a:42:ca:05:a7:38:40:a7:
         c1:ed:2c:a2:11:86:b3:5a:fa:90:03:6e:43:47:1c:16:93:87:
         53:73:a9:ee:c7:ab:8e:66:b8:fc:2f:57:93:2a:55:5c:e4:38:
         73:8d:69:13:cd:c5:36:98:2d:c6:0f:82:26:e3:0d:0a:b7:1e:
         88:c8:e9:ef:88:66:40:3c:56:26:10:08:80:d4:a6:52:de:5e:
         db:b7:42:27:2e:7f:58:18:10:05:6a:1f:b3:4e:cd:45:25:33:
         a4:82:ba:60:20:26:32:ce:2b:ab:5c:03:20:65:f5:fd:b0:bc:
         ee:b2:cb:93:02:93:07:92:49:68:17:4a:b0:29:68:8f:3e:10:
         13:9e:7e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org