Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/1/3139312e33372e3135322e302f32312d3234203d3e20323633333632.roa
File:                     3139312e33372e3135322e302f32312d3234203d3e20323633333632.roa (raw, json)
Hash identifier:          ronESpmD9tqSVVTnMPJzaCFDJMUkdzn0TDX061kg8Yk=
Subject key identifier:   15:6F:2E:58:A3:DA:E9:55:58:1C:57:66:76:42:54:ED:00:85:F0:D5
Certificate issuer:       /CN=B19C21AC721BDBA8D3EEC4A70A33FB778A8414F6
Certificate serial:       1AE0BB753F842A7AB29A742E0EA68D52C1738449
Authority key identifier: B1:9C:21:AC:72:1B:DB:A8:D3:EE:C4:A7:0A:33:FB:77:8A:84:14:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B19C21AC721BDBA8D3EEC4A70A33FB778A8414F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/1/3139312e33372e3135322e302f32312d3234203d3e20323633333632.roa
Signing time:             Wed 03 Apr 2024 22:38:58 +0000
ROA not before:           Wed 03 Apr 2024 22:33:58 +0000
ROA not after:            Wed 02 Apr 2025 22:38:58 +0000
asID:                     263362
IP address blocks:        191.37.152.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e0:bb:75:3f:84:2a:7a:b2:9a:74:2e:0e:a6:8d:52:c1:73:84:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19C21AC721BDBA8D3EEC4A70A33FB778A8414F6
        Validity
            Not Before: Apr  3 22:33:58 2024 GMT
            Not After : Apr  2 22:38:58 2025 GMT
        Subject: CN=156F2E58A3DAE955581C5766764254ED0085F0D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:b5:68:fe:5f:7f:f1:b4:8e:7f:07:78:3b:
                    ff:52:f6:0d:a7:f7:85:cc:84:cd:8c:78:c2:aa:94:
                    07:64:e4:57:84:08:48:65:34:e0:64:70:3f:fe:75:
                    0b:7d:0d:e2:f4:5a:0d:4e:fa:d6:27:20:9e:b9:c1:
                    04:34:61:da:60:7d:79:76:09:3f:a5:59:36:88:80:
                    30:28:af:ae:ef:b9:15:e3:5b:d2:fe:b8:88:42:6c:
                    f7:25:35:b1:c1:66:28:e9:bd:31:51:d5:6a:da:80:
                    09:59:b3:3c:ab:52:48:22:01:31:9c:ad:28:07:82:
                    6f:56:44:39:f7:ee:85:b4:9b:76:1e:3a:ba:0a:fe:
                    0d:38:a5:3d:8d:26:02:c1:6c:ba:2c:20:75:23:96:
                    7d:8a:8a:cd:df:6e:d8:77:94:53:4a:18:d9:2f:4d:
                    1d:48:2e:27:df:45:74:1d:86:bd:f0:47:f9:be:d4:
                    2f:b1:0e:46:82:88:f7:50:e8:a5:64:18:a4:9d:02:
                    2a:bf:db:62:23:41:c7:29:74:81:e6:9f:d5:ab:d4:
                    78:f2:9b:c9:09:c3:42:62:ab:bd:2f:62:03:92:17:
                    1b:40:29:ac:9d:a9:da:2d:cb:92:da:65:fd:ab:92:
                    33:39:21:c8:f5:0c:21:a9:0b:d8:76:14:ad:c1:76:
                    59:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6F:2E:58:A3:DA:E9:55:58:1C:57:66:76:42:54:ED:00:85:F0:D5
            X509v3 Authority Key Identifier:
                keyid:B1:9C:21:AC:72:1B:DB:A8:D3:EE:C4:A7:0A:33:FB:77:8A:84:14:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/1/B19C21AC721BDBA8D3EEC4A70A33FB778A8414F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B19C21AC721BDBA8D3EEC4A70A33FB778A8414F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/1/3139312e33372e3135322e302f32312d3234203d3e20323633333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d8:b6:9a:22:dd:ea:22:03:15:8b:24:07:bc:0e:51:75:80:c4:
         3f:49:6d:89:57:17:e2:8a:08:ea:d5:9c:22:de:3b:3f:35:31:
         54:1c:19:61:9c:39:07:2a:b2:89:c3:47:80:8e:c5:e2:65:95:
         c4:17:9c:81:19:bd:0c:bc:b0:d4:88:08:c8:d2:57:60:e3:f5:
         91:a2:cf:78:86:a3:8a:07:77:aa:5c:87:83:2b:77:b0:2f:7f:
         be:02:34:4b:76:f4:a5:cb:eb:53:4c:52:76:a1:56:83:79:11:
         29:a7:b3:76:6f:0f:96:66:27:23:9b:a1:39:0c:74:35:dc:1c:
         79:25:8e:91:a1:1a:17:8c:b6:1a:6f:d0:24:c8:77:c7:6e:c3:
         b5:fb:ad:8d:02:15:db:14:dc:3d:7f:10:46:b8:ec:58:63:14:
         5a:63:23:07:b1:3b:65:a2:a4:c4:74:95:08:31:4b:f1:a0:fc:
         2e:49:d6:38:4e:14:9d:26:dc:50:6b:7a:5d:ef:1d:09:8d:99:
         df:da:4a:6e:07:d1:18:a4:d3:bf:c7:f2:3b:b9:45:f1:4f:53:
         49:60:04:88:78:d6:1a:0b:ca:77:aa:c9:c6:8d:41:6a:6f:88:
         27:50:1b:4d:ac:d1:d3:ae:fe:36:78:65:55:08:28:cf:ce:4b:
         4c:1b:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org