Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230342e302f32322d3232203d3e20323636323432.roa
File:                     3139322e3134352e3230342e302f32322d3232203d3e20323636323432.roa (raw, json)
Hash identifier:          DlOmMy0ZtIhXLJT2rQ88Nl7RjpB5zQ6gK/WhY+EzEtM=
Subject key identifier:   C8:E9:A0:F9:61:8F:02:42:9D:25:10:6B:04:DD:4C:31:BB:18:DD:D0
Certificate issuer:       /CN=1547EB99992D867A7DC9C9932309620DED3EB049
Certificate serial:       2CD921BD01F59282F5C3E4ECB80FBC7B6BA062B5
Authority key identifier: 15:47:EB:99:99:2D:86:7A:7D:C9:C9:93:23:09:62:0D:ED:3E:B0:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1547EB99992D867A7DC9C9932309620DED3EB049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230342e302f32322d3232203d3e20323636323432.roa
Signing time:             Fri 22 Mar 2024 13:07:44 +0000
ROA not before:           Fri 22 Mar 2024 13:02:44 +0000
ROA not after:            Fri 21 Mar 2025 13:07:44 +0000
asID:                     266242
IP address blocks:        192.145.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d9:21:bd:01:f5:92:82:f5:c3:e4:ec:b8:0f:bc:7b:6b:a0:62:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1547EB99992D867A7DC9C9932309620DED3EB049
        Validity
            Not Before: Mar 22 13:02:44 2024 GMT
            Not After : Mar 21 13:07:44 2025 GMT
        Subject: CN=C8E9A0F9618F02429D25106B04DD4C31BB18DDD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e5:3c:1e:68:77:66:08:76:fd:4a:1b:23:be:
                    cd:fc:3a:dd:ce:3b:a5:93:7e:ce:81:d2:6e:05:6d:
                    cd:a8:93:bf:40:7c:ab:92:cb:d7:33:da:53:11:cf:
                    f9:9a:a4:0c:fe:38:af:56:3b:0d:19:3f:67:95:27:
                    80:ce:49:ca:73:7b:b3:08:82:16:8c:6e:25:48:9f:
                    9e:15:e1:a2:f2:41:2a:f2:29:6a:a9:6a:a2:a5:85:
                    cd:72:55:0a:de:b7:1b:1c:36:00:38:39:5b:a9:51:
                    0b:8e:e2:7e:ec:f2:4c:55:16:30:f9:0e:00:dd:30:
                    c5:9f:eb:58:60:eb:af:98:da:cc:5a:dc:d6:b7:90:
                    0f:62:fa:16:2a:7e:e4:3f:a2:d2:e1:42:ef:5e:3e:
                    1f:2c:40:2a:d8:82:2f:ae:04:fb:91:1e:c1:04:79:
                    3a:8b:2a:48:dd:66:ff:ce:bd:57:8d:dc:4c:59:39:
                    06:fd:dc:3f:45:ef:61:47:d1:a1:82:de:9b:a8:a9:
                    45:f3:dc:cc:57:81:16:85:66:92:82:b1:4d:fc:c0:
                    1f:f0:d3:2a:8d:1c:9e:00:63:4f:87:0c:95:c9:89:
                    51:84:c0:3e:fa:54:61:98:a0:45:c9:04:2b:95:dc:
                    06:f8:6a:df:12:dd:4a:fc:97:18:7c:1e:fc:57:c1:
                    64:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E9:A0:F9:61:8F:02:42:9D:25:10:6B:04:DD:4C:31:BB:18:DD:D0
            X509v3 Authority Key Identifier:
                keyid:15:47:EB:99:99:2D:86:7A:7D:C9:C9:93:23:09:62:0D:ED:3E:B0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/1547EB99992D867A7DC9C9932309620DED3EB049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1547EB99992D867A7DC9C9932309620DED3EB049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230342e302f32322d3232203d3e20323636323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:2d:8c:cc:2e:f9:a1:fd:36:7d:95:ab:ac:48:28:3e:d3:6a:
         06:e2:97:4a:98:a2:6b:c4:26:d1:af:09:0d:61:de:e5:40:19:
         f1:ea:3e:65:f7:b9:fa:a6:5a:0d:31:33:42:ca:21:03:78:89:
         de:30:10:78:03:2b:7a:7f:d3:70:f5:a3:75:0f:f0:b9:1d:95:
         40:ce:b7:32:5b:7c:55:84:ff:1d:9f:2a:43:1d:13:05:fb:ed:
         1d:bd:05:7b:73:9d:1f:25:d2:21:23:d9:2c:94:09:db:22:0d:
         67:4a:6a:18:29:1f:bb:46:05:e7:18:e0:21:ef:aa:39:a8:fb:
         74:14:8a:fa:82:90:62:ac:33:80:fa:81:f5:7e:96:d8:c7:0a:
         9a:b9:06:ab:a2:0d:6c:bb:cf:bd:8b:93:86:27:23:ca:d5:17:
         ea:58:1e:d2:2a:66:0e:f6:4c:a2:01:8f:05:05:43:bb:fe:64:
         7b:9e:65:dd:32:2d:16:75:63:cb:a8:d5:82:d5:9d:25:82:dd:
         e0:9e:b6:9a:da:81:af:0a:ad:23:c6:0a:dc:3c:f8:a0:b7:64:
         06:12:49:41:c7:88:4f:37:24:1d:eb:f4:da:67:5c:f9:80:21:
         1d:e8:a8:98:18:8d:eb:49:ea:30:4a:b5:c5:19:57:8e:e9:c3:
         0f:1d:b3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org