Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138342e302f32312d3231203d3e20323633333338.roa
File:                     3139312e33362e3138342e302f32312d3231203d3e20323633333338.roa (raw, json)
Hash identifier:          ud9roRERfJyJMqYcSLlWftrK4nWzHx2VeHyFzBRI0HQ=
Subject key identifier:   12:AF:DC:40:BE:C9:EB:78:5F:3A:D4:7C:77:7B:94:78:C0:6B:D4:92
Certificate issuer:       /CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
Certificate serial:       57F56ED1D4EC08A686EEF056531959F2933074CE
Authority key identifier: B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138342e302f32312d3231203d3e20323633333338.roa
Signing time:             Tue 16 Apr 2024 11:41:48 +0000
ROA not before:           Tue 16 Apr 2024 11:36:48 +0000
ROA not after:            Tue 15 Apr 2025 11:41:48 +0000
asID:                     263338
IP address blocks:        191.36.184.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f5:6e:d1:d4:ec:08:a6:86:ee:f0:56:53:19:59:f2:93:30:74:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
        Validity
            Not Before: Apr 16 11:36:48 2024 GMT
            Not After : Apr 15 11:41:48 2025 GMT
        Subject: CN=3082010A0282010100BE82BA9F303E50FF40775BFF5D5E83F4396F132FFA2BA2E9AC740AC435079EF7A089ED91CA3112EF1775B6AB54630D80363FB14A32E1550D7CFCB1754DC6E9A7FEF233DD05337DD1C9B1E322AC40EBD06AAF5FFFFBD1B53226D444CB00A52A74FD5BCE1B040C9B980D1556B961BB0AD7BF8C7381F7BE0E948566E46A53A796FBAA52CABFC7F8D622987044CE2FCC76BB99CA9504C51C4D74BAAB7FC91BE580C7E94A13B932361A91362299839BECDE3B63A687797FF90B27197BCC3E6D903E89D37678479D6DD7D22DBB01169EBFBC89BCDB8310CD37A7497213231CBB4FC37EC47733BA78B6687E907A6A946EEDCF9809702944CE3119F3C61C3783FEB7BD870203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:ba:9f:30:3e:50:ff:40:77:5b:ff:5d:5e:
                    83:f4:39:6f:13:2f:fa:2b:a2:e9:ac:74:0a:c4:35:
                    07:9e:f7:a0:89:ed:91:ca:31:12:ef:17:75:b6:ab:
                    54:63:0d:80:36:3f:b1:4a:32:e1:55:0d:7c:fc:b1:
                    75:4d:c6:e9:a7:fe:f2:33:dd:05:33:7d:d1:c9:b1:
                    e3:22:ac:40:eb:d0:6a:af:5f:ff:fb:d1:b5:32:26:
                    d4:44:cb:00:a5:2a:74:fd:5b:ce:1b:04:0c:9b:98:
                    0d:15:56:b9:61:bb:0a:d7:bf:8c:73:81:f7:be:0e:
                    94:85:66:e4:6a:53:a7:96:fb:aa:52:ca:bf:c7:f8:
                    d6:22:98:70:44:ce:2f:cc:76:bb:99:ca:95:04:c5:
                    1c:4d:74:ba:ab:7f:c9:1b:e5:80:c7:e9:4a:13:b9:
                    32:36:1a:91:36:22:99:83:9b:ec:de:3b:63:a6:87:
                    79:7f:f9:0b:27:19:7b:cc:3e:6d:90:3e:89:d3:76:
                    78:47:9d:6d:d7:d2:2d:bb:01:16:9e:bf:bc:89:bc:
                    db:83:10:cd:37:a7:49:72:13:23:1c:bb:4f:c3:7e:
                    c4:77:33:ba:78:b6:68:7e:90:7a:6a:94:6e:ed:cf:
                    98:09:70:29:44:ce:31:19:f3:c6:1c:37:83:fe:b7:
                    bd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AF:DC:40:BE:C9:EB:78:5F:3A:D4:7C:77:7B:94:78:C0:6B:D4:92
            X509v3 Authority Key Identifier:
                keyid:B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138342e302f32312d3231203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:9c:c1:f9:19:a9:d7:00:70:bb:95:39:6e:84:2a:bf:e9:00:
         20:3f:06:72:16:46:54:e7:16:c2:26:a0:f7:a8:50:da:fd:56:
         56:a7:86:e7:40:9a:9c:af:88:4e:f1:32:95:3e:a1:aa:1d:d3:
         7d:f7:80:52:3c:fa:e4:36:c0:6a:42:9c:6f:fe:44:d0:2f:95:
         c5:4f:00:79:d1:20:09:94:c8:5c:52:a6:3a:84:6a:98:bb:c0:
         0e:7f:83:da:c6:09:ed:94:34:a9:3a:a9:ff:d6:9a:1c:53:c1:
         c8:e6:78:a9:18:fc:58:4f:bd:da:7d:85:7e:f0:c0:b7:4c:d7:
         3b:11:57:c2:96:cc:f3:59:cb:23:94:39:65:c5:14:16:73:25:
         d7:1b:f7:86:2e:a5:5f:87:5d:8b:17:8f:d5:81:90:c3:fa:e6:
         fc:7d:df:55:bd:75:d9:9d:54:83:58:05:cb:a0:d6:05:45:39:
         0c:a4:03:94:00:ad:c7:cc:ec:26:5f:cd:0b:d5:25:93:88:44:
         60:58:7b:8a:40:40:0b:93:f8:b6:dc:0b:ef:be:dd:b9:ca:44:
         d3:4f:2a:96:f3:99:a7:50:d0:f6:87:9c:d6:df:87:2c:04:14:
         01:e3:b7:a5:10:58:ad:bd:af:05:65:01:e9:bd:d1:d0:ec:e3:
         54:4c:4e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org