Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138342e302f32342d3234203d3e20323633333338.roa
File:                     3139312e33362e3138342e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          2CcMUB489qI30zHd2WFVnF7PxyLesDKBQhlYkk47/zM=
Subject key identifier:   3B:00:CB:40:D8:7C:66:C8:09:59:AF:8B:61:9F:9F:A6:46:00:93:91
Certificate issuer:       /CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
Certificate serial:       1B6E672230B2DFEEA62A5DA01FBAF3C44BE1F54D
Authority key identifier: B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138342e302f32342d3234203d3e20323633333338.roa
Signing time:             Tue 16 Apr 2024 11:41:46 +0000
ROA not before:           Tue 16 Apr 2024 11:36:46 +0000
ROA not after:            Tue 15 Apr 2025 11:41:46 +0000
asID:                     263338
IP address blocks:        191.36.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6e:67:22:30:b2:df:ee:a6:2a:5d:a0:1f:ba:f3:c4:4b:e1:f5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
        Validity
            Not Before: Apr 16 11:36:46 2024 GMT
            Not After : Apr 15 11:41:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:5e:a0:cf:aa:82:8f:c6:4e:13:79:f2:ff:
                    aa:79:72:42:56:5e:38:e0:b3:8b:c9:98:4c:a2:cf:
                    29:5e:6c:6c:9f:6e:5a:2c:33:57:44:5c:b9:16:3d:
                    f3:b6:75:69:94:a7:71:50:93:ef:8f:54:5e:fe:d6:
                    c2:a3:e6:34:ba:e8:7d:99:ec:23:42:44:a8:ee:57:
                    3d:0a:01:3a:0e:b9:b6:60:55:d3:bc:5f:7e:48:71:
                    16:b0:d7:7d:73:6f:00:a3:04:a8:0b:1a:95:18:e9:
                    9d:e0:84:a4:20:65:32:66:59:d9:2b:82:30:f8:0c:
                    57:2e:73:ad:7b:b1:07:99:43:de:58:d9:38:06:ac:
                    ca:ef:14:8c:43:69:be:ec:99:0f:07:b7:b8:b1:01:
                    ec:7c:6a:2e:2d:d7:9e:89:85:02:14:c5:25:61:60:
                    74:a9:5e:73:9a:b2:98:d7:0d:6b:6d:14:be:0e:a6:
                    83:32:29:d4:64:1f:6a:a8:6e:c4:e5:1b:64:ce:8e:
                    a6:07:3f:09:1e:32:06:91:93:e8:a1:1f:0f:5f:99:
                    da:d7:a8:63:ee:cc:fc:51:61:8b:80:31:5e:c4:2b:
                    04:e4:5e:f1:21:f6:c5:a3:a9:9e:a0:63:fe:b4:93:
                    fa:6f:d6:b0:ab:e9:f6:45:46:02:0c:e1:8e:d0:d8:
                    97:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:00:CB:40:D8:7C:66:C8:09:59:AF:8B:61:9F:9F:A6:46:00:93:91
            X509v3 Authority Key Identifier:
                keyid:B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138342e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:de:03:74:5d:9b:6c:ab:66:40:35:78:cb:f6:40:87:90:bc:
         39:d6:43:58:32:34:72:f6:d4:8e:03:91:6d:6d:07:d8:98:00:
         ee:b8:21:3d:15:d0:38:9d:26:35:c9:b8:58:f8:b6:a7:89:d4:
         0e:65:fd:ec:eb:96:c6:06:cb:1d:8f:69:94:ba:b8:cf:9e:76:
         ed:f2:f5:80:6b:b8:09:16:5d:d2:ae:7d:17:e7:a9:4c:2c:a1:
         a2:74:1f:7f:ee:ab:90:60:0a:ec:be:7b:26:02:ba:cb:8a:dc:
         a8:57:62:91:39:78:50:45:66:ad:1d:e1:ae:e7:60:8d:f8:ac:
         c1:39:95:d9:d0:3d:54:91:60:4c:da:77:66:67:e4:d6:93:d4:
         c9:f2:a8:8c:f5:02:7b:1f:5e:f4:ed:4a:29:1b:48:cb:8f:05:
         5d:4d:a1:0c:ee:dd:ae:d2:f4:a2:cd:05:2d:a5:05:9d:41:37:
         48:8d:51:75:77:fd:46:0c:08:be:af:2e:a8:c4:22:7c:4b:96:
         74:b2:8e:fe:63:b7:32:23:29:8a:e7:dd:fe:45:6d:f6:02:09:
         e1:fc:26:02:a5:8c:f2:2a:b8:c4:9f:1e:5d:ca:89:b8:db:97:
         17:92:7e:87:ec:85:3b:15:62:43:8a:32:6d:08:5b:25:52:52:
         fd:5f:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org