Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138362e302f32342d3234203d3e20323633333338.roa
File:                     3139312e33362e3138362e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          MKq+JYtG4gWqqPs37eLvshGkYudCfdLsdpJGxJIpEgA=
Subject key identifier:   31:B5:BD:DA:F2:B9:5C:59:30:CE:5F:25:EE:31:5D:4C:E3:FE:4F:5F
Certificate issuer:       /CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
Certificate serial:       7894F5F01D6505A366CBEF927A5649A417778F1C
Authority key identifier: B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138362e302f32342d3234203d3e20323633333338.roa
Signing time:             Tue 16 Apr 2024 11:41:47 +0000
ROA not before:           Tue 16 Apr 2024 11:36:47 +0000
ROA not after:            Tue 15 Apr 2025 11:41:47 +0000
asID:                     263338
IP address blocks:        191.36.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:94:f5:f0:1d:65:05:a3:66:cb:ef:92:7a:56:49:a4:17:77:8f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
        Validity
            Not Before: Apr 16 11:36:47 2024 GMT
            Not After : Apr 15 11:41:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:07:80:85:3d:f8:09:b9:0a:10:d8:27:53:
                    ce:75:1a:c9:3d:e6:5b:c4:78:0a:55:7e:b7:8b:6d:
                    b7:72:ba:39:3b:46:04:7c:f8:04:b5:52:25:25:98:
                    d9:a9:63:26:67:89:24:d5:d9:9b:2d:0d:2b:73:b2:
                    dc:71:a7:a2:31:27:0f:96:f6:01:bd:6c:e0:aa:bc:
                    75:80:2a:52:3e:61:e0:50:5e:55:b0:90:39:14:10:
                    13:50:4c:d6:08:86:98:51:f1:b9:68:0d:40:a9:74:
                    c3:05:26:93:1f:5f:00:58:02:a0:61:b6:b5:04:05:
                    0a:2d:90:60:93:8c:69:49:5f:d4:4d:ae:08:84:54:
                    bb:dd:77:1b:29:d1:e2:15:07:76:5e:20:a1:b6:e0:
                    74:e4:a8:c6:6c:a2:19:f2:01:d9:fd:09:82:73:a4:
                    74:de:b3:4a:1f:38:d4:e2:cc:0a:4c:23:79:d3:4a:
                    fd:ba:70:6e:31:83:18:4c:04:23:63:26:be:e2:ec:
                    56:97:49:a9:f1:12:fe:09:94:d7:13:f6:80:87:90:
                    09:76:22:c9:96:c6:04:e1:8e:70:93:bd:35:16:8b:
                    7e:4d:2f:c2:19:78:a8:b7:6e:b5:3d:33:70:28:be:
                    a2:94:64:27:2d:f6:f9:01:c8:02:a6:52:42:70:13:
                    11:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B5:BD:DA:F2:B9:5C:59:30:CE:5F:25:EE:31:5D:4C:E3:FE:4F:5F
            X509v3 Authority Key Identifier:
                keyid:B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138362e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:06:80:b0:75:05:05:82:be:e7:b7:24:3e:22:5b:42:6f:29:
         95:18:11:64:c9:95:a8:68:6c:76:ca:ab:ed:2e:af:eb:1c:07:
         62:8b:3b:50:22:05:5e:6d:b5:de:be:b9:b2:68:f7:0d:ca:7e:
         48:6e:61:db:77:a0:95:f3:48:d2:eb:ee:6e:79:23:ae:a6:ca:
         c3:fc:12:ce:cd:72:e9:e2:b8:22:85:b5:ea:d9:bd:58:ed:8c:
         21:f8:87:6c:68:62:67:3d:73:83:2e:21:7e:57:c7:ec:af:e7:
         98:e6:95:1b:aa:1c:8d:bf:f8:3e:e4:65:e0:54:41:ca:16:f1:
         1e:c0:6a:07:b2:56:03:df:cf:4e:ab:0b:32:50:88:30:d8:b4:
         eb:d0:57:a1:7a:27:cc:d3:49:b6:ef:2e:6c:40:25:9c:a4:76:
         79:b3:96:35:a1:c1:be:74:ec:d6:bd:05:20:76:54:e9:b2:f4:
         d8:5b:b0:3a:3b:da:63:00:36:9a:aa:99:b5:08:01:65:90:7a:
         f6:e3:26:07:c8:61:02:b2:17:5c:21:1e:00:a3:fd:14:46:2a:
         9e:e2:69:53:53:86:3e:15:46:aa:d7:ef:fb:8b:cc:61:ee:18:
         f9:81:f3:77:4e:3b:c2:ff:4b:35:a9:1c:d3:d0:4a:a3:cc:ea:
         8f:39:f7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org