Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138372e302f32342d3234203d3e20323633333338.roa
File:                     3139312e33362e3138372e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          M/y7uzsqWQpZSAc4b4W7tXGba97TkeSCmBa+trzabHE=
Subject key identifier:   13:98:12:20:99:CC:56:81:1D:8D:A9:EC:3D:DF:86:80:65:8D:A1:FD
Certificate issuer:       /CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
Certificate serial:       6CE7D82FED7BA388567ED15D1C78BD61F433CE3C
Authority key identifier: B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138372e302f32342d3234203d3e20323633333338.roa
Signing time:             Tue 16 Apr 2024 11:41:47 +0000
ROA not before:           Tue 16 Apr 2024 11:36:47 +0000
ROA not after:            Tue 15 Apr 2025 11:41:47 +0000
asID:                     263338
IP address blocks:        191.36.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e7:d8:2f:ed:7b:a3:88:56:7e:d1:5d:1c:78:bd:61:f4:33:ce:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
        Validity
            Not Before: Apr 16 11:36:47 2024 GMT
            Not After : Apr 15 11:41:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:2e:3a:ed:2e:65:e3:91:30:52:23:0c:7e:
                    f6:22:8e:e0:4b:a6:d0:63:03:91:86:8a:c6:b3:c3:
                    d4:59:d4:f5:86:01:ac:f5:9b:97:d8:5b:14:58:14:
                    d7:f6:6f:af:0b:b5:0c:75:19:ce:c8:fc:ac:37:e9:
                    b1:4b:7b:ef:72:a9:dd:2d:83:39:41:7d:38:01:e1:
                    0a:36:cb:cb:11:4d:35:20:6a:b0:1b:78:f7:a3:e0:
                    a7:84:66:2a:b5:36:82:38:6b:5c:b7:5e:ad:99:d8:
                    8e:8d:22:85:5f:b0:e1:df:d5:b0:40:2c:02:bb:7a:
                    30:8b:b1:ef:57:60:ba:cb:f7:7e:30:e6:f9:f3:98:
                    b4:13:a8:db:4c:55:4a:67:bd:4a:2c:51:a0:ae:a9:
                    f4:05:1f:7e:77:1b:b0:69:5b:88:1a:95:59:e7:af:
                    53:ce:9a:0d:12:7a:71:ac:18:ed:f1:63:12:bc:c3:
                    9a:9e:04:09:a3:ed:16:71:eb:0a:eb:20:ae:3e:2f:
                    d7:9b:f1:b3:42:96:f4:2a:aa:78:0a:7c:81:42:2a:
                    22:5b:c9:60:79:66:d2:37:f1:3c:e2:ae:00:ed:df:
                    bc:76:91:4e:53:3a:ab:79:02:55:f3:71:3f:62:55:
                    df:b9:d4:21:60:07:c9:7a:f8:c2:2f:8a:b8:12:a5:
                    b6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:98:12:20:99:CC:56:81:1D:8D:A9:EC:3D:DF:86:80:65:8D:A1:FD
            X509v3 Authority Key Identifier:
                keyid:B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138372e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:bc:82:ec:66:02:a2:e5:92:85:d0:c6:1f:df:18:d7:b3:39:
         4e:1d:04:f4:ac:09:b5:15:a0:bf:16:3f:16:bc:ec:82:e0:63:
         09:ef:90:6f:b4:13:35:9e:58:0e:b2:34:20:c2:a0:42:bd:ef:
         b8:03:31:57:f0:19:4f:ed:9a:a2:56:64:9e:0d:17:d5:a9:a0:
         08:21:e5:2d:a1:7a:ae:9d:68:c6:d6:74:d6:05:9e:db:5b:69:
         79:8d:99:58:4b:a9:67:a7:21:61:76:16:1a:ba:4e:de:20:a9:
         17:f8:d7:9c:cf:8a:05:fa:b6:c6:a2:be:5b:36:64:bf:51:7b:
         ea:c6:3d:71:7f:43:2a:6f:75:43:69:d6:bc:e0:e0:79:5b:0a:
         5a:b8:7f:df:3d:38:2f:b4:eb:6e:01:a0:82:eb:b2:ca:41:d7:
         50:4e:95:6e:f5:fe:7a:81:36:67:fc:c5:52:b0:f0:11:e9:d9:
         6b:74:4b:64:cb:ab:99:85:63:eb:f8:a2:ae:82:4d:fe:c7:c0:
         6c:5e:85:f5:ea:b6:67:7c:c3:e0:f4:b7:e9:39:f9:74:e6:fc:
         b5:18:f0:ad:7e:36:bb:1f:23:6f:8e:65:9e:eb:00:66:68:a4:
         51:d5:77:e9:f8:13:27:dd:ac:4d:d4:92:11:85:5e:b1:29:39:
         c0:c0:f8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org