Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138382e302f32342d3234203d3e20323633333338.roa
File:                     3139312e33362e3138382e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          P6mV3vbyqo0OQWY3oSvkdLxbb3/SOerPyOSJG1e46e4=
Subject key identifier:   04:FC:FF:E9:EB:F3:B2:59:74:B2:C1:E1:49:84:4F:A7:23:9F:EB:9A
Certificate issuer:       /CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
Certificate serial:       19378ECA8890595AEC17609F8C556E4788314726
Authority key identifier: B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138382e302f32342d3234203d3e20323633333338.roa
Signing time:             Tue 16 Apr 2024 11:41:47 +0000
ROA not before:           Tue 16 Apr 2024 11:36:47 +0000
ROA not after:            Tue 15 Apr 2025 11:41:47 +0000
asID:                     263338
IP address blocks:        191.36.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:37:8e:ca:88:90:59:5a:ec:17:60:9f:8c:55:6e:47:88:31:47:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
        Validity
            Not Before: Apr 16 11:36:47 2024 GMT
            Not After : Apr 15 11:41:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:6d:83:32:f6:d6:1e:f3:3a:2f:4e:4b:7f:
                    b8:01:e8:19:7d:06:db:a4:3a:8e:2e:35:d1:45:63:
                    97:19:06:82:5a:e2:93:c0:a2:0d:ef:96:dc:eb:be:
                    6f:df:26:c5:5f:11:42:35:c1:c1:5e:08:9b:d2:37:
                    3d:99:3f:bc:14:c8:7c:7c:73:3d:c9:75:ba:60:d9:
                    cb:1d:37:5a:e6:95:c9:93:7a:47:20:66:57:9d:bd:
                    cb:81:cf:35:8a:2c:c9:07:b2:f1:ab:a0:d6:cd:3c:
                    85:bc:9b:c0:a0:2a:04:d1:7d:83:a0:b6:8c:68:5a:
                    6b:c6:d1:86:5b:f3:2c:48:b2:d5:1a:e4:7a:7f:1e:
                    40:76:e2:0f:76:d2:48:3d:c2:d5:3b:4f:4a:42:14:
                    fe:e6:44:c1:cd:97:69:23:b0:c5:ed:77:72:bc:4e:
                    03:13:29:6d:79:47:7d:63:b0:cf:8e:d9:fc:90:fd:
                    4e:6a:27:27:7f:0f:07:b0:9b:b2:2d:ab:10:c9:9d:
                    96:62:2e:25:54:10:7f:fc:fb:54:48:13:fd:ad:aa:
                    75:00:3d:62:13:b9:4b:39:40:c6:ff:26:2d:bf:fe:
                    97:fe:ea:0f:b8:47:c8:d3:58:ed:30:27:35:b1:51:
                    2d:c4:c5:eb:45:0e:c5:77:9d:7c:23:a9:d9:e6:0a:
                    2a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FC:FF:E9:EB:F3:B2:59:74:B2:C1:E1:49:84:4F:A7:23:9F:EB:9A
            X509v3 Authority Key Identifier:
                keyid:B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138382e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:20:09:0a:cd:93:1b:f0:84:4a:eb:bf:61:d8:f0:f5:cb:4b:
         d7:61:8c:c2:6c:4b:cb:ee:f2:cc:a2:4f:3f:1f:ee:8d:d2:3c:
         f2:88:18:83:c5:23:d2:7a:53:c5:a9:ee:ed:77:e9:c5:3d:9b:
         98:87:d8:8b:e0:15:fd:13:5a:42:30:cf:22:c1:d6:6e:51:c6:
         77:7c:12:2e:e7:63:40:b7:c0:e3:cc:ae:86:13:66:2a:7b:1c:
         55:e1:2b:ec:01:6d:79:ff:b7:c6:db:b3:27:21:8c:b3:60:e8:
         cf:6b:da:9e:54:63:1a:49:a3:e9:be:03:e5:bb:6c:b2:a5:e1:
         1e:97:95:fc:48:29:30:d0:8e:48:55:86:ce:ff:3d:36:26:a9:
         cf:15:e8:cc:12:59:ac:e7:30:c2:ca:a3:29:5d:92:b8:c9:8c:
         02:c4:5c:b8:c3:c6:b8:a6:1c:1d:07:d7:e2:b5:0b:07:c8:3b:
         8f:ba:df:e5:37:05:c6:14:3e:06:3d:75:25:d9:1e:04:d1:70:
         b8:e6:77:55:0d:20:9c:35:e2:b4:fe:6b:92:f1:73:da:c0:ac:
         30:9b:34:5f:ae:4d:29:ec:ff:10:66:c4:43:c1:ed:4f:a0:7f:
         ae:65:30:6c:19:f7:c0:49:1f:9f:fe:8c:7c:1e:f5:55:bf:71:
         dc:47:61:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org