Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138392e302f32342d3234203d3e20323633333338.roa
File:                     3139312e33362e3138392e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          6GaFukFLxzeKRYNI/s9ug3ap8o6r8vlKUvDuCgZenGQ=
Subject key identifier:   F5:E3:A2:A8:33:50:6F:30:3D:26:7B:58:22:84:47:2B:5E:54:42:97
Certificate issuer:       /CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
Certificate serial:       2363BB31D21D3B4430F672074F5EBA57D1B94F61
Authority key identifier: B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138392e302f32342d3234203d3e20323633333338.roa
Signing time:             Tue 16 Apr 2024 11:41:48 +0000
ROA not before:           Tue 16 Apr 2024 11:36:48 +0000
ROA not after:            Tue 15 Apr 2025 11:41:48 +0000
asID:                     263338
IP address blocks:        191.36.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:63:bb:31:d2:1d:3b:44:30:f6:72:07:4f:5e:ba:57:d1:b9:4f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
        Validity
            Not Before: Apr 16 11:36:48 2024 GMT
            Not After : Apr 15 11:41:48 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:98:2d:81:1e:a7:93:00:e1:ec:d6:cf:b7:
                    a3:c3:74:48:31:9d:fa:b2:ce:ea:e3:31:de:59:4a:
                    b7:eb:6e:1c:5b:56:87:2e:47:15:ed:18:c1:7a:3c:
                    6b:6d:11:bd:46:5a:8b:c3:58:2d:34:f6:f3:c7:cf:
                    66:1a:b1:20:78:fd:3a:72:6d:b3:66:2a:8c:87:fb:
                    90:a4:d3:12:f5:32:8e:d0:13:fc:76:a9:3a:5e:ff:
                    6d:22:6e:2f:a7:db:1d:d5:cf:56:d6:ec:31:2f:21:
                    05:1e:d7:f5:6c:46:82:32:35:90:75:da:9f:1b:43:
                    36:01:07:dd:21:fe:67:61:c2:c5:22:9f:9a:c5:d6:
                    37:d9:9b:a6:b7:c9:62:1f:b2:30:22:e4:17:76:c1:
                    a4:fe:07:ea:d7:81:59:8b:b4:80:5b:bd:3b:8a:e6:
                    b9:79:d4:83:a3:80:f7:1f:e2:5b:d3:7a:d9:66:b9:
                    02:57:7c:d4:4a:5a:57:9b:f6:64:95:ea:f9:d0:a9:
                    67:ef:f3:26:30:17:e4:01:43:31:9e:ee:fc:28:0e:
                    58:48:92:c5:2e:41:3f:9f:aa:d7:56:49:13:99:30:
                    01:41:38:f7:af:fb:14:be:f6:6f:d2:25:74:4a:23:
                    c5:bc:d9:9d:27:87:df:4c:06:a7:5d:60:bd:04:d6:
                    fb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E3:A2:A8:33:50:6F:30:3D:26:7B:58:22:84:47:2B:5E:54:42:97
            X509v3 Authority Key Identifier:
                keyid:B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3138392e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:25:b9:45:de:cf:c5:99:00:57:25:36:ba:9d:70:b3:93:63:
         cb:8d:14:f6:43:d7:a9:34:da:97:74:2e:b2:ba:b6:d1:e2:d5:
         a2:6f:4c:d1:6d:49:af:26:49:44:b1:ef:91:d2:e7:7c:e2:db:
         94:6e:5e:84:0f:c1:55:16:8d:a3:a3:17:f8:d8:90:5e:f0:98:
         1b:61:02:b8:78:c0:71:25:61:c2:ae:ab:0a:66:17:36:59:05:
         0b:0a:c7:22:bf:c8:9e:61:7a:d9:5a:13:43:c5:9c:65:72:56:
         7e:4f:61:35:bd:8d:28:87:d4:09:77:89:33:81:63:9a:b6:da:
         b7:3e:c6:9c:38:db:cb:37:06:7a:f3:41:33:b9:54:2e:7b:ef:
         58:14:4c:9c:df:1f:5f:74:24:a9:00:96:a2:9b:87:25:f0:5a:
         6e:bd:23:b8:e0:5e:89:e4:8b:bb:02:8c:39:1a:c9:cc:a6:ab:
         92:bc:5c:c3:df:5a:be:5a:55:a8:10:f5:8c:30:ae:a6:64:2d:
         d6:ec:f8:98:de:7c:f4:1c:12:3a:94:29:f9:16:40:65:84:69:
         b4:15:f5:81:2f:59:23:ea:14:b4:57:5d:99:ea:e9:82:c8:32:
         2c:5a:3f:91:7b:b5:a7:f9:f0:e3:71:cb:63:d4:87:b8:34:83:
         88:07:5a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org