Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3139312e302f32342d3234203d3e20323633333338.roa
File:                     3139312e33362e3139312e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          Ozqvqs0mDkCenjwnsmDjDS5I7KmGbBLme8J6282vGH4=
Subject key identifier:   FE:A5:46:9A:33:39:AC:50:61:46:BF:43:77:34:66:62:4B:14:54:01
Certificate issuer:       /CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
Certificate serial:       74970459C04E20A66ED26D6FFA750EEE04618846
Authority key identifier: B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3139312e302f32342d3234203d3e20323633333338.roa
Signing time:             Tue 16 Apr 2024 11:41:48 +0000
ROA not before:           Tue 16 Apr 2024 11:36:48 +0000
ROA not after:            Tue 15 Apr 2025 11:41:48 +0000
asID:                     263338
IP address blocks:        191.36.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:97:04:59:c0:4e:20:a6:6e:d2:6d:6f:fa:75:0e:ee:04:61:88:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DAAD32AAB94FC40A18437F7F452BF3069B37A8
        Validity
            Not Before: Apr 16 11:36:48 2024 GMT
            Not After : Apr 15 11:41:48 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:ce:55:57:66:84:0c:6d:9a:ec:2b:71:60:
                    4e:fd:be:da:ed:f5:c0:6b:74:bf:54:4b:0c:71:51:
                    0b:4f:bd:db:4e:92:56:45:93:60:0a:cf:f0:6f:c6:
                    fb:5a:9c:fa:39:48:67:08:63:b7:6b:ca:af:fd:e7:
                    a7:2a:35:5a:2e:71:66:bb:fc:d8:e8:55:2a:29:a4:
                    5d:13:8c:fc:52:41:2a:ac:72:07:5f:29:b8:9e:92:
                    3c:93:fc:fe:5b:09:af:ee:79:eb:37:8c:e4:e4:a5:
                    45:8c:a6:10:91:a8:41:be:27:e0:a3:ea:2a:1f:99:
                    d4:5f:2c:0f:cd:ae:09:41:bf:4e:fa:66:fe:65:62:
                    10:ff:fd:45:21:80:43:1a:c4:ad:da:dc:95:b4:59:
                    d3:04:15:ca:cb:5e:c6:e8:6e:3d:56:91:29:09:dc:
                    c2:6c:33:20:9b:a1:da:8c:43:31:5b:7b:b4:bb:31:
                    83:eb:ba:c0:ed:de:9f:bc:f4:9d:24:a2:03:a9:cf:
                    91:e3:97:51:82:71:d1:88:ab:23:bf:16:03:df:50:
                    20:a0:c2:f7:7e:0c:cb:39:fa:e4:6b:86:31:68:67:
                    ca:ce:77:32:c5:c7:df:43:04:e6:7d:4a:2e:37:8a:
                    57:07:93:11:04:c9:3b:42:47:10:a8:a8:c7:af:21:
                    f5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A5:46:9A:33:39:AC:50:61:46:BF:43:77:34:66:62:4B:14:54:01
            X509v3 Authority Key Identifier:
                keyid:B6:DA:AD:32:AA:B9:4F:C4:0A:18:43:7F:7F:45:2B:F3:06:9B:37:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DAAD32AAB94FC40A18437F7F452BF3069B37A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/1/3139312e33362e3139312e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:88:a2:f7:35:1a:b1:f7:60:9f:2f:07:6c:c6:08:ce:cd:b0:
         69:4b:07:24:74:ec:5c:18:4d:58:62:59:fb:7f:55:e7:ff:8d:
         18:28:de:29:69:1f:32:2a:77:5c:91:09:e2:84:60:8d:bf:8b:
         78:4d:3e:51:e5:8b:d3:31:1f:07:eb:98:1c:71:c7:51:02:ad:
         36:5a:6c:07:7d:ea:27:68:ea:62:ed:35:6d:15:7a:a0:0a:44:
         c7:5b:13:20:37:4a:aa:8c:ed:ef:5a:e7:0e:12:15:5c:30:89:
         83:b7:05:d0:8b:bf:98:bb:27:2c:52:1a:cc:69:14:29:1c:23:
         46:9a:0b:22:28:1e:fa:5a:30:a1:02:09:08:9e:92:89:e9:4f:
         96:09:b3:d0:22:4b:3c:5a:ea:a1:d6:9d:91:16:9f:7b:35:86:
         23:db:a0:94:1a:af:73:81:94:50:92:34:9c:0a:f2:a9:14:aa:
         8c:bb:b1:02:d7:03:60:69:d3:10:7a:b6:93:c5:b1:65:37:23:
         b6:f2:0b:78:81:31:1d:14:6d:1b:90:47:99:4b:5e:25:a4:ec:
         94:2f:34:29:87:8f:64:1b:0f:3d:12:0d:a1:73:bc:fc:cf:d8:
         53:87:5d:0c:03:bb:9d:07:f8:20:ca:9c:e1:f6:7f:d8:66:f5:
         86:9b:42:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org