Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234322e302f32332d3233203d3e20323633343231.roa
File:                     3137392e3139312e3234322e302f32332d3233203d3e20323633343231.roa (raw, json)
Hash identifier:          EPcsFcA8F02ZzR24UnP4BwhBwl0DN0Yy38WKPyX48Rg=
Subject key identifier:   01:D9:75:35:0E:B7:0E:04:CA:C2:12:52:94:B6:DB:80:BD:AB:F3:DB
Certificate issuer:       /CN=411194BD84722FD252C79F3307A7C3ACFDC84782
Certificate serial:       58B85BC5755AB6EDE436C511E1D4DF9EEAE12233
Authority key identifier: 41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234322e302f32332d3233203d3e20323633343231.roa
Signing time:             Thu 13 Apr 2023 20:21:46 +0000
ROA not before:           Thu 13 Apr 2023 20:16:46 +0000
ROA not after:            Thu 11 Apr 2024 20:21:46 +0000
asID:                     263421
IP address blocks:        179.191.242.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b8:5b:c5:75:5a:b6:ed:e4:36:c5:11:e1:d4:df:9e:ea:e1:22:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411194BD84722FD252C79F3307A7C3ACFDC84782
        Validity
            Not Before: Apr 13 20:16:46 2023 GMT
            Not After : Apr 11 20:21:46 2024 GMT
        Subject: CN=01D975350EB70E04CAC2125294B6DB80BDABF3DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:ac:8e:b6:74:85:01:b9:17:63:c0:7e:2c:
                    ce:0a:78:dc:e9:31:69:ed:57:43:b9:e7:0a:58:3f:
                    64:77:67:0b:ed:ec:23:41:dc:46:fa:3d:02:ef:5a:
                    b7:41:a3:86:d1:65:20:aa:23:47:a4:dc:bf:fb:7a:
                    db:89:28:f0:d0:f5:fc:12:14:0a:dc:5b:0b:15:75:
                    0d:22:17:65:a1:48:4c:5b:e6:70:6c:36:b4:7a:29:
                    f1:f8:13:ab:fc:8e:42:90:ec:10:3b:f3:0e:fe:e8:
                    44:89:13:a7:1c:dd:83:36:45:71:be:ec:84:72:1e:
                    a3:de:e8:76:6d:24:44:78:88:dc:53:3d:12:8b:ba:
                    06:ed:3a:96:ca:87:9e:9f:e9:70:09:ee:bc:f3:d2:
                    8e:98:d0:d5:40:80:87:1c:3e:f8:ba:57:2a:94:49:
                    06:44:82:0b:6a:3f:be:5c:7f:4c:db:d2:6b:16:c1:
                    ec:24:35:92:79:43:62:a8:46:e0:ef:e3:e2:bd:9f:
                    dc:c3:c0:ed:6e:65:56:53:ed:c6:70:43:24:40:ce:
                    58:b3:ee:4a:de:76:d5:42:61:c1:84:55:38:43:07:
                    cf:2c:ab:19:64:17:ac:35:ee:c5:cb:89:72:d0:bb:
                    7b:4a:37:62:e1:d7:53:3e:2f:e8:73:d4:d6:c4:fb:
                    d6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D9:75:35:0E:B7:0E:04:CA:C2:12:52:94:B6:DB:80:BD:AB:F3:DB
            X509v3 Authority Key Identifier:
                keyid:41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/411194BD84722FD252C79F3307A7C3ACFDC84782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234322e302f32332d3233203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:2c:c3:95:c5:8b:bc:f0:f9:c3:59:1a:f0:0c:42:f9:f2:ba:
         94:4b:f2:98:70:66:6e:6b:81:5b:58:28:13:2c:42:4f:9f:12:
         fe:71:b9:9f:97:54:16:81:d1:3d:06:40:f4:64:42:37:8d:90:
         56:9f:1d:cb:40:48:d0:0d:50:ae:fe:e1:c7:e1:ce:f8:aa:c8:
         f1:38:a5:fc:e3:c4:c5:e3:c2:dd:15:ec:3c:fe:d3:ed:0f:3b:
         de:f0:fa:13:bb:58:99:65:7f:fa:09:b4:4e:ae:fb:5b:d4:61:
         ce:93:16:d9:9e:1b:69:57:55:13:8f:5c:17:79:3d:12:47:87:
         9b:e2:10:79:09:46:76:3b:c0:6d:b6:26:d6:c1:7d:b8:f3:94:
         eb:df:f9:13:63:fe:c9:34:b4:fd:c9:23:93:99:0a:e8:e4:ac:
         79:32:7f:00:e5:56:0d:f6:c4:0b:7c:a2:32:9a:50:b4:9e:97:
         b5:ec:9c:26:67:4d:66:01:5c:16:c2:81:51:34:9e:b3:ab:17:
         53:74:9e:4f:d9:5e:76:f0:f2:f7:da:29:69:cf:65:e4:a1:fa:
         3a:a6:61:94:db:18:05:e9:32:08:74:bf:39:be:eb:1d:37:dc:
         d6:59:7a:a0:81:3c:73:0f:fd:3e:07:85:f2:fc:93:8c:47:f4:
         0b:71:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org