Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3235322e302f32322d3232203d3e20323633343231.roa
File:                     3137392e3139312e3235322e302f32322d3232203d3e20323633343231.roa (raw, json)
Hash identifier:          ZArO78STLFrxgJGlcn0GzhEvG+rRTMH8Omr/wDrbYNY=
Subject key identifier:   B3:A5:53:1F:6B:E0:4E:5B:41:01:2D:E2:33:83:BA:C1:4E:39:A8:1D
Certificate issuer:       /CN=411194BD84722FD252C79F3307A7C3ACFDC84782
Certificate serial:       4C1FB8DEB24A41CDAC7B8F5EB18F8B37CAD8639D
Authority key identifier: 41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3235322e302f32322d3232203d3e20323633343231.roa
Signing time:             Thu 13 Apr 2023 20:21:49 +0000
ROA not before:           Thu 13 Apr 2023 20:16:49 +0000
ROA not after:            Thu 11 Apr 2024 20:21:49 +0000
asID:                     263421
IP address blocks:        179.191.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1f:b8:de:b2:4a:41:cd:ac:7b:8f:5e:b1:8f:8b:37:ca:d8:63:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411194BD84722FD252C79F3307A7C3ACFDC84782
        Validity
            Not Before: Apr 13 20:16:49 2023 GMT
            Not After : Apr 11 20:21:49 2024 GMT
        Subject: CN=B3A5531F6BE04E5B41012DE23383BAC14E39A81D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:76:d3:09:b8:db:13:51:22:b9:03:2b:c6:
                    40:16:84:05:86:f4:be:8a:72:5d:32:db:0b:00:1a:
                    a4:47:af:aa:ce:f2:52:d5:16:b5:00:6a:9d:8c:3b:
                    61:90:5d:3d:8b:42:31:4f:3b:f6:f9:6f:da:ae:87:
                    65:9c:85:aa:e3:d8:32:ff:4a:22:09:83:be:97:95:
                    54:24:12:4b:62:dd:52:11:8e:47:2d:12:f7:40:c9:
                    55:e0:95:f2:31:68:cc:66:17:9e:a1:03:b5:4e:76:
                    2d:5e:91:47:5f:fe:d4:1a:1b:19:2a:26:c5:ea:e8:
                    6d:60:56:f5:b8:ad:75:d9:da:43:5a:60:e6:40:5d:
                    23:71:78:5b:57:b7:b2:23:c8:2d:52:d2:f3:fb:97:
                    38:8d:f4:f3:98:92:43:ee:32:cc:e8:8f:9c:99:c4:
                    96:2e:29:b8:fb:82:41:8f:a9:52:26:60:c7:db:26:
                    73:58:82:89:1f:51:4c:21:d6:c8:6e:cc:27:9a:5b:
                    28:ab:75:c1:4d:7b:24:e4:95:76:1a:fc:c0:cb:e8:
                    7d:fa:14:e7:fd:45:d5:f8:3d:01:0f:95:ba:97:93:
                    0f:48:7f:a4:22:be:bc:cc:0b:de:24:0b:70:1f:e1:
                    8e:0a:e5:36:ca:d0:ba:35:24:80:81:15:ca:f0:bf:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A5:53:1F:6B:E0:4E:5B:41:01:2D:E2:33:83:BA:C1:4E:39:A8:1D
            X509v3 Authority Key Identifier:
                keyid:41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/411194BD84722FD252C79F3307A7C3ACFDC84782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3235322e302f32322d3232203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:0b:67:ce:08:99:fa:fe:77:aa:b3:f6:cf:0b:57:e2:c6:11:
         fb:8e:b4:ca:9c:77:bc:35:de:b0:19:b0:c5:a6:aa:dd:47:f5:
         f6:55:86:c0:de:d9:97:6e:ce:4c:87:62:03:b5:9e:1b:a3:85:
         98:f7:ab:4c:80:23:67:a6:78:57:44:dd:a4:cf:5e:cf:34:55:
         cf:16:a2:71:e3:53:83:c0:19:68:e9:2f:3c:ff:97:4e:a0:5d:
         4d:3f:53:9a:2a:b5:cb:d5:00:82:da:33:0a:ed:7b:89:36:6a:
         96:0e:07:2e:8e:06:98:1d:b5:9b:f9:e0:1a:4e:0b:be:5b:80:
         0c:e1:d2:85:13:c4:ba:eb:0d:73:5c:a5:46:2c:3c:b0:39:f0:
         19:f1:87:86:e0:d8:9b:4e:5f:20:0d:61:f2:b6:67:72:6b:48:
         e1:c3:73:f8:21:52:0f:58:cb:63:97:46:25:0e:e9:0a:46:de:
         55:f4:f5:0e:96:7b:0a:c7:4a:4c:91:d2:5b:18:d9:da:22:f9:
         c0:b4:e5:2d:e5:03:bf:98:fa:87:a0:83:b5:61:9c:3e:03:55:
         e6:33:70:0e:d1:3d:74:88:f1:b6:3c:60:de:bc:bb:3e:27:5b:
         9d:4f:4b:d0:37:e5:c5:05:91:df:3f:37:65:4c:ca:13:67:37:
         9e:9f:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org