Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3235342e302f32332d3233203d3e20323633343231.roa
File:                     3137392e3139312e3235342e302f32332d3233203d3e20323633343231.roa (raw, json)
Hash identifier:          R17LwFaT7rAsZRv+09gR5fBA5PoWsvFoHxdYF9eSOW4=
Subject key identifier:   F9:66:FF:02:79:75:D4:5E:52:BE:D4:9B:8C:6F:9F:39:F3:26:DF:FB
Certificate issuer:       /CN=0931D1331755640A551FE80CB1D2F42DAB8BDFB4
Certificate serial:       2E252CFF2CAF9E323739A8090B68A856A912D7AA
Authority key identifier: 09:31:D1:33:17:55:64:0A:55:1F:E8:0C:B1:D2:F4:2D:AB:8B:DF:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0931D1331755640A551FE80CB1D2F42DAB8BDFB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3235342e302f32332d3233203d3e20323633343231.roa
Signing time:             Wed 25 Aug 2021 13:32:39 +0000
ROA not before:           Wed 25 Aug 2021 13:27:39 +0000
ROA not after:            Wed 24 Aug 2022 13:32:39 +0000
asID:                     263421
IP address blocks:        179.191.254.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:25:2c:ff:2c:af:9e:32:37:39:a8:09:0b:68:a8:56:a9:12:d7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0931D1331755640A551FE80CB1D2F42DAB8BDFB4
        Validity
            Not Before: Aug 25 13:27:39 2021 GMT
            Not After : Aug 24 13:32:39 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:2d:65:ed:5d:88:5c:86:7c:0e:18:88:7e:
                    71:a2:be:fd:45:6d:31:8b:53:44:62:ed:a5:b8:93:
                    ca:e1:d5:5e:11:93:5b:81:d2:c3:2c:8b:26:49:bc:
                    50:98:f7:4e:de:7f:32:89:59:bc:35:38:19:10:60:
                    61:fb:91:70:d2:c5:22:02:d5:c3:0e:52:6a:b8:89:
                    2a:e2:1c:92:72:be:21:32:6b:8b:45:69:75:55:91:
                    a6:0e:ff:fb:45:f4:0a:e4:bb:e4:38:83:29:19:c3:
                    2d:ef:23:40:fb:35:2c:9d:87:e7:3b:15:f6:58:d9:
                    10:8c:0b:99:5d:6a:5d:8d:7c:d3:e5:27:64:f9:ec:
                    ba:18:de:9f:c5:34:bb:a3:3f:87:33:ea:6f:f5:29:
                    f9:5c:cd:96:80:67:bb:d8:63:b1:fe:e5:db:43:8d:
                    d4:f1:3e:65:cb:8c:e5:b3:f5:c6:52:65:43:3d:90:
                    4b:b9:ab:18:04:26:cb:36:cc:17:b2:d3:2e:37:09:
                    7e:80:f2:66:82:a8:a8:82:0e:21:a9:bb:12:04:1d:
                    e1:e4:f7:ff:59:37:8b:4c:cc:8f:b5:70:f7:aa:8f:
                    61:2f:33:18:2a:72:ff:cc:13:83:06:f8:2f:be:54:
                    1a:83:87:45:01:a4:ec:6f:63:4c:54:73:dc:8c:81:
                    82:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:66:FF:02:79:75:D4:5E:52:BE:D4:9B:8C:6F:9F:39:F3:26:DF:FB
            X509v3 Authority Key Identifier:
                keyid:09:31:D1:33:17:55:64:0A:55:1F:E8:0C:B1:D2:F4:2D:AB:8B:DF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/0931D1331755640A551FE80CB1D2F42DAB8BDFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0931D1331755640A551FE80CB1D2F42DAB8BDFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3235342e302f32332d3233203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:65:73:78:d3:ea:b1:3c:ba:85:c7:90:78:56:f9:c0:15:07:
         72:e2:23:6e:ea:ea:55:6d:da:06:88:e8:c9:92:e0:0b:92:5b:
         8c:bd:ff:37:5a:04:06:7b:b4:10:51:82:f0:22:a2:0d:48:ef:
         e7:e3:9d:30:2a:44:79:cc:75:57:63:30:cc:a1:97:6b:53:73:
         a9:ec:b5:9f:01:64:29:e6:25:69:ed:14:d5:dc:f6:6a:64:31:
         fc:45:70:48:f7:ac:b3:12:6f:69:c8:79:f7:60:58:56:18:5e:
         8f:4d:49:c6:99:05:1e:b1:32:b6:34:c5:e8:96:25:10:2c:a6:
         2d:2e:a7:b9:e5:23:a2:06:13:5b:39:cb:6f:e3:20:f2:59:e5:
         8e:d3:f8:79:04:c6:4e:13:59:2d:eb:a7:17:06:88:dc:96:55:
         e5:da:16:73:b4:7f:d4:e0:0b:da:63:28:ee:12:a1:ca:84:74:
         a2:f2:3a:38:57:b4:19:69:19:cd:e1:d4:45:51:54:00:02:9f:
         bf:fa:39:36:22:e2:15:e2:8d:d8:b7:9e:d4:84:b3:a3:6f:be:
         07:8d:03:3d:14:dc:51:a4:5b:1a:44:8f:1f:11:e7:6c:65:7a:
         ac:5c:8a:31:b7:3c:a3:24:00:eb:19:a5:55:82:80:73:a6:19:
         e1:91:21:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org