Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa
File:                     3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa (raw, json)
Hash identifier:          U3neDNKNXiw9Sguf1hWPfxTlSEROhb/OR2+PVfiWsn0=
Subject key identifier:   1F:49:05:9C:90:57:66:C5:46:ED:02:E0:86:64:83:8E:AD:04:56:EA
Certificate issuer:       /CN=A8C8557DD5953EB8299531CE4E9861DE6FB5E004
Certificate serial:       3CCF9A0112F667726344E299553E218F793D0BE5
Authority key identifier: A8:C8:55:7D:D5:95:3E:B8:29:95:31:CE:4E:98:61:DE:6F:B5:E0:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8C8557DD5953EB8299531CE4E9861DE6FB5E004.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa
Signing time:             Fri 29 Sep 2023 17:53:23 +0000
ROA not before:           Fri 29 Sep 2023 17:48:23 +0000
ROA not after:            Fri 27 Sep 2024 17:53:23 +0000
asID:                     266252
IP address blocks:        192.140.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cf:9a:01:12:f6:67:72:63:44:e2:99:55:3e:21:8f:79:3d:0b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C8557DD5953EB8299531CE4E9861DE6FB5E004
        Validity
            Not Before: Sep 29 17:48:23 2023 GMT
            Not After : Sep 27 17:53:23 2024 GMT
        Subject: CN=1F49059C905766C546ED02E08664838EAD0456EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b3:3e:b7:46:35:3a:15:09:e2:e8:23:50:4d:
                    3d:77:84:cc:f0:f5:2c:19:7c:6c:57:49:6a:ee:d0:
                    8a:64:fe:4d:8c:12:d0:4a:60:e7:74:78:1c:2f:36:
                    42:46:c4:a7:01:21:56:59:93:36:90:47:2a:a2:7a:
                    06:c8:43:61:18:7f:a3:49:cc:15:e5:e6:f7:b5:09:
                    b8:cc:40:b0:f2:85:db:f5:f1:7d:37:89:73:a6:57:
                    e4:f0:35:b1:18:d2:89:b7:9a:84:31:5a:36:2d:a7:
                    1e:d8:b2:f3:ed:8b:19:76:85:5f:29:57:de:d7:64:
                    2b:78:9d:26:82:dd:b3:50:1b:21:88:ef:cf:9b:2c:
                    ea:64:2c:ed:2a:db:30:09:b1:78:20:a4:ba:89:5b:
                    75:b5:38:c0:d6:ae:4e:71:42:ab:a9:10:ee:41:eb:
                    18:b1:35:0a:49:b2:51:09:1e:21:e7:1a:69:17:b3:
                    6a:2f:f4:ea:21:29:80:87:f3:9e:d0:9a:5c:71:9f:
                    ba:89:db:51:cf:90:44:33:11:a0:8b:44:66:62:bc:
                    c5:13:4c:27:22:41:92:1a:65:93:f0:ce:69:f4:07:
                    f2:b7:62:e9:96:5f:db:75:bb:e8:2f:18:3a:7d:a9:
                    43:6b:58:0a:44:be:69:8a:b3:59:15:94:3f:4d:29:
                    c9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:49:05:9C:90:57:66:C5:46:ED:02:E0:86:64:83:8E:AD:04:56:EA
            X509v3 Authority Key Identifier:
                keyid:A8:C8:55:7D:D5:95:3E:B8:29:95:31:CE:4E:98:61:DE:6F:B5:E0:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/A8C8557DD5953EB8299531CE4E9861DE6FB5E004.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8C8557DD5953EB8299531CE4E9861DE6FB5E004.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:f6:96:34:8c:8b:e9:6e:76:31:3d:ce:d9:66:d7:15:8d:de:
         b1:4b:29:89:d7:23:70:15:6d:35:31:aa:56:7f:3e:f0:9e:0b:
         8c:8a:b3:2e:32:f4:f8:98:fe:0c:d1:0e:17:02:e5:83:70:b1:
         43:ac:5c:87:ba:7d:e0:a2:f2:14:8d:f9:57:4d:79:d8:28:71:
         f9:3a:89:61:41:7f:f4:bd:a9:c0:4e:16:ad:21:29:dc:4d:cd:
         17:e4:48:29:5d:cb:e6:57:7e:b2:f5:54:55:c6:4f:f8:cc:71:
         34:5c:b4:6b:94:c4:9b:16:61:ec:d3:62:82:4f:53:83:58:c8:
         af:1b:4d:3e:5c:4a:78:ae:df:9d:6d:ab:5c:88:30:8f:76:10:
         a7:fe:b8:05:7e:02:a2:1b:82:41:78:a0:13:46:cb:3c:f4:51:
         60:68:2e:55:ba:34:c2:4a:7c:10:11:7c:bb:19:b2:2b:c7:22:
         36:c3:a2:02:ed:bd:bf:ff:b2:a2:bc:0f:e5:1e:8f:8e:8d:a2:
         2d:91:75:3a:b8:71:eb:0c:f3:9a:35:a0:32:75:33:2b:c8:4b:
         e0:24:3c:c6:63:31:72:97:b4:56:e3:79:5e:eb:f1:3b:68:d4:
         74:33:0b:22:bd:bc:23:99:0f:d9:7e:00:d1:7a:f7:d1:b0:8c:
         da:b8:cf:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org