Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3139312e3234312e36342e302f32302d3332203d3e20323032.roa
File:                     3139312e3234312e36342e302f32302d3332203d3e20323032.roa (raw, json)
Hash identifier:          VpdcCYD2yt/GHIfbvqRQxkW4XJ9H3uldDNDLcMK+7yM=
Subject key identifier:   DB:2B:04:E0:89:47:FC:59:2C:04:87:C5:D2:89:DB:8F:18:E0:13:76
Certificate issuer:       /CN=95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA
Certificate serial:       7ED95AE3E7DB66CCCA39B9B6558536D5BBB8B648
Authority key identifier: 95:B5:A9:6C:77:43:93:9C:30:3E:DD:7F:2D:3C:C4:AB:9C:5D:B9:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3139312e3234312e36342e302f32302d3332203d3e20323032.roa
Signing time:             Sat 21 Jan 2023 22:22:36 +0000
ROA not before:           Sat 21 Jan 2023 22:17:36 +0000
ROA not after:            Sat 20 Jan 2024 22:22:36 +0000
asID:                     202
IP address blocks:        191.241.64.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d9:5a:e3:e7:db:66:cc:ca:39:b9:b6:55:85:36:d5:bb:b8:b6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA
        Validity
            Not Before: Jan 21 22:17:36 2023 GMT
            Not After : Jan 20 22:22:36 2024 GMT
        Subject: CN=DB2B04E08947FC592C0487C5D289DB8F18E01376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:21:10:d8:e3:ed:fa:50:0b:38:32:78:a8:
                    f7:eb:4b:a2:95:8e:89:1b:4e:f2:14:c9:38:4f:82:
                    cc:3d:0e:06:e8:a4:58:84:43:e9:8a:14:32:e8:f5:
                    d6:8b:85:60:24:97:93:da:13:4b:61:37:1e:07:5f:
                    fa:b3:85:9a:11:03:60:f5:be:6b:a3:45:37:40:de:
                    96:a3:85:00:62:a1:d0:f2:65:fb:3f:77:fe:6d:f5:
                    65:1e:39:f1:2e:75:28:84:f8:5f:dc:61:72:11:c9:
                    3e:8f:88:9f:f3:23:fc:a9:09:ff:90:94:3f:6e:04:
                    7d:04:03:bb:9c:0d:41:52:f2:db:a5:5a:8f:2b:6a:
                    15:3f:ec:51:d4:a1:b2:ea:82:f0:3b:83:b2:6c:45:
                    5f:cb:df:78:2d:aa:d4:0e:f3:9c:75:7d:91:ec:65:
                    3b:01:95:1c:76:e6:53:35:b5:e4:5b:98:31:1a:5c:
                    4f:02:9e:98:e4:3b:db:29:ad:7a:f2:db:4a:b5:61:
                    5f:81:24:be:54:1f:c6:f2:00:73:1e:d2:5e:aa:77:
                    94:ca:e2:ca:90:6e:6a:c4:fd:65:09:26:c7:32:76:
                    99:a5:f5:16:72:e4:aa:84:d2:e7:95:42:a9:c9:0b:
                    4b:cd:fa:c7:44:ab:67:45:ad:52:34:cb:6d:72:07:
                    d1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2B:04:E0:89:47:FC:59:2C:04:87:C5:D2:89:DB:8F:18:E0:13:76
            X509v3 Authority Key Identifier:
                keyid:95:B5:A9:6C:77:43:93:9C:30:3E:DD:7F:2D:3C:C4:AB:9C:5D:B9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3139312e3234312e36342e302f32302d3332203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b1:97:eb:3d:25:82:6e:99:e7:0d:0e:43:f5:a0:7d:71:2a:b0:
         2d:61:e6:f0:88:3b:68:b8:b6:d1:cf:85:2b:d2:a6:21:03:16:
         a6:82:c7:e9:f3:91:0b:df:57:4e:56:b4:42:aa:f6:44:33:50:
         20:83:1f:8a:49:44:e0:e2:76:64:af:a6:be:2e:de:2f:65:ed:
         cd:72:5f:05:5a:a7:c5:1a:6b:93:2c:0b:a3:35:90:e4:e5:f7:
         7a:a7:6a:20:57:22:15:f9:f7:b6:f4:ea:4d:94:81:bf:1b:5e:
         31:9b:5d:56:f3:1c:87:2b:11:49:8c:5b:83:5b:47:cb:76:92:
         34:06:3f:f4:9b:c1:07:73:64:58:17:cd:b2:8e:57:bb:09:5e:
         48:05:a4:40:43:2a:13:b6:37:13:66:d7:38:4b:27:56:ee:9a:
         c9:7c:4f:42:2a:17:2d:db:3b:3a:d2:8f:b0:1d:e7:b0:e2:71:
         5e:33:9c:03:16:df:86:e7:93:b8:50:d7:6d:c1:b3:ef:59:e9:
         e4:ee:a9:dc:23:15:49:8c:00:c4:f8:11:4b:de:34:3e:14:0c:
         c3:19:e4:91:56:c9:7c:d6:69:86:d2:7f:52:80:2e:84:46:fd:
         9b:28:4f:c6:19:75:17:87:7a:d8:8d:6b:69:4c:0c:2b:92:1b:
         37:5f:86:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org