Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa
File:                     3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (raw, json)
Hash identifier:          f3UxCRPwDKRcY/zYm89okk9uK+t7L59XbK4z/tunMJM=
Subject key identifier:   2F:39:C0:C9:32:DD:01:95:EF:F3:8D:93:A7:90:3B:16:99:95:74:B2
Certificate issuer:       /CN=C8A88E2290299A468AE6EC1703931B7E1914CF8B
Certificate serial:       6BE8F2A08E2A2FA26B2C9113B427520F113E0DF2
Authority key identifier: C8:A8:8E:22:90:29:9A:46:8A:E6:EC:17:03:93:1B:7E:19:14:CF:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8A88E2290299A468AE6EC1703931B7E1914CF8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa
Signing time:             Wed 24 Jan 2024 11:23:38 +0000
ROA not before:           Wed 24 Jan 2024 11:18:38 +0000
ROA not after:            Wed 22 Jan 2025 11:23:38 +0000
asID:                     263496
IP address blocks:        191.243.56.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e8:f2:a0:8e:2a:2f:a2:6b:2c:91:13:b4:27:52:0f:11:3e:0d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8A88E2290299A468AE6EC1703931B7E1914CF8B
        Validity
            Not Before: Jan 24 11:18:38 2024 GMT
            Not After : Jan 22 11:23:38 2025 GMT
        Subject: CN=2F39C0C932DD0195EFF38D93A7903B16999574B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:31:3e:43:27:5f:7e:d3:b4:d5:07:bb:ba:
                    32:c0:9f:f0:4e:3a:c1:b0:55:63:ea:b3:6f:70:92:
                    e0:18:47:d9:f3:8d:fc:c9:51:74:fc:5b:c1:96:f4:
                    d6:09:38:33:84:ab:d9:c8:c5:2a:9d:00:f9:0d:0e:
                    79:9e:38:8d:bb:52:49:66:6f:26:02:ec:a2:92:5a:
                    72:30:62:eb:19:cf:78:21:ad:b3:ed:e5:7b:8a:4f:
                    40:4d:70:be:77:db:36:13:9e:ec:53:c3:10:90:0e:
                    c3:76:f5:6c:1b:e1:e8:6d:cc:a3:bb:41:4c:9b:2a:
                    42:6b:de:12:46:c7:2e:11:4d:46:dd:ec:58:47:03:
                    c3:fc:4a:a4:1b:2e:43:be:16:9d:b3:52:e1:46:08:
                    91:57:ab:4e:78:96:85:42:69:98:ea:43:06:11:38:
                    28:1a:07:23:f4:65:0b:51:7a:6d:49:fd:dd:b8:c1:
                    6d:26:a0:27:7b:98:87:e7:71:e2:8d:07:c4:7f:df:
                    46:58:08:e6:07:18:d6:65:1a:6c:9b:82:f1:a2:0b:
                    69:01:cc:b2:d9:bc:87:cf:6b:aa:c9:7e:67:aa:36:
                    66:48:7b:4d:04:b6:04:8a:fd:a0:f4:ef:f6:67:b6:
                    49:24:08:bc:b4:91:7e:d3:5d:e6:1e:da:41:c5:a6:
                    6e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:39:C0:C9:32:DD:01:95:EF:F3:8D:93:A7:90:3B:16:99:95:74:B2
            X509v3 Authority Key Identifier:
                keyid:C8:A8:8E:22:90:29:9A:46:8A:E6:EC:17:03:93:1B:7E:19:14:CF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/C8A88E2290299A468AE6EC1703931B7E1914CF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8A88E2290299A468AE6EC1703931B7E1914CF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:6b:3e:b0:42:08:e3:e9:27:e0:2f:cf:f2:54:30:d1:c8:eb:
         7a:ea:b7:45:5e:70:89:ba:04:ae:51:23:53:23:54:71:32:2c:
         54:80:c6:22:f1:a5:55:aa:6b:e6:01:7a:8e:ad:a2:a5:fc:2d:
         63:b7:c4:a2:42:91:aa:4b:40:9c:4b:8c:b8:82:04:e0:92:24:
         15:53:ee:3d:29:79:8f:50:5e:ae:42:57:5e:66:c4:b8:10:8b:
         44:6a:82:cb:ed:98:d5:4f:f1:fc:b1:81:00:7e:be:31:b4:b9:
         6f:63:a2:45:9d:d3:a7:c8:54:fa:af:b0:e5:6a:a0:f7:48:ad:
         0c:6d:20:e4:52:d1:88:85:c2:44:c8:0d:8f:c0:df:8d:b5:cf:
         d9:37:80:eb:b2:ac:bc:b7:26:2c:c9:07:cc:cf:4d:42:2b:db:
         72:42:0a:4a:61:2c:5e:32:4e:a0:06:10:58:4f:69:3a:61:91:
         29:09:54:73:6e:fc:3e:62:2d:e7:b9:c0:b6:2e:b2:cd:c8:e1:
         70:ad:7e:eb:8d:70:79:75:c1:41:9b:5f:96:38:85:1c:c7:24:
         c9:8a:93:e6:06:05:3b:c7:c0:39:64:8d:c6:1a:0c:ef:6c:1c:
         da:fa:94:b4:47:e2:ab:4e:95:a7:0d:45:e3:23:d9:85:02:36:
         94:9d:86:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org