Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/3139312e362e302e302f32322d3332203d3e20323633353435.roa
File:                     3139312e362e302e302f32322d3332203d3e20323633353435.roa (raw, json)
Hash identifier:          mj9BqxowbI+3KT01r9CjIdz9U6Zw7bQQT8Ogwm2xK/0=
Subject key identifier:   40:88:D4:50:1B:0C:05:10:DA:5C:28:01:E4:71:16:C4:17:7F:E3:D0
Certificate issuer:       /CN=36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A
Certificate serial:       1C47CF7F3B83F25B81A705CB0CB07DACAD88BD08
Authority key identifier: 36:B3:06:7A:BF:A9:D4:4E:0C:8B:3E:FA:52:DE:8D:8A:DF:28:33:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/3139312e362e302e302f32322d3332203d3e20323633353435.roa
Signing time:             Thu 21 Sep 2023 18:16:32 +0000
ROA not before:           Thu 21 Sep 2023 18:11:32 +0000
ROA not after:            Thu 19 Sep 2024 18:16:32 +0000
asID:                     263545
IP address blocks:        191.6.0.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:47:cf:7f:3b:83:f2:5b:81:a7:05:cb:0c:b0:7d:ac:ad:88:bd:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A
        Validity
            Not Before: Sep 21 18:11:32 2023 GMT
            Not After : Sep 19 18:16:32 2024 GMT
        Subject: CN=4088D4501B0C0510DA5C2801E47116C4177FE3D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:49:80:6c:d6:42:a7:fb:96:12:65:52:e5:fc:
                    c9:c2:22:94:f6:0a:41:4f:c5:51:4b:a1:41:3b:56:
                    a1:7c:3b:8c:91:92:d3:a0:43:39:79:9b:fb:1d:36:
                    98:13:7a:78:aa:b2:61:95:9d:4e:70:8f:63:f8:69:
                    f2:f4:57:d6:b4:1a:72:2c:d4:d2:39:2d:ce:01:ff:
                    de:63:28:31:2d:07:fe:41:33:e6:f6:ff:23:31:74:
                    36:11:bf:b9:bf:0f:39:de:c2:15:4d:5c:b0:6f:f0:
                    cf:ae:41:3f:ad:01:f9:ef:83:33:96:d7:21:ad:3a:
                    11:eb:cc:20:ee:04:2d:96:29:bc:59:93:6f:bc:50:
                    a1:ab:0f:23:b4:80:8e:b6:55:95:34:41:9d:31:3e:
                    5c:f3:d5:fe:bf:46:b5:fe:7f:08:fe:45:4e:98:e4:
                    20:c8:46:fd:f0:98:e1:74:4d:cf:af:e1:4b:6d:32:
                    78:53:69:35:a7:1b:7d:7f:e0:8f:26:0b:5f:35:b0:
                    42:aa:f7:97:61:91:05:d8:5a:22:cd:9a:ed:94:a1:
                    5d:bd:24:05:c5:2a:b6:e8:a8:70:1e:b7:38:e5:6c:
                    fd:9e:4c:df:0f:6a:12:d2:0a:b0:9b:dc:8a:04:49:
                    50:83:94:fa:51:52:da:e5:28:a3:ee:6b:a0:cf:78:
                    4c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:88:D4:50:1B:0C:05:10:DA:5C:28:01:E4:71:16:C4:17:7F:E3:D0
            X509v3 Authority Key Identifier:
                keyid:36:B3:06:7A:BF:A9:D4:4E:0C:8B:3E:FA:52:DE:8D:8A:DF:28:33:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/3139312e362e302e302f32322d3332203d3e20323633353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:1d:a4:72:75:f6:65:dd:84:eb:40:ca:de:87:bd:20:fa:36:
         d8:ad:82:d5:1b:82:37:ae:cc:a4:fa:a3:19:22:77:f0:0a:58:
         60:15:aa:c2:11:d5:ce:bd:2f:21:4c:91:9f:88:49:e4:b3:0b:
         03:27:ee:80:8f:34:16:1b:18:ce:2e:6b:d8:02:f5:fc:f5:43:
         35:a2:58:df:86:41:d3:f8:99:02:82:e9:91:71:a7:30:58:a5:
         4e:07:91:bc:b5:16:2d:eb:dc:42:44:3c:cb:f3:1f:1b:9b:ac:
         eb:12:8e:83:75:47:96:69:16:9d:85:63:fd:f0:61:e9:a7:c1:
         be:3d:be:e9:32:9e:c9:59:8b:ce:5a:f8:aa:1b:9a:ac:02:ef:
         83:ee:42:11:c2:3f:da:84:85:1e:75:d0:dc:a5:d3:5b:f3:bd:
         d6:fb:4f:30:8f:f6:99:a6:e8:ae:90:c4:70:9c:23:a6:ec:8e:
         aa:1e:9f:4a:d5:45:99:9b:32:b6:aa:fe:49:27:96:a7:e5:a2:
         5d:8b:f9:94:f5:66:e0:70:db:84:24:90:83:74:42:be:41:f6:
         96:82:15:82:ff:fc:fa:4d:cf:15:01:dd:96:7a:f9:7c:a5:ac:
         e8:e3:36:22:91:ac:c3:69:3c:91:89:94:d5:f4:9f:b6:dc:e8:
         a7:ce:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org