Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3139312e362e35332e302f32342d3234203d3e20323633303733.roa
File:                     3139312e362e35332e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          0c5v2cUvs7o0KhQoZbOg3A2PbKlHUYUrdBQR8pwh78s=
Subject key identifier:   99:BB:31:3F:49:17:B8:A7:CE:12:C1:E2:4C:2F:DF:EE:AD:88:02:49
Certificate issuer:       /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial:       49E891E256E30CA72A5C8E46A6A842520B729FE4
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3139312e362e35332e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 22 Dec 2023 20:25:08 +0000
ROA not before:           Fri 22 Dec 2023 20:20:08 +0000
ROA not after:            Fri 20 Dec 2024 20:25:08 +0000
asID:                     263073
IP address blocks:        191.6.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e8:91:e2:56:e3:0c:a7:2a:5c:8e:46:a6:a8:42:52:0b:72:9f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
        Validity
            Not Before: Dec 22 20:20:08 2023 GMT
            Not After : Dec 20 20:25:08 2024 GMT
        Subject: CN=99BB313F4917B8A7CE12C1E24C2FDFEEAD880249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4f:f8:e1:f8:9f:92:c0:97:24:5c:66:72:29:
                    41:a7:01:7b:7a:cd:ce:df:ca:af:cd:5b:cc:42:ab:
                    b5:56:7c:77:4a:9c:28:30:d1:31:b1:7b:31:93:4a:
                    15:05:88:01:89:e2:8f:bb:a5:a1:fa:ae:5d:49:f9:
                    c9:0e:f3:6c:70:2d:aa:8f:04:8a:fa:0f:34:2f:8a:
                    75:50:26:c1:cd:74:87:0e:46:10:48:66:63:09:66:
                    03:e9:20:37:ba:00:26:d5:10:92:1e:4a:b3:54:59:
                    c8:34:f2:1a:16:a7:15:33:a8:64:67:90:48:8f:b0:
                    83:10:a1:be:e8:d1:10:a1:e5:6f:ab:a7:02:aa:6b:
                    84:02:0c:fd:54:52:af:aa:c5:e3:bd:b6:84:5b:13:
                    90:a3:ba:1b:6c:52:8c:78:f2:20:ca:65:b1:62:cd:
                    b9:76:ce:5f:6b:78:08:e6:bd:c2:e0:2f:68:41:44:
                    eb:e6:04:77:e2:5b:00:33:b2:a3:ad:40:2c:91:10:
                    f8:16:fe:3e:cb:ca:f8:8b:4c:1b:2a:93:42:a5:62:
                    c0:e1:17:35:d4:bc:37:76:3c:dd:54:ae:d1:7d:60:
                    00:5c:31:f7:e3:c1:9c:fe:3e:90:a7:3b:19:ad:b5:
                    d4:0e:ae:b3:7d:6b:75:55:74:cf:85:77:25:7a:28:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BB:31:3F:49:17:B8:A7:CE:12:C1:E2:4C:2F:DF:EE:AD:88:02:49
            X509v3 Authority Key Identifier:
                keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3139312e362e35332e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:42:4f:82:f8:b9:bc:50:47:97:54:28:a7:7e:a5:bd:24:e1:
         15:3e:a6:e2:f7:85:cd:73:38:67:f9:f3:7f:99:18:da:0d:cc:
         34:80:3f:2a:57:76:e8:7d:ac:5c:dc:f0:6b:6d:49:d3:ac:b6:
         c2:73:cd:b2:07:13:c2:14:7d:6d:fd:dd:31:f6:30:de:d1:6f:
         66:42:08:77:3d:ac:00:07:6d:d0:74:48:98:fc:50:f1:dd:29:
         a2:a7:c7:8d:52:1c:17:9d:87:74:8d:a3:e3:84:f9:33:67:de:
         1c:f0:f1:86:da:e9:7d:c5:5d:7d:fb:53:e2:e6:b5:e7:eb:47:
         61:9e:24:3a:c3:28:d6:b4:e0:c8:3a:84:fe:39:df:08:50:91:
         ad:29:01:28:83:c4:e1:8e:73:f6:cf:00:bc:f5:b0:b0:99:80:
         3c:e7:48:7f:2b:eb:91:ce:93:5a:d6:e3:44:44:90:29:eb:7d:
         fe:fe:c8:50:7e:6f:51:45:5f:a2:00:2b:cc:74:5d:2c:e7:83:
         aa:63:84:2c:5c:95:3a:cf:40:ca:a0:63:9f:9e:c9:09:f3:08:
         1f:b5:19:45:d3:bb:67:60:55:f1:ad:bd:8e:c5:1c:fd:ec:02:
         4d:f7:78:04:09:30:33:4c:82:0f:de:4f:42:d7:2c:9d:8f:aa:
         43:f2:e0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org