Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/3139322e3134312e31342e302f32332d3233203d3e20323637343531.roa
File:                     3139322e3134312e31342e302f32332d3233203d3e20323637343531.roa (raw, json)
Hash identifier:          3QAeNVYeL5AhmLk+J1N61idus2VO3FmtRZKH02owQ3Y=
Subject key identifier:   4D:A4:C8:55:EF:AB:63:40:E0:81:B5:96:0A:F2:5D:9B:78:C7:DD:37
Certificate issuer:       /CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
Certificate serial:       1CEC94B71C9135FFA9A5B8A879AFC4939A354FFE
Authority key identifier: 9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/3139322e3134312e31342e302f32332d3233203d3e20323637343531.roa
Signing time:             Tue 13 Jun 2023 17:25:38 +0000
ROA not before:           Tue 13 Jun 2023 17:20:38 +0000
ROA not after:            Tue 11 Jun 2024 17:25:38 +0000
asID:                     267451
IP address blocks:        192.141.14.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ec:94:b7:1c:91:35:ff:a9:a5:b8:a8:79:af:c4:93:9a:35:4f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
        Validity
            Not Before: Jun 13 17:20:38 2023 GMT
            Not After : Jun 11 17:25:38 2024 GMT
        Subject: CN=4DA4C855EFAB6340E081B5960AF25D9B78C7DD37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:c5:60:58:c7:41:d7:36:e1:8a:db:02:78:
                    a6:73:0e:92:1e:11:b9:81:8a:a3:47:15:9e:ee:bb:
                    d6:8f:59:7e:12:88:78:3b:35:24:08:22:ed:ce:ef:
                    fa:e0:b9:ae:63:4b:85:62:47:0c:d9:46:39:07:02:
                    a6:6d:67:ca:63:8f:04:4a:b0:89:ee:fd:63:4e:47:
                    a8:d1:10:24:c9:58:00:e3:0a:00:ad:2c:81:6c:26:
                    2c:41:ec:b0:c4:08:7f:ee:e7:aa:1f:68:d7:66:af:
                    e6:51:3d:ae:30:34:4d:86:e8:42:b9:9f:95:9a:f4:
                    b7:ac:38:07:70:f8:89:f1:55:2d:0b:ae:58:30:0f:
                    07:8f:da:07:05:a2:91:97:15:a0:4a:bf:37:e3:2b:
                    b6:fc:71:98:da:e9:db:7c:42:0a:a4:c4:ae:7f:ba:
                    e3:d2:74:fe:ca:14:ba:5c:bf:27:39:eb:33:57:f8:
                    c4:be:e8:f0:b0:88:16:81:55:5f:4e:72:d6:85:fe:
                    e3:44:d5:bf:8c:aa:a9:3c:06:7e:41:93:12:35:08:
                    b5:e1:67:98:75:c2:47:50:cf:55:56:06:8b:50:b7:
                    95:c9:61:31:8e:08:21:74:34:0a:e7:24:eb:10:8b:
                    76:c3:36:2f:45:ff:38:f3:ea:10:9b:8e:b5:62:bb:
                    97:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A4:C8:55:EF:AB:63:40:E0:81:B5:96:0A:F2:5D:9B:78:C7:DD:37
            X509v3 Authority Key Identifier:
                keyid:9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/3139322e3134312e31342e302f32332d3233203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:9d:48:1c:f8:a3:9a:ef:7a:d9:4e:c2:1e:ac:a8:95:47:ba:
         ff:4a:2d:77:70:62:71:a2:51:3e:bb:f6:f5:ac:d5:a1:e6:3b:
         71:cb:30:85:a0:7f:35:1e:68:14:eb:a1:ed:e8:49:f7:91:0f:
         90:d0:d5:3e:e5:ba:a2:8d:9f:ba:d1:cb:86:d7:aa:10:46:9f:
         6b:47:70:7c:ab:d1:7c:b6:30:10:a6:ea:63:b3:ae:12:31:3f:
         a2:ff:aa:0c:ff:e2:fa:76:26:c2:bb:33:4e:d4:89:64:6c:0d:
         0b:fd:57:30:81:48:df:71:38:d5:14:69:02:37:90:06:3c:20:
         48:1b:00:ec:ef:3f:ff:c5:ae:66:cb:18:cb:0a:cb:6a:bb:15:
         7c:92:49:9c:f2:24:b4:16:b6:e0:07:41:25:2a:98:96:d2:5d:
         30:35:cf:4b:79:53:87:89:66:56:61:93:fc:ea:b3:a1:09:7e:
         01:5f:53:fe:3e:26:b1:ad:46:e6:3b:8d:11:ee:18:2c:b2:24:
         f7:f0:94:3d:ad:73:dd:27:9b:46:f4:f2:8e:9b:0f:48:2f:6d:
         4b:d1:f1:36:4a:d5:a0:1c:a3:09:e9:04:d5:77:c6:09:4b:6a:
         d0:db:e9:22:a5:18:d0:df:c7:cb:c8:8e:fe:96:51:f1:84:62:
         2a:0a:22:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org