Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/3139322e3134312e33322e302f32322d3232203d3e20323637343538.roa
File:                     3139322e3134312e33322e302f32322d3232203d3e20323637343538.roa (raw, json)
Hash identifier:          KNelAWv7HqQEo9O6dYRplpZqolo8AHjj797LCz3bMoA=
Subject key identifier:   BE:5D:04:A4:11:92:35:39:84:A5:E5:E8:A3:B6:6B:3C:13:15:18:E3
Certificate issuer:       /CN=0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3
Certificate serial:       2F5BB2D1BC464FFDAC8C0674D36CFB2BBBAFB022
Authority key identifier: 0B:32:0C:2E:72:BB:4C:6C:41:B6:D9:A3:9F:DD:4A:A5:90:C9:9B:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/3139322e3134312e33322e302f32322d3232203d3e20323637343538.roa
Signing time:             Wed 14 Jun 2023 17:57:44 +0000
ROA not before:           Wed 14 Jun 2023 17:52:44 +0000
ROA not after:            Wed 12 Jun 2024 17:57:44 +0000
asID:                     267458
IP address blocks:        192.141.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5b:b2:d1:bc:46:4f:fd:ac:8c:06:74:d3:6c:fb:2b:bb:af:b0:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3
        Validity
            Not Before: Jun 14 17:52:44 2023 GMT
            Not After : Jun 12 17:57:44 2024 GMT
        Subject: CN=BE5D04A41192353984A5E5E8A3B66B3C131518E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:d5:28:5e:85:ab:53:88:ed:42:5b:00:b8:
                    98:8d:24:ad:48:3f:36:40:cb:db:be:47:e7:f9:a0:
                    72:81:50:99:3a:1e:10:f2:d1:de:c6:08:3e:35:bb:
                    52:b5:f2:1d:78:34:c3:a1:68:76:9b:b9:77:93:cb:
                    d9:b5:9a:c5:b6:db:0f:21:29:11:04:78:12:f7:08:
                    8d:d4:c4:d9:48:4a:67:15:ec:48:2c:ee:da:11:75:
                    5d:ff:04:e5:8f:98:fc:ab:38:37:54:52:2b:56:87:
                    18:34:b1:9c:bd:9b:bf:41:25:8b:f5:e1:93:96:4f:
                    67:16:42:34:15:ef:a2:cb:69:bd:b1:42:b5:4a:9e:
                    fa:62:6b:fb:ea:ed:0d:c0:52:bb:cb:77:dc:55:eb:
                    17:5b:21:7b:00:d6:fa:50:75:8e:b0:c1:95:4c:60:
                    a1:d3:60:dd:e5:cd:c0:ae:79:a9:4f:18:6f:e5:3e:
                    a5:2d:e4:40:e1:17:a0:a8:e6:d2:92:fa:dc:d8:c9:
                    be:99:b4:e5:65:d3:5b:c1:1e:0e:6f:59:47:94:07:
                    c8:24:1b:3c:b5:6f:79:a6:9c:93:9f:a1:68:e7:41:
                    4b:02:51:66:03:1a:2f:ed:c7:d8:5f:e7:c3:a3:1d:
                    f0:40:9e:1c:0b:8d:43:6e:78:76:4d:03:ea:7f:79:
                    b1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5D:04:A4:11:92:35:39:84:A5:E5:E8:A3:B6:6B:3C:13:15:18:E3
            X509v3 Authority Key Identifier:
                keyid:0B:32:0C:2E:72:BB:4C:6C:41:B6:D9:A3:9F:DD:4A:A5:90:C9:9B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/3139322e3134312e33322e302f32322d3232203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:9b:f0:64:af:11:bc:c8:cb:76:35:fb:c1:71:83:ed:03:b7:
         a2:4f:7c:d5:2f:bf:6e:85:d3:19:f0:e4:29:37:fb:66:ef:67:
         3f:14:07:39:13:72:a0:0c:9d:24:7b:4b:8f:61:d6:f7:79:f3:
         f1:7c:b9:a2:cb:6a:a1:2a:73:fc:c0:d1:32:98:fc:17:6a:43:
         56:a5:12:50:71:03:63:1c:ca:df:62:02:77:f4:2f:68:b6:b7:
         c5:38:21:0a:9b:26:53:3b:cd:25:ad:de:d1:f5:e5:fa:58:8e:
         a1:11:6e:41:cf:60:7b:77:33:a7:56:da:ce:c1:c3:57:e9:ad:
         28:fc:43:6e:95:4e:a3:25:bf:f6:93:6a:c7:78:3d:16:e6:75:
         ba:88:84:03:a5:d0:14:d4:7a:37:6b:83:61:ae:9b:8c:53:0f:
         94:68:ba:ab:d8:64:d3:86:bb:fa:11:a1:f3:76:bd:65:bb:24:
         18:86:d2:89:79:2a:87:23:e9:af:6d:66:26:7e:f3:e8:fa:b0:
         e9:a5:a8:c5:3e:c8:bd:2d:76:12:ed:03:5c:2d:01:b2:a0:a6:
         d8:7b:bc:07:49:de:ee:27:29:3d:19:5f:6f:64:4c:e1:22:74:
         36:16:a6:2c:42:77:ca:88:4c:1d:d9:62:01:6c:3a:91:7c:02:
         5f:cb:b9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org