Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/3139322e3134312e33322e302f32342d3234203d3e20323637343538.roa
File:                     3139322e3134312e33322e302f32342d3234203d3e20323637343538.roa (raw, json)
Hash identifier:          6FNINUUF14XL+G/Lo3mV/gFxCwcyXDNpmR7ZVSS62gQ=
Subject key identifier:   69:8B:79:39:7D:FE:81:BA:1E:83:9C:7D:C8:13:B5:45:AE:ED:46:C9
Certificate issuer:       /CN=0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3
Certificate serial:       37C00A8D0189F6402831091494856339A01AD348
Authority key identifier: 0B:32:0C:2E:72:BB:4C:6C:41:B6:D9:A3:9F:DD:4A:A5:90:C9:9B:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/3139322e3134312e33322e302f32342d3234203d3e20323637343538.roa
Signing time:             Wed 14 Jun 2023 17:54:57 +0000
ROA not before:           Wed 14 Jun 2023 17:49:57 +0000
ROA not after:            Wed 12 Jun 2024 17:54:57 +0000
asID:                     267458
IP address blocks:        192.141.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c0:0a:8d:01:89:f6:40:28:31:09:14:94:85:63:39:a0:1a:d3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3
        Validity
            Not Before: Jun 14 17:49:57 2023 GMT
            Not After : Jun 12 17:54:57 2024 GMT
        Subject: CN=698B79397DFE81BA1E839C7DC813B545AEED46C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:1c:ef:35:d2:ed:0b:d1:50:be:06:ea:1a:
                    47:7b:28:fa:72:93:f9:51:24:6b:56:01:70:ce:25:
                    97:d7:3f:da:b9:52:09:92:35:b0:84:87:95:5f:fc:
                    65:7a:14:a1:d5:88:56:ec:16:7c:8e:44:61:59:4e:
                    c3:23:5d:10:03:c9:37:28:a1:ff:91:c2:58:d6:31:
                    08:2c:c3:d8:1e:3b:88:31:6e:61:fc:0e:5c:7d:40:
                    f3:c2:95:84:8b:da:88:e3:ca:08:6a:9e:36:0c:6e:
                    86:23:cd:a6:f2:fa:1a:63:9c:06:3b:a4:c7:cf:46:
                    40:50:9c:3d:d4:9d:75:77:16:7c:3f:43:73:5f:77:
                    c7:87:43:bf:eb:05:84:63:de:9a:f3:7b:b6:eb:f4:
                    b2:b7:d1:5c:19:c2:00:79:02:4b:30:53:57:14:c3:
                    11:88:67:6b:5a:59:7d:82:3a:2b:cb:f3:83:fb:4e:
                    a3:cc:e2:1c:b3:eb:22:bd:5a:d3:c8:25:f4:bd:da:
                    8c:9b:ee:c8:73:de:63:00:61:72:e2:64:0e:ea:12:
                    0f:03:1b:86:76:ee:44:2a:b9:bd:98:cc:b6:8e:78:
                    59:c9:01:ad:a5:95:cd:4a:48:8e:eb:7d:2e:b5:d2:
                    7b:e6:52:0e:c7:a5:0a:ac:0d:74:2b:c4:ff:17:ee:
                    58:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8B:79:39:7D:FE:81:BA:1E:83:9C:7D:C8:13:B5:45:AE:ED:46:C9
            X509v3 Authority Key Identifier:
                keyid:0B:32:0C:2E:72:BB:4C:6C:41:B6:D9:A3:9F:DD:4A:A5:90:C9:9B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B320C2E72BB4C6C41B6D9A39FDD4AA590C99BF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/3139322e3134312e33322e302f32342d3234203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:68:19:5b:42:a3:91:47:55:aa:96:7e:57:95:fd:2b:70:c0:
         5a:65:7e:84:b6:84:5a:30:b6:d9:22:c0:12:8e:1b:a2:95:d0:
         e9:95:cf:d8:e8:f0:d7:1a:97:fd:59:13:e5:70:99:d7:98:5e:
         5e:51:0e:c5:75:42:cb:a1:18:62:13:1e:e0:a9:8e:11:e9:96:
         52:65:42:d6:f8:1e:e6:3e:df:a6:54:64:76:31:fe:d4:56:3f:
         60:08:60:23:3d:5b:52:00:41:b9:07:7c:b6:66:fb:3a:d9:99:
         41:4a:9b:34:2c:5a:ea:6c:b5:13:89:4d:9c:b4:7f:39:51:c8:
         a2:19:f7:89:fe:0c:aa:8d:59:49:b8:21:1b:38:97:6a:b0:f6:
         ea:c2:f3:ab:75:60:61:38:e7:e1:c3:bd:b3:e3:ae:23:fe:6e:
         f5:5f:00:73:42:e9:e9:b3:d5:d9:04:7b:45:c8:a3:ad:43:85:
         7c:49:5b:f8:7e:38:cf:94:ec:27:0e:46:5b:49:c2:58:20:26:
         ba:ed:16:80:65:9c:84:cf:9b:65:94:32:59:60:04:06:47:2e:
         a0:23:aa:7f:25:97:ad:3e:c1:1c:71:7e:d8:15:fb:3e:4c:0b:
         ff:c7:32:02:fc:ef:9e:ec:18:88:b3:04:aa:ec:27:e8:49:9f:
         c5:a3:4d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org