Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/3139322e3134312e33332e302f32342d3234203d3e20323637343538.roa
File:                     3139322e3134312e33332e302f32342d3234203d3e20323637343538.roa (raw, json)
Hash identifier:          tRyUXfSGUQkezoK5ZCQni2SADWi4HRak0u30yYIyHc0=
Subject key identifier:   E1:23:78:8D:78:B1:CB:9B:0F:5C:74:59:BE:6D:AB:3B:DB:B9:9B:1D
Certificate issuer:       /CN=6E8B64572C4C005FCD08B2B1AE1D7888490253E1
Certificate serial:       4FCE7EBC6C383AF6101FD3B67F3C31C9B7E9EDD5
Authority key identifier: 6E:8B:64:57:2C:4C:00:5F:CD:08:B2:B1:AE:1D:78:88:49:02:53:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E8B64572C4C005FCD08B2B1AE1D7888490253E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/3139322e3134312e33332e302f32342d3234203d3e20323637343538.roa
Signing time:             Mon 07 Feb 2022 12:09:37 +0000
ROA not before:           Mon 07 Feb 2022 12:04:37 +0000
ROA not after:            Mon 06 Feb 2023 12:09:37 +0000
asID:                     267458
IP address blocks:        192.141.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ce:7e:bc:6c:38:3a:f6:10:1f:d3:b6:7f:3c:31:c9:b7:e9:ed:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E8B64572C4C005FCD08B2B1AE1D7888490253E1
        Validity
            Not Before: Feb  7 12:04:37 2022 GMT
            Not After : Feb  6 12:09:37 2023 GMT
        Subject: CN=E123788D78B1CB9B0F5C7459BE6DAB3BDBB99B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:db:c7:9f:59:5f:41:c2:2f:d2:56:83:98:32:
                    cd:d8:ee:f2:06:e6:24:31:dc:ab:b0:1c:38:33:e1:
                    6d:10:d1:28:fa:8d:cb:af:75:e3:47:91:74:0a:f3:
                    78:f2:66:6c:3b:2f:8a:59:a8:10:96:b5:73:4d:8a:
                    5c:90:94:6e:15:9d:d9:5c:2f:f2:c0:c4:61:99:c0:
                    24:7c:54:ad:dd:de:3c:e5:c9:a3:1b:2f:16:57:44:
                    68:05:36:ed:de:23:4d:47:0a:3f:63:a7:5d:14:5d:
                    03:51:92:3d:47:ab:36:83:2c:7b:31:cc:d2:48:4c:
                    71:08:1b:11:9c:05:6f:ff:48:0c:af:79:35:c8:8e:
                    5f:17:ea:52:5d:f3:91:4e:31:28:ea:e6:47:26:76:
                    46:63:c0:a3:10:7e:97:16:c0:72:d5:f2:9b:b0:b1:
                    08:16:7a:e4:3d:28:b8:17:0d:1d:be:59:9c:ef:1c:
                    86:4c:c3:26:cc:2e:f6:d1:88:27:48:55:ce:28:77:
                    83:88:89:58:a3:58:9f:ae:dd:5f:c1:9d:59:ba:ed:
                    c4:1c:c7:c0:27:4b:3f:db:49:85:7e:b7:70:f2:c4:
                    79:f7:1f:fa:0a:db:64:96:5f:71:09:51:cf:3e:bf:
                    fd:b6:78:a9:4a:24:71:8f:e0:8e:eb:fe:65:43:92:
                    a6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:23:78:8D:78:B1:CB:9B:0F:5C:74:59:BE:6D:AB:3B:DB:B9:9B:1D
            X509v3 Authority Key Identifier:
                keyid:6E:8B:64:57:2C:4C:00:5F:CD:08:B2:B1:AE:1D:78:88:49:02:53:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/6E8B64572C4C005FCD08B2B1AE1D7888490253E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E8B64572C4C005FCD08B2B1AE1D7888490253E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/3139322e3134312e33332e302f32342d3234203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:0b:3c:ca:c7:9f:ab:d6:5d:4d:d6:08:ac:b2:14:a1:44:54:
         e5:a6:a6:dc:ee:18:1d:a2:1a:6e:3f:2c:7b:95:12:49:ad:09:
         aa:6e:0b:31:df:18:1b:86:2e:f2:1e:31:f3:2a:db:ac:1b:07:
         97:e1:e9:1a:be:4d:4d:66:a0:ec:e2:9b:c8:96:7d:c2:2c:43:
         6d:a5:ca:57:b5:83:08:ce:12:03:a1:a6:24:1d:31:8a:2e:1e:
         5d:5c:ee:ae:18:ef:0d:0d:2e:93:88:f5:0d:bd:51:8f:f6:5d:
         05:e5:b8:4e:b7:4c:97:ee:ed:0a:f6:72:8d:f3:03:39:57:2a:
         16:bf:b0:d6:2a:c1:ef:d3:bc:20:20:26:96:11:d6:f1:6f:8d:
         5f:b2:f8:d5:20:37:99:db:5a:02:20:e8:00:17:94:49:7a:44:
         4b:fa:1f:00:9f:bf:90:e2:17:1f:04:34:1d:65:fa:37:28:27:
         4b:88:05:52:ec:b4:38:55:4f:67:55:db:cc:06:b1:a5:19:67:
         5d:e2:86:df:ad:f8:aa:70:a2:7d:e3:10:87:55:fc:30:12:80:
         83:df:9a:2d:19:d3:4f:31:a7:30:a8:a5:e8:4a:3d:11:a0:1c:
         98:8d:0f:60:74:a0:ba:61:73:97:52:e5:a4:21:f2:47:f2:df:
         af:d2:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org