Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/3139312e3234312e3136302e302f32312d3234203d3e203532393034.roa
File:                     3139312e3234312e3136302e302f32312d3234203d3e203532393034.roa (raw, json)
Hash identifier:          j2yp6I6i1fjBAS2TwgEibSCBUZ+kmXBK44C+JKeAm8Q=
Subject key identifier:   9D:F6:8A:96:7A:B2:0A:F3:51:06:C8:F1:A0:BE:0E:C5:8C:50:D6:44
Certificate issuer:       /CN=8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB
Certificate serial:       0F8A48A626351E52953041EBD196F3BB87C44914
Authority key identifier: 8C:6E:A6:74:D5:B6:AA:95:8B:C9:F7:C3:4A:F1:B6:9F:8E:9D:79:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/3139312e3234312e3136302e302f32312d3234203d3e203532393034.roa
Signing time:             Tue 26 Jul 2022 19:00:01 +0000
ROA not before:           Tue 26 Jul 2022 18:55:01 +0000
ROA not after:            Wed 26 Jul 2023 19:00:01 +0000
asID:                     52904
IP address blocks:        191.241.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8a:48:a6:26:35:1e:52:95:30:41:eb:d1:96:f3:bb:87:c4:49:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB
        Validity
            Not Before: Jul 26 18:55:01 2022 GMT
            Not After : Jul 26 19:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6b:36:91:b2:b6:40:e9:56:40:c2:fd:45:c5:
                    2b:ee:5d:b1:0c:13:9f:c5:55:79:7a:88:4d:1f:f5:
                    ff:42:41:75:60:9b:3a:31:d2:cc:da:03:f0:42:ea:
                    5a:35:f8:9a:ff:08:6d:d3:e6:43:9f:bb:5f:7c:94:
                    a9:53:db:bc:03:6f:2f:3c:81:e8:8d:db:ce:64:5a:
                    6a:27:95:3d:01:0b:ba:b6:a4:e5:b2:dc:9b:85:bb:
                    9e:69:f1:4e:ed:f4:98:81:d5:0e:2d:b0:eb:06:7e:
                    fe:c1:29:03:c4:4e:0a:51:4b:4c:38:e6:ed:9e:fe:
                    91:53:c6:38:6f:1d:1c:91:70:a8:5a:b1:2a:e7:44:
                    13:2c:a0:f3:77:ae:59:23:c8:1a:55:9b:0b:3e:f2:
                    d1:fa:9d:5e:df:79:64:13:77:06:15:77:88:a7:11:
                    f7:13:b8:3f:b7:52:95:a7:dc:93:24:f4:a5:3d:a6:
                    9e:04:72:15:60:56:cc:5d:eb:ba:37:70:6c:ba:d5:
                    f1:59:0d:b0:95:6b:ce:30:e6:f9:6b:bd:c4:08:3a:
                    93:82:e5:2a:58:97:0c:d2:1d:30:f5:f2:3a:c8:f6:
                    6d:5e:97:d8:9b:5c:41:b8:a8:9a:e6:7c:0b:96:bb:
                    a3:a1:94:a9:89:79:3e:7d:f2:58:8d:92:32:da:a3:
                    e2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F6:8A:96:7A:B2:0A:F3:51:06:C8:F1:A0:BE:0E:C5:8C:50:D6:44
            X509v3 Authority Key Identifier:
                keyid:8C:6E:A6:74:D5:B6:AA:95:8B:C9:F7:C3:4A:F1:B6:9F:8E:9D:79:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/3139312e3234312e3136302e302f32312d3234203d3e203532393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:6f:07:d6:96:d0:68:89:b8:ef:49:aa:03:8a:99:f0:15:2d:
         45:f9:92:3d:9f:a1:cb:9e:c5:80:52:74:c7:b3:d5:19:72:10:
         b3:55:4d:8e:65:3e:01:3d:7f:bc:a5:26:72:2f:b5:e5:35:eb:
         5f:53:fd:d4:05:fa:f6:f9:5f:d4:9e:5b:62:cf:c1:c4:df:6d:
         08:21:02:39:fb:fb:ea:32:2c:2f:2f:84:d6:69:1e:e1:18:4f:
         9e:70:8f:f1:38:9b:f6:24:28:70:4a:2c:fa:17:6b:9c:72:f7:
         f5:a8:42:de:5c:02:45:e8:2c:6d:7f:e0:a9:88:85:5c:73:89:
         6d:d2:83:e3:82:74:e8:59:48:10:3f:0e:04:a1:79:d3:8a:8b:
         d6:72:34:e3:8c:3b:2e:bb:4d:b7:5a:42:dc:f1:58:e1:ee:cd:
         b6:80:c9:20:8e:d3:67:51:a0:af:72:73:37:3c:d4:eb:1d:ed:
         cc:14:38:f4:f7:ba:1f:96:27:e7:0d:d4:4e:95:3a:97:75:40:
         18:ee:f1:7b:22:95:da:2d:ce:16:70:90:62:72:ca:d9:ce:ee:
         9c:70:49:ba:b6:16:4c:6e:8c:e8:1e:fb:e5:61:16:f9:76:57:
         4e:bd:54:13:cd:f5:5a:4c:f6:59:26:b7:93:8f:19:ca:45:60:
         4f:da:86:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org