Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/3139312e3234312e3136302e302f32312d3234203d3e203532393034.roa
File:                     3139312e3234312e3136302e302f32312d3234203d3e203532393034.roa (raw, json)
Hash identifier:          eMB+AEBu/YupshOlnGDw9k+xgWNO6AMFiyLh9NnURq8=
Subject key identifier:   F3:89:8C:49:46:F3:1A:91:1A:7A:E5:ED:43:46:F5:C5:A6:3B:8E:F4
Certificate issuer:       /CN=8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB
Certificate serial:       2D0AEF4BBCE71C78FCE12CF9F1DA34F0E3BD2E83
Authority key identifier: 8C:6E:A6:74:D5:B6:AA:95:8B:C9:F7:C3:4A:F1:B6:9F:8E:9D:79:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/3139312e3234312e3136302e302f32312d3234203d3e203532393034.roa
Signing time:             Wed 28 Jun 2023 20:00:00 +0000
ROA not before:           Wed 28 Jun 2023 19:55:00 +0000
ROA not after:            Fri 28 Jun 2024 20:00:00 +0000
asID:                     52904
IP address blocks:        191.241.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0a:ef:4b:bc:e7:1c:78:fc:e1:2c:f9:f1:da:34:f0:e3:bd:2e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB
        Validity
            Not Before: Jun 28 19:55:00 2023 GMT
            Not After : Jun 28 20:00:00 2024 GMT
        Subject: CN=3082010A0282010100C3FF887221AAB0EC256620EED580ED639F371DFF8024926E6D30F0CF61EC913F2C186920A98F2E728D65A6A68DA8593E22D8AB7AD2042EE96A2F604E39EF4AD55A5E51183FDA316D989D968617217423547F3E4EF9ACDE640010FAF30FCE0D06940B8E5181955DDB9A84B423A06A4CCEB04D47CA6276534100BF150C66863156DB222EAB5A0C25414495D20F5AE6886FB258EAA43E01BECDD59ABCCC66DDD13EB7F161211913459D9F81A9193A09A5EF474986DC5BB88B597B38DAC7EBFB29B8BAA29E4B45B9E75ED95168BED3B3698173E219FC995D29DF0CFD811246250D2267AE392AE46FD145DBEB349EB459759EAE74094383B2679FEF49B5480909B5990203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ff:88:72:21:aa:b0:ec:25:66:20:ee:d5:80:
                    ed:63:9f:37:1d:ff:80:24:92:6e:6d:30:f0:cf:61:
                    ec:91:3f:2c:18:69:20:a9:8f:2e:72:8d:65:a6:a6:
                    8d:a8:59:3e:22:d8:ab:7a:d2:04:2e:e9:6a:2f:60:
                    4e:39:ef:4a:d5:5a:5e:51:18:3f:da:31:6d:98:9d:
                    96:86:17:21:74:23:54:7f:3e:4e:f9:ac:de:64:00:
                    10:fa:f3:0f:ce:0d:06:94:0b:8e:51:81:95:5d:db:
                    9a:84:b4:23:a0:6a:4c:ce:b0:4d:47:ca:62:76:53:
                    41:00:bf:15:0c:66:86:31:56:db:22:2e:ab:5a:0c:
                    25:41:44:95:d2:0f:5a:e6:88:6f:b2:58:ea:a4:3e:
                    01:be:cd:d5:9a:bc:cc:66:dd:d1:3e:b7:f1:61:21:
                    19:13:45:9d:9f:81:a9:19:3a:09:a5:ef:47:49:86:
                    dc:5b:b8:8b:59:7b:38:da:c7:eb:fb:29:b8:ba:a2:
                    9e:4b:45:b9:e7:5e:d9:51:68:be:d3:b3:69:81:73:
                    e2:19:fc:99:5d:29:df:0c:fd:81:12:46:25:0d:22:
                    67:ae:39:2a:e4:6f:d1:45:db:eb:34:9e:b4:59:75:
                    9e:ae:74:09:43:83:b2:67:9f:ef:49:b5:48:09:09:
                    b5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:89:8C:49:46:F3:1A:91:1A:7A:E5:ED:43:46:F5:C5:A6:3B:8E:F4
            X509v3 Authority Key Identifier:
                keyid:8C:6E:A6:74:D5:B6:AA:95:8B:C9:F7:C3:4A:F1:B6:9F:8E:9D:79:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/3139312e3234312e3136302e302f32312d3234203d3e203532393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:b8:44:3d:61:ba:a8:99:66:e4:a1:e6:c2:b1:e8:62:9e:e9:
         a2:58:55:71:ae:e3:86:e2:23:f1:2a:35:60:9e:c6:ce:42:52:
         5b:a1:3b:af:e4:fa:a4:31:86:f3:e0:ea:6b:69:0a:15:09:42:
         41:d5:f5:df:da:3c:45:0d:9d:f7:5d:f5:36:d7:46:b0:7b:98:
         34:82:15:15:87:a2:63:ae:c2:e9:87:f1:ce:ef:86:49:7b:6d:
         17:7d:6c:5c:09:01:ae:ee:44:77:f2:7f:72:5e:9c:bb:51:4a:
         a1:4a:05:54:09:1e:ee:1a:ed:77:b0:21:52:24:9d:71:0f:ef:
         4f:c6:32:0c:37:5d:dd:11:57:d4:ab:b7:1c:79:9b:d1:3c:ea:
         aa:da:01:4a:59:0c:b9:d7:66:d1:9d:91:5e:c2:38:bd:3b:44:
         92:cd:fa:e9:9c:3b:f6:29:98:d4:c9:20:61:c8:f3:ad:6f:a8:
         3c:df:c7:35:b9:c3:12:a8:f8:0a:ca:ac:45:e9:97:b4:61:ce:
         34:5d:6e:68:37:83:4b:55:4e:10:e6:00:16:47:b9:cd:2d:be:
         57:b3:a2:36:30:76:47:0d:f4:48:c4:fc:3b:4d:2a:fd:a8:2b:
         1b:96:d8:17:d8:1f:fc:f8:b4:83:e0:73:18:73:e1:36:30:7c:
         f6:0d:9b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org