Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/3139312e3234312e3136302e302f32312d3332203d3e203532393034.roa
File:                     3139312e3234312e3136302e302f32312d3332203d3e203532393034.roa (raw, json)
Hash identifier:          yO2UQ1NUhls2XWktA3lANhyAcOR7nJHSNcQUTBEXNMA=
Subject key identifier:   8D:42:9A:AC:07:EC:B6:11:4E:22:EF:31:2D:48:29:25:9C:E2:50:0C
Certificate issuer:       /CN=BA4D23DDD351268248A9A4E5B5669044ABA2F7F0
Certificate serial:       5278E9E33312B2E77390868112DFEAD93F2A93D8
Authority key identifier: BA:4D:23:DD:D3:51:26:82:48:A9:A4:E5:B5:66:90:44:AB:A2:F7:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4D23DDD351268248A9A4E5B5669044ABA2F7F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/3139312e3234312e3136302e302f32312d3332203d3e203532393034.roa
Signing time:             Sat 01 Jul 2023 13:32:35 +0000
ROA not before:           Sat 01 Jul 2023 13:27:35 +0000
ROA not after:            Sat 29 Jun 2024 13:32:35 +0000
asID:                     52904
IP address blocks:        191.241.160.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:78:e9:e3:33:12:b2:e7:73:90:86:81:12:df:ea:d9:3f:2a:93:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4D23DDD351268248A9A4E5B5669044ABA2F7F0
        Validity
            Not Before: Jul  1 13:27:35 2023 GMT
            Not After : Jun 29 13:32:35 2024 GMT
        Subject: CN=8D429AAC07ECB6114E22EF312D4829259CE2500C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:3a:e0:eb:bc:e6:f4:3f:45:e4:f8:3f:88:
                    73:df:54:6b:e4:2a:ad:0f:41:17:ab:b3:6f:ba:ed:
                    4e:c6:6f:a8:f9:ec:ad:0a:fe:b7:87:33:1f:d6:19:
                    c3:40:45:5b:a0:5a:a1:a1:bb:18:cc:5f:52:2b:88:
                    67:c6:2a:10:7b:a8:5d:0c:04:75:1f:e0:2f:78:80:
                    08:51:ae:da:c8:4e:ca:ff:c0:b8:68:10:38:18:25:
                    88:db:99:d3:ec:3d:3e:3b:33:7c:c2:0f:81:8a:17:
                    c4:a8:a7:05:a0:15:77:16:3f:37:d1:3b:f9:88:cb:
                    6b:40:03:46:80:db:c2:c9:68:59:1a:cf:0c:7d:e6:
                    96:29:04:6b:f4:1f:6f:59:8e:ef:4b:f2:21:c7:3d:
                    c0:2d:8b:38:98:db:ef:61:e9:d7:09:b5:75:d8:da:
                    08:91:1e:fa:d8:17:34:01:b9:7e:70:89:51:65:c1:
                    14:80:7d:98:eb:65:d7:b1:b1:a2:78:c3:07:68:4e:
                    d5:b5:09:85:33:38:eb:80:1c:bf:1c:f3:90:62:5d:
                    b4:ff:b9:2b:20:e2:a7:34:a5:0c:d1:b6:58:53:58:
                    15:95:bb:f5:4c:03:f7:c7:d9:e4:db:8c:6d:20:63:
                    37:c5:a9:66:e5:5c:17:82:c5:1b:11:81:0d:ff:af:
                    76:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:42:9A:AC:07:EC:B6:11:4E:22:EF:31:2D:48:29:25:9C:E2:50:0C
            X509v3 Authority Key Identifier:
                keyid:BA:4D:23:DD:D3:51:26:82:48:A9:A4:E5:B5:66:90:44:AB:A2:F7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/BA4D23DDD351268248A9A4E5B5669044ABA2F7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4D23DDD351268248A9A4E5B5669044ABA2F7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/3139312e3234312e3136302e302f32312d3332203d3e203532393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:03:ce:14:7d:e0:c8:b9:2d:c9:03:2a:69:b9:ec:00:2c:60:
         52:2d:ff:66:5c:8e:67:53:7e:2b:30:d0:60:ae:81:e2:64:b9:
         47:bc:fc:cb:3c:19:7c:27:0e:9c:c1:a8:0f:c3:fd:ee:6d:a8:
         97:76:65:89:86:7b:da:c5:65:be:20:a7:a1:5f:87:a1:8a:7c:
         89:6f:4a:b6:27:10:00:f9:4c:b8:3d:8c:1c:88:c6:b3:c8:6f:
         95:76:3c:dd:27:67:f0:25:5e:72:e6:d6:72:c2:62:89:bc:27:
         12:88:dd:fe:70:bb:60:2e:9e:af:40:a9:d9:01:18:52:39:1b:
         dc:e7:9e:84:17:2d:b3:40:2b:c2:5e:af:cd:f3:1f:a2:16:cb:
         af:7d:05:6f:09:56:c8:28:9e:71:6b:ac:91:f6:df:82:8f:34:
         54:65:82:08:d6:48:a5:75:7a:9a:3b:9b:c6:cc:8e:5e:6a:4d:
         04:ee:db:53:db:99:40:a9:b8:59:63:76:25:d8:46:1d:37:1f:
         c9:83:5b:95:75:ab:df:81:30:d3:4b:99:d1:50:5d:55:f9:1e:
         4d:ae:a7:64:fb:c8:51:7f:5e:44:e8:13:f1:c0:19:a9:e5:5d:
         4c:a7:4a:d1:bc:ae:f0:21:30:93:01:a4:ec:0e:46:d5:5c:1c:
         ec:e1:2f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org