Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3139312e3234342e302e302f31342d3134203d3e203232303835.roa
File:                     3139312e3234342e302e302f31342d3134203d3e203232303835.roa (raw, json)
Hash identifier:          lZvT1hJWzXZwpNYkcqp4KbVn3CE4Y1I11bhXCHVJ6tU=
Subject key identifier:   72:E5:85:98:21:AC:42:2D:95:F8:F8:D1:B9:E1:4E:B0:C4:EF:A9:D4
Certificate issuer:       /CN=D215D0A29BA0041EB88859E15A706C978B675469
Certificate serial:       5732E8A96EE27530A16FBAE6B91FB8D76DDC1AA5
Authority key identifier: D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3139312e3234342e302e302f31342d3134203d3e203232303835.roa
Signing time:             Wed 14 Feb 2024 20:00:00 +0000
ROA not before:           Wed 14 Feb 2024 19:55:00 +0000
ROA not after:            Wed 12 Feb 2025 20:00:00 +0000
asID:                     22085
IP address blocks:        191.244.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:32:e8:a9:6e:e2:75:30:a1:6f:ba:e6:b9:1f:b8:d7:6d:dc:1a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D215D0A29BA0041EB88859E15A706C978B675469
        Validity
            Not Before: Feb 14 19:55:00 2024 GMT
            Not After : Feb 12 20:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a9:7c:f7:94:61:91:7c:77:fe:41:47:bd:24:
                    f7:5b:c2:98:b7:34:b0:e3:bf:11:92:b3:13:4c:85:
                    ab:a9:d8:c6:c8:d1:a1:8c:eb:7f:c2:b7:c2:fc:65:
                    98:07:b2:14:de:c9:88:c0:1e:d4:07:19:fe:26:38:
                    c0:96:ed:fc:d0:a9:40:ff:bc:11:d6:18:19:67:a9:
                    b9:e4:68:12:26:3a:76:ca:97:8d:2a:a2:93:05:14:
                    35:3e:89:eb:d1:6c:0a:01:8c:61:64:3e:e0:88:7f:
                    3a:d1:f9:45:cc:98:74:11:a3:e4:b9:ad:a3:e6:52:
                    36:d5:c4:35:94:d7:4e:59:cb:76:a0:ea:1b:a9:28:
                    47:9d:0b:4d:4f:80:1a:1e:a2:8f:49:14:ec:1c:b1:
                    8f:f0:c6:40:75:52:29:6d:2a:3c:bc:ac:6a:63:f2:
                    1e:a6:b1:6c:1d:47:db:04:3f:4b:87:c0:28:bd:d0:
                    69:24:77:7a:51:f1:c5:d6:ab:d9:a7:e5:70:ed:2c:
                    b2:6f:a4:00:e3:ab:c9:c2:f5:bc:32:0d:b8:d9:2d:
                    b6:8d:62:93:92:80:bc:f1:0d:49:33:3d:aa:3b:67:
                    d9:3a:6d:82:ff:0b:4d:fd:66:5d:c0:ab:1a:f0:02:
                    ac:2d:e0:61:22:85:8a:9c:d5:8b:04:8f:12:4f:b7:
                    a6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E5:85:98:21:AC:42:2D:95:F8:F8:D1:B9:E1:4E:B0:C4:EF:A9:D4
            X509v3 Authority Key Identifier:
                keyid:D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/D215D0A29BA0041EB88859E15A706C978B675469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3139312e3234342e302e302f31342d3134203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.244.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         21:4a:26:21:6c:3f:41:67:16:fa:d3:b1:40:e2:b4:c8:8d:8a:
         43:fe:82:d6:e6:69:fa:0e:66:db:a8:25:94:38:a3:ff:70:c0:
         1d:13:66:8a:6a:79:ac:70:60:44:a8:4c:99:9e:60:30:65:ee:
         12:3b:9f:c7:b8:a1:0c:78:ac:7f:c6:2b:fe:a1:88:d7:57:ba:
         0a:59:e2:75:7c:bc:87:20:cf:60:f0:97:ad:a0:8c:ed:9d:ed:
         a4:b6:bd:fd:88:5b:16:1c:4c:ac:ab:34:e2:d2:0b:28:f7:a6:
         7d:77:a8:c8:67:bb:62:f0:b2:65:4e:48:11:69:cb:63:43:f0:
         bb:bd:a2:37:eb:bb:45:16:82:e0:97:ca:b5:de:29:a2:20:19:
         f6:b4:b3:9b:13:a9:10:41:27:32:f1:3d:7d:27:34:ba:91:87:
         e6:e9:b0:dd:da:08:ab:52:1b:06:82:98:f2:e2:0e:39:78:2f:
         7c:0e:7b:b0:bb:ca:9e:71:f6:d5:fc:76:3d:be:be:79:44:dc:
         15:7b:d1:b3:ff:37:59:f6:d3:91:06:bf:08:4c:6a:21:18:72:
         83:7e:d7:d7:53:9c:6e:c3:83:54:95:48:dd:1d:d6:69:8d:d4:
         b3:f2:77:39:00:32:31:5a:ae:b3:f9:a4:63:b4:08:bb:3e:31:
         47:f2:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org