Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3139312e33372e31362e302f32312d3234203d3e20323633333439.roa
File:                     3139312e33372e31362e302f32312d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          DeECB1wSsfXhnWxD47/ti0CFMIPQa6gluyyJETGiPvY=
Subject key identifier:   BB:E0:50:EA:9D:BF:02:BB:35:A7:92:75:35:3D:47:74:8B:63:8E:62
Certificate issuer:       /CN=DD91AC02268CF5FD5513C24264D7E77FF26A8D1F
Certificate serial:       36DDDCE13CF80F77637FEA1350051DA55F41DA6C
Authority key identifier: DD:91:AC:02:26:8C:F5:FD:55:13:C2:42:64:D7:E7:7F:F2:6A:8D:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD91AC02268CF5FD5513C24264D7E77FF26A8D1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3139312e33372e31362e302f32312d3234203d3e20323633333439.roa
Signing time:             Wed 06 Jul 2022 23:37:11 +0000
ROA not before:           Wed 06 Jul 2022 23:32:11 +0000
ROA not after:            Wed 05 Jul 2023 23:37:11 +0000
asID:                     263349
IP address blocks:        191.37.16.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:dd:dc:e1:3c:f8:0f:77:63:7f:ea:13:50:05:1d:a5:5f:41:da:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD91AC02268CF5FD5513C24264D7E77FF26A8D1F
        Validity
            Not Before: Jul  6 23:32:11 2022 GMT
            Not After : Jul  5 23:37:11 2023 GMT
        Subject: CN=BBE050EA9DBF02BB35A79275353D47748B638E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:21:20:83:40:d9:5c:30:c4:6b:2b:6d:ec:
                    83:21:10:75:34:12:f0:5c:29:6f:df:5c:66:b8:f2:
                    f3:46:fe:2a:f7:6b:0a:67:00:b8:16:2a:39:7e:4b:
                    8f:7a:46:a6:59:73:7b:b4:12:8b:d6:9c:67:26:f6:
                    5b:1f:69:cc:f2:7c:1e:b4:a2:ad:f5:da:20:04:7f:
                    4a:71:84:55:0f:4b:a1:75:3a:4a:f2:1c:78:82:c9:
                    3c:82:5f:e4:e8:92:32:41:a1:ce:10:a0:88:d9:8a:
                    19:98:44:42:19:27:e7:3d:23:27:c8:e6:16:c0:21:
                    b1:56:3e:d1:b8:59:7a:f5:3e:ce:ef:69:06:7f:36:
                    27:8a:ef:e0:d9:dc:cf:b2:f1:5f:52:a5:75:1e:01:
                    f5:b0:d7:ed:2b:ca:49:56:a7:7e:0f:06:18:c6:c1:
                    13:00:18:4b:dc:45:71:56:d6:16:1d:10:1b:21:34:
                    76:54:6c:59:96:d8:a5:98:dd:b9:cf:35:f5:a8:6c:
                    3a:90:62:18:a6:fc:d4:dc:c2:7a:70:4d:73:0c:03:
                    de:85:5f:1e:0f:f5:15:07:f1:41:39:88:9b:a5:da:
                    89:21:f4:fb:fa:36:3b:50:f9:50:46:70:fc:d7:05:
                    75:87:b3:12:f7:3c:df:b9:5f:97:45:d2:67:e5:f5:
                    ce:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E0:50:EA:9D:BF:02:BB:35:A7:92:75:35:3D:47:74:8B:63:8E:62
            X509v3 Authority Key Identifier:
                keyid:DD:91:AC:02:26:8C:F5:FD:55:13:C2:42:64:D7:E7:7F:F2:6A:8D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/DD91AC02268CF5FD5513C24264D7E77FF26A8D1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD91AC02268CF5FD5513C24264D7E77FF26A8D1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3139312e33372e31362e302f32312d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ba:51:0c:1d:be:a9:69:f1:c2:16:f4:96:7f:5e:f2:8f:bf:f0:
         96:8f:a7:a0:09:1e:8e:e1:22:a0:60:f7:d2:a7:ad:05:00:69:
         04:df:4e:cd:37:3a:27:a2:2a:ac:8f:70:50:19:f6:77:1c:f9:
         9a:83:15:c6:b9:58:16:07:1a:bb:86:f1:66:2c:7a:80:41:06:
         5e:59:04:3c:ea:2d:d5:92:b3:16:d0:7b:e0:27:ef:3d:48:f9:
         34:c3:ee:9a:67:6d:0b:6d:ce:83:db:d6:e4:2e:f7:de:ba:59:
         4c:9b:7a:56:ef:d8:9e:a3:68:4e:40:2b:5b:3d:4c:df:c9:28:
         fa:ef:c3:d4:03:79:f8:a2:4c:83:e1:32:84:6f:c0:2c:21:7a:
         c1:d8:50:54:ad:d5:a9:cc:cc:86:be:fe:e9:c1:66:a1:f8:72:
         6e:f7:45:f5:a1:83:46:30:cb:71:b9:2b:07:b6:75:71:07:10:
         ba:24:71:bd:80:18:9b:a3:2b:92:7b:b8:d5:1a:c7:ac:07:a0:
         ff:79:ec:17:28:f9:41:bc:0a:ae:e4:4b:4d:ef:fe:d1:6b:ff:
         93:e6:54:c2:46:7d:4f:0d:8b:3b:f1:a0:ef:7c:02:66:8f:80:
         f2:e4:e7:85:95:6c:45:e9:f5:cc:f3:be:01:da:7c:93:68:79:
         b4:9c:c7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org