Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3139312e33372e31362e302f32312d3332203d3e20323633333439.roa
File:                     3139312e33372e31362e302f32312d3332203d3e20323633333439.roa (raw, json)
Hash identifier:          6loHwLASGr4W+RZPSOm2aHWbsByjcr8UGXcsyuOI+hc=
Subject key identifier:   B5:F6:4F:9F:60:71:5B:AA:E1:6C:7A:74:7B:83:A7:C6:B5:AE:BE:BA
Certificate issuer:       /CN=0EB322BE8A2D6EE5B7394A0E6E7EA34AB75D6C05
Certificate serial:       34AE38C3F6DDEA1442413541D3BC232541F00F89
Authority key identifier: 0E:B3:22:BE:8A:2D:6E:E5:B7:39:4A:0E:6E:7E:A3:4A:B7:5D:6C:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EB322BE8A2D6EE5B7394A0E6E7EA34AB75D6C05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3139312e33372e31362e302f32312d3332203d3e20323633333439.roa
Signing time:             Thu 22 Jun 2023 20:55:58 +0000
ROA not before:           Thu 22 Jun 2023 20:50:58 +0000
ROA not after:            Thu 20 Jun 2024 20:55:58 +0000
asID:                     263349
IP address blocks:        191.37.16.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ae:38:c3:f6:dd:ea:14:42:41:35:41:d3:bc:23:25:41:f0:0f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EB322BE8A2D6EE5B7394A0E6E7EA34AB75D6C05
        Validity
            Not Before: Jun 22 20:50:58 2023 GMT
            Not After : Jun 20 20:55:58 2024 GMT
        Subject: CN=B5F64F9F60715BAAE16C7A747B83A7C6B5AEBEBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e9:de:37:95:c4:ca:6d:bc:45:97:a7:11:a0:
                    bd:9e:11:d7:41:bc:4d:d5:bd:fe:e3:3e:ba:c3:8f:
                    cd:e7:fd:17:d7:77:d3:80:51:bc:21:b4:6a:fa:45:
                    73:c8:b9:92:9c:0d:ea:60:96:d3:71:6b:90:20:47:
                    4f:39:0e:43:46:e9:fb:c5:de:c0:56:74:4d:54:f9:
                    13:b7:d4:37:6b:b4:15:66:90:d8:c4:0d:9d:6e:da:
                    9c:00:a2:a2:77:f9:24:31:ba:32:35:de:13:3d:5c:
                    72:1c:ee:a0:dc:0e:74:0a:ce:63:ab:e8:f1:c1:8c:
                    77:b5:87:df:1c:c5:30:ca:79:b8:68:4c:8b:6e:7c:
                    20:4f:4b:17:6b:36:97:f4:bf:48:a5:3d:5c:05:a3:
                    af:1a:e8:d1:ca:ca:39:ef:75:9b:4c:e5:68:93:3d:
                    0b:fe:ef:84:e8:de:27:4d:ed:24:a9:3a:c2:00:79:
                    f0:60:e5:ea:a0:0f:03:7c:6f:a1:68:58:4b:af:4e:
                    c2:57:e7:0c:8c:dd:0a:3a:d9:38:59:76:c2:da:4f:
                    17:4d:2d:3d:95:e5:f7:86:fc:3b:46:a5:16:17:85:
                    f8:87:ee:63:94:a7:5f:2f:4f:ba:02:92:ce:24:4c:
                    a3:b6:92:57:0f:58:1d:37:47:28:9c:e4:bf:1b:4f:
                    65:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F6:4F:9F:60:71:5B:AA:E1:6C:7A:74:7B:83:A7:C6:B5:AE:BE:BA
            X509v3 Authority Key Identifier:
                keyid:0E:B3:22:BE:8A:2D:6E:E5:B7:39:4A:0E:6E:7E:A3:4A:B7:5D:6C:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0EB322BE8A2D6EE5B7394A0E6E7EA34AB75D6C05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EB322BE8A2D6EE5B7394A0E6E7EA34AB75D6C05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3139312e33372e31362e302f32312d3332203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:a9:9f:73:5d:8a:61:c5:21:96:08:a5:d3:be:d6:37:db:e1:
         d9:04:10:78:7f:fd:b9:35:59:a9:2e:cf:2a:c6:72:fb:39:a5:
         a8:90:ea:3c:95:df:3c:2a:12:99:37:6a:ae:22:92:4f:3e:2e:
         bf:43:b1:02:79:bd:cf:b9:bb:21:3c:e8:70:21:57:34:82:3a:
         dd:72:87:93:4a:a9:77:04:2f:f2:45:cc:f5:33:8e:95:f9:c4:
         e9:49:37:0f:8b:73:e4:66:37:7b:90:32:93:47:b4:35:3a:04:
         56:79:48:c0:d5:9b:b9:e8:56:c2:61:46:2d:1b:b3:91:c0:83:
         8e:7f:d6:23:69:d4:6d:32:31:23:f7:4f:94:cc:2c:82:25:6e:
         55:b6:dd:df:2e:03:01:eb:a0:77:69:20:30:58:a5:94:fc:11:
         c0:9d:7a:31:59:62:42:6b:6a:af:26:3a:34:86:14:03:fa:f2:
         1f:f9:1d:d7:f8:80:4f:e0:08:85:c6:1f:a7:a4:54:1c:ce:6b:
         37:84:d8:34:08:8d:69:ce:c2:48:46:ff:cd:74:35:86:1a:3e:
         7d:79:be:11:9b:2c:74:6f:09:e2:56:e8:15:3e:cd:8b:70:ad:
         f9:b4:f9:05:00:5d:02:c3:6d:6e:51:aa:a1:2f:6d:a9:ea:23:
         5a:73:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org