Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/1/3139312e372e3139322e302f31392d3234203d3e20323633333237.roa
File:                     3139312e372e3139322e302f31392d3234203d3e20323633333237.roa (raw, json)
Hash identifier:          kMRfZMZNYAT6s74KbmANhf8PdpZ6Tj2uQxTHq5T4NZo=
Subject key identifier:   94:49:74:5E:7B:C8:B3:72:E5:38:F4:1F:49:16:C4:0A:08:4A:53:4F
Certificate issuer:       /CN=488761C1E9B493D5AD03511976F475CA3FB5705D
Certificate serial:       02730A37F0F8659AF633FF4E9C49C82B499E9F4D
Authority key identifier: 48:87:61:C1:E9:B4:93:D5:AD:03:51:19:76:F4:75:CA:3F:B5:70:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/488761C1E9B493D5AD03511976F475CA3FB5705D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/1/3139312e372e3139322e302f31392d3234203d3e20323633333237.roa
Signing time:             Thu 04 Apr 2024 20:00:38 +0000
ROA not before:           Thu 04 Apr 2024 19:55:38 +0000
ROA not after:            Thu 03 Apr 2025 20:00:38 +0000
asID:                     263327
IP address blocks:        191.7.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:73:0a:37:f0:f8:65:9a:f6:33:ff:4e:9c:49:c8:2b:49:9e:9f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488761C1E9B493D5AD03511976F475CA3FB5705D
        Validity
            Not Before: Apr  4 19:55:38 2024 GMT
            Not After : Apr  3 20:00:38 2025 GMT
        Subject: CN=9449745E7BC8B372E538F41F4916C40A084A534F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:8a:8e:99:75:04:99:72:3f:77:43:25:b0:
                    ec:e6:83:63:95:63:c7:a3:1f:6a:0a:8d:50:d5:53:
                    1a:f4:f0:de:86:b2:42:e7:1b:04:91:94:cc:f4:21:
                    5b:a2:1c:47:4a:d2:48:14:6f:90:7a:21:5e:ea:05:
                    bd:25:17:fe:dc:79:3a:80:6f:07:4e:fe:bb:bb:4f:
                    10:c9:26:12:55:42:e9:5f:04:63:ab:3f:a1:8b:16:
                    5f:34:93:e6:35:0f:1e:44:98:31:ec:f6:16:82:af:
                    a4:18:55:5c:1a:48:c1:28:9e:9b:ae:b1:4d:1a:6f:
                    2b:d1:a4:bf:cf:81:9b:71:bc:80:fa:09:7a:7d:3f:
                    93:11:42:56:1f:b7:06:b4:b6:b6:d4:20:59:c5:c3:
                    2c:9b:2c:0f:4c:47:fc:bd:1e:26:77:c0:9a:ea:2e:
                    ee:8c:84:28:2f:51:06:2e:ae:78:96:96:64:01:2c:
                    d3:a7:02:6b:b2:09:08:17:a5:e1:67:5b:02:e2:76:
                    a7:5d:4c:3d:36:cc:57:fc:6e:11:78:38:c2:8b:3f:
                    7b:60:d6:df:9d:51:8c:54:72:1f:cc:19:e4:a6:b6:
                    cf:16:7c:62:98:50:27:39:84:87:6e:b4:4c:76:f9:
                    03:ce:51:89:8f:d0:59:8d:36:18:d6:8c:c2:b9:5c:
                    0b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:49:74:5E:7B:C8:B3:72:E5:38:F4:1F:49:16:C4:0A:08:4A:53:4F
            X509v3 Authority Key Identifier:
                keyid:48:87:61:C1:E9:B4:93:D5:AD:03:51:19:76:F4:75:CA:3F:B5:70:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/1/488761C1E9B493D5AD03511976F475CA3FB5705D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/488761C1E9B493D5AD03511976F475CA3FB5705D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/1/3139312e372e3139322e302f31392d3234203d3e20323633333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         13:b5:1b:52:bf:e4:38:4f:93:17:47:df:c2:e6:1e:f6:69:a8:
         2c:bc:35:47:70:5f:eb:1d:8d:dc:ab:6e:76:ad:eb:d9:ce:35:
         6a:e9:8a:1d:4a:c4:97:6b:9e:56:aa:58:ba:81:fd:37:63:c8:
         ee:78:6e:de:5c:a8:8f:18:ee:6c:20:81:76:84:53:33:e5:17:
         13:e5:22:11:0f:8c:d2:87:c4:c8:f1:f3:22:b4:fd:70:de:95:
         a8:0f:84:01:33:bc:52:c3:32:40:b1:07:91:0a:4e:94:1a:af:
         7f:72:2e:85:04:82:7b:1f:26:bf:59:2b:23:55:f3:ff:b0:84:
         ab:91:5f:cd:02:97:69:6d:1b:42:02:0e:9a:3f:7c:af:43:cb:
         6e:6b:74:07:24:a6:17:57:cb:44:db:d5:7b:94:44:47:aa:5b:
         1f:32:af:62:00:eb:7a:a9:3b:9e:ec:a5:fb:96:90:6b:8f:e9:
         9c:08:e8:4f:3c:5d:9b:a3:58:b8:d9:d7:a3:cb:ad:b3:2a:b3:
         2d:89:a3:c7:f7:be:eb:e6:0d:ab:00:d0:49:8c:63:19:4c:ed:
         57:cc:67:f5:ae:f4:ac:0e:a3:b2:7e:f8:8d:d9:4a:0d:9c:01:
         5b:47:4d:4c:68:53:5b:e3:de:b1:11:25:64:f2:84:f6:97:b5:
         46:17:f8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:34 2024 by rpki-client on console-ams.rpki-client.org