Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yy9Sxcys6VvT6AZPYdbkh1EyGxYcvJAzdYepCK1643k/0/3138362e3233322e39352e302f32342d3332203d3e20323633303534.roa
File:                     3138362e3233322e39352e302f32342d3332203d3e20323633303534.roa (raw, json)
Hash identifier:          V1ZB9PYJN6/feqsZuLVf5hNrsQQNi4X5fDbq1QcYoLo=
Subject key identifier:   91:F0:DC:89:F8:93:F7:BB:00:C4:67:BE:60:65:1F:D1:49:6A:00:44
Certificate issuer:       /CN=29930D4B8B89AE9FD0FD1A97F48C024FB3D5CF4E
Certificate serial:       4CD17E718C26E69832E789B30BEF4ED06945D482
Authority key identifier: 29:93:0D:4B:8B:89:AE:9F:D0:FD:1A:97:F4:8C:02:4F:B3:D5:CF:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29930D4B8B89AE9FD0FD1A97F48C024FB3D5CF4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yy9Sxcys6VvT6AZPYdbkh1EyGxYcvJAzdYepCK1643k/0/3138362e3233322e39352e302f32342d3332203d3e20323633303534.roa
Signing time:             Wed 02 Aug 2023 18:10:54 +0000
ROA not before:           Wed 02 Aug 2023 18:05:54 +0000
ROA not after:            Wed 31 Jul 2024 18:10:54 +0000
asID:                     263054
IP address blocks:        186.232.95.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d1:7e:71:8c:26:e6:98:32:e7:89:b3:0b:ef:4e:d0:69:45:d4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29930D4B8B89AE9FD0FD1A97F48C024FB3D5CF4E
        Validity
            Not Before: Aug  2 18:05:54 2023 GMT
            Not After : Jul 31 18:10:54 2024 GMT
        Subject: CN=91F0DC89F893F7BB00C467BE60651FD1496A0044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:df:cd:e1:80:d9:c4:43:8b:c6:71:07:33:
                    69:8c:80:c6:ff:34:d0:36:6e:03:a8:70:b2:51:77:
                    fa:66:2f:be:f3:e9:94:79:9d:f0:4b:5b:7e:9d:92:
                    45:b9:ba:a6:61:68:2a:b6:21:eb:86:ea:d5:25:26:
                    6f:ef:9c:52:7a:07:71:26:87:93:3a:27:5b:b8:b2:
                    11:0e:d7:f0:3b:fe:dc:e8:55:f5:c4:6e:7f:e7:54:
                    7e:db:fc:a7:97:dc:a2:bb:1d:45:a9:d1:1f:c6:00:
                    ed:5b:68:46:78:ca:97:76:6a:70:e1:57:c7:05:21:
                    20:19:2a:4b:b3:17:7c:0e:87:26:56:a6:65:d7:d8:
                    80:d6:d9:06:a4:3d:64:d5:48:47:b1:26:95:d8:d2:
                    07:a5:3f:5f:f8:77:f7:9e:8c:ac:40:bd:b2:91:88:
                    8e:11:30:c0:c1:4e:85:a1:75:ae:a6:50:5d:52:35:
                    72:c9:3b:98:cf:9c:f7:68:77:28:66:0d:41:4b:d1:
                    8e:43:81:91:e1:7d:29:31:0f:1e:97:af:56:0e:36:
                    e0:4a:10:4f:b4:6f:0f:4a:0d:ff:f0:4e:71:a4:dc:
                    7c:b7:a0:ee:68:34:7c:74:d5:ff:cd:bf:28:64:05:
                    1a:8b:57:9b:af:80:0d:e0:66:d9:0b:1e:2d:3c:fe:
                    7b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F0:DC:89:F8:93:F7:BB:00:C4:67:BE:60:65:1F:D1:49:6A:00:44
            X509v3 Authority Key Identifier:
                keyid:29:93:0D:4B:8B:89:AE:9F:D0:FD:1A:97:F4:8C:02:4F:B3:D5:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yy9Sxcys6VvT6AZPYdbkh1EyGxYcvJAzdYepCK1643k/0/29930D4B8B89AE9FD0FD1A97F48C024FB3D5CF4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29930D4B8B89AE9FD0FD1A97F48C024FB3D5CF4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yy9Sxcys6VvT6AZPYdbkh1EyGxYcvJAzdYepCK1643k/0/3138362e3233322e39352e302f32342d3332203d3e20323633303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:ca:df:07:16:c0:f7:c8:63:c9:9e:3b:d4:1a:d3:43:a3:67:
         05:3f:19:a4:29:74:6f:21:d9:35:53:0a:9c:6d:c9:f2:67:ab:
         13:ef:2c:8f:cc:1a:59:c8:55:0c:5b:66:04:f7:1b:0f:e7:06:
         14:b7:7d:1e:a2:02:94:44:77:f0:fc:c7:69:57:1e:3c:20:15:
         6e:45:a9:07:1b:87:ca:cf:4a:3d:b8:9a:5f:07:84:c3:7e:3d:
         7e:ef:2a:00:15:72:7c:a7:6f:43:f9:80:3e:59:1b:91:76:ba:
         05:0b:9a:40:48:50:17:a1:f5:99:a7:d0:cc:9d:c9:bb:4b:35:
         09:4b:ae:9a:a4:23:d0:4f:b5:da:10:14:90:41:34:34:73:66:
         ab:d3:f0:bf:0d:ee:da:a8:11:5f:75:16:14:20:f4:4f:56:f5:
         10:36:1a:7b:6f:9d:94:4a:04:08:88:2e:6b:8e:ae:bc:85:01:
         7d:53:f1:16:26:fd:8c:cc:c5:73:91:04:76:92:30:03:ee:ba:
         b2:6f:23:02:f5:79:0a:6a:4a:78:ec:65:a8:8b:92:a8:8b:e1:
         d2:df:67:32:34:86:6e:d0:ce:60:8b:20:a4:7a:54:7e:4a:37:
         16:0b:4c:68:1c:2b:6c:ea:2d:f2:47:41:36:71:5a:94:3e:15:
         05:e8:4c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org