Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139362e302f32322d3232203d3e20323633313433.roa
File:                     3139312e3234322e3139362e302f32322d3232203d3e20323633313433.roa (raw, json)
Hash identifier:          sWy0LPeh1qBJ4gXDvQoM/tyPMa4OtEmF8bmzSOfCiZw=
Subject key identifier:   EC:B3:15:4C:EC:4B:16:78:CD:13:AE:62:AB:BF:52:53:A8:2B:BD:D5
Certificate issuer:       /CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
Certificate serial:       3805A68336E25C5CA5F89269B4E51FB410574F21
Authority key identifier: C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139362e302f32322d3232203d3e20323633313433.roa
Signing time:             Mon 22 Jan 2024 13:46:24 +0000
ROA not before:           Mon 22 Jan 2024 13:41:24 +0000
ROA not after:            Mon 20 Jan 2025 13:46:24 +0000
asID:                     263143
IP address blocks:        191.242.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:05:a6:83:36:e2:5c:5c:a5:f8:92:69:b4:e5:1f:b4:10:57:4f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
        Validity
            Not Before: Jan 22 13:41:24 2024 GMT
            Not After : Jan 20 13:46:24 2025 GMT
        Subject: CN=ECB3154CEC4B1678CD13AE62ABBF5253A82BBDD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:3a:48:76:89:dd:d0:80:52:87:79:34:25:
                    d4:77:53:22:b0:b9:77:a2:d9:23:b0:a8:4b:7b:23:
                    eb:b6:eb:2e:71:7c:4a:c2:d3:5d:05:3e:94:50:0f:
                    7c:85:8e:bf:d5:a4:27:92:c7:cf:d2:93:99:77:9f:
                    b9:ce:d3:8f:d4:91:47:f6:df:7a:51:7d:72:42:51:
                    7d:57:8c:a2:0e:61:b8:9b:5e:22:78:52:1f:35:a9:
                    ba:c3:6f:37:a6:fd:af:bc:a5:2b:41:9b:d2:d4:5c:
                    94:64:6b:37:f2:bd:83:14:de:30:a1:d9:f0:83:b5:
                    a6:f4:de:46:67:e4:73:88:1d:8b:3e:e5:ed:63:2a:
                    36:18:e3:14:c7:35:31:5f:85:74:a4:a0:62:6b:12:
                    73:41:86:25:3c:28:1b:48:41:c7:ff:15:c9:36:b6:
                    ec:96:17:f3:c3:75:de:8f:48:99:a6:05:bf:3b:9b:
                    4b:f1:10:ee:f2:72:82:a3:d1:c6:c0:8d:11:4b:13:
                    08:db:a2:8a:13:c1:a0:22:25:6c:cc:8a:4e:2d:57:
                    1f:46:4e:70:66:6c:22:1d:63:de:b4:f3:b3:06:bf:
                    c7:79:de:37:93:b6:d0:ac:c5:75:a4:26:87:11:9d:
                    f4:59:86:6f:49:b0:6a:62:91:7a:9f:9f:5b:50:54:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B3:15:4C:EC:4B:16:78:CD:13:AE:62:AB:BF:52:53:A8:2B:BD:D5
            X509v3 Authority Key Identifier:
                keyid:C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139362e302f32322d3232203d3e20323633313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:2a:9a:ed:4e:32:c0:d8:6b:3e:57:f3:8a:4d:8f:3f:a1:0f:
         a9:3e:3c:b2:e8:1e:d0:55:5e:02:c4:b1:ec:f7:0a:33:33:0e:
         62:81:40:d9:b2:cf:7d:16:bd:aa:b6:9f:b2:68:93:12:51:36:
         6c:66:fd:53:6c:e8:34:6c:0d:6f:dc:38:fc:f5:34:12:7d:79:
         c0:72:63:1c:3b:46:21:b2:38:c3:6f:75:4c:cd:dc:8a:d5:b8:
         b7:ca:56:0b:9b:1b:76:8a:31:c2:6e:0b:bd:ce:46:18:a0:ea:
         7c:17:e7:ee:76:e1:bb:67:f1:3b:e6:09:6b:1d:4e:3b:9b:4b:
         27:45:25:a1:bc:f4:87:e4:13:76:1f:1a:40:f5:3e:4c:fa:c2:
         de:31:06:7f:b2:6e:da:8a:f5:56:e6:8f:65:81:40:ab:88:74:
         1c:da:00:c9:9f:56:a1:b7:1a:37:ee:2d:cc:56:b2:02:99:9f:
         9f:3f:fe:9c:6e:0e:4f:dd:4b:b6:48:ce:37:10:0e:2f:d9:ed:
         1f:6e:67:90:8c:8b:01:05:41:30:74:86:78:46:81:44:3d:fe:
         08:02:3a:39:a6:4b:55:8b:cf:0d:b8:3b:95:5f:7d:6e:5f:62:
         63:98:16:65:f7:21:15:0c:c8:7e:c7:a2:f0:92:8c:06:be:a6:
         d3:f9:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:46 2024 by rpki-client on console-ams.rpki-client.org