Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137322e302f32342d3234203d3e20323731333030.roa
File:                     3138392e39312e3137322e302f32342d3234203d3e20323731333030.roa (raw, json)
Hash identifier:          luXBM/td20eZKNP0b438BSakGNRZZSJhRUo5+NfEoPc=
Subject key identifier:   E1:91:BF:C6:AF:55:0F:35:2A:44:F3:F5:26:90:FE:55:E5:A1:92:88
Certificate issuer:       /CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
Certificate serial:       20FA6CE8668FC6D4BB8F995963AEAA141124CA1A
Authority key identifier: 1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137322e302f32342d3234203d3e20323731333030.roa
Signing time:             Wed 09 Nov 2022 20:12:48 +0000
ROA not before:           Wed 09 Nov 2022 20:07:48 +0000
ROA not after:            Wed 08 Nov 2023 20:12:48 +0000
asID:                     271300
IP address blocks:        189.91.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fa:6c:e8:66:8f:c6:d4:bb:8f:99:59:63:ae:aa:14:11:24:ca:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
        Validity
            Not Before: Nov  9 20:07:48 2022 GMT
            Not After : Nov  8 20:12:48 2023 GMT
        Subject: CN=E191BFC6AF550F352A44F3F52690FE55E5A19288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:07:89:67:59:bb:fd:a7:5a:b7:fc:65:47:
                    6a:34:a3:0f:ac:d6:e4:d1:b3:88:01:6d:a0:2a:e3:
                    d6:07:77:b4:49:3e:41:76:00:c0:54:1a:85:70:db:
                    6a:3f:5a:ad:2f:2a:a1:b9:54:c7:9d:1d:2d:57:47:
                    cd:1d:21:11:76:e9:d4:83:4f:86:f8:c6:ce:a3:86:
                    c1:23:61:99:cf:fc:ee:ed:8b:18:57:ee:3e:9e:7d:
                    fb:35:33:10:dc:6b:b1:14:b8:2e:f7:25:80:fd:25:
                    18:b3:07:87:7b:36:cb:cd:25:55:0e:db:a5:a4:c3:
                    c8:16:c9:56:27:61:51:38:47:2a:79:fa:b4:0f:d7:
                    45:68:00:39:53:49:cb:13:f2:2d:a8:e8:37:26:f3:
                    8f:2b:64:0d:0b:34:92:3d:27:ab:55:48:b6:71:23:
                    d7:63:b1:38:17:25:da:55:76:af:41:07:df:f5:87:
                    b9:06:6b:83:69:6d:00:49:ae:88:bc:11:d5:9e:9f:
                    98:ac:2c:0f:d0:31:32:14:3a:92:35:d8:1a:48:4c:
                    20:e8:46:78:83:f9:02:e0:79:17:3e:c0:e7:73:76:
                    b5:9a:70:16:64:02:83:7d:e0:25:f2:be:a9:82:c9:
                    22:9e:a3:1e:83:6b:9f:b6:47:43:bf:31:c2:6e:d1:
                    21:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:91:BF:C6:AF:55:0F:35:2A:44:F3:F5:26:90:FE:55:E5:A1:92:88
            X509v3 Authority Key Identifier:
                keyid:1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137322e302f32342d3234203d3e20323731333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:80:c7:70:93:01:c0:33:97:81:c3:91:4d:74:ae:cc:b9:2f:
         cd:1b:b5:86:45:de:2f:62:e1:60:09:80:7f:f7:90:9e:5b:b5:
         2a:bc:14:5a:6d:af:72:1d:ea:c8:31:75:38:d8:e1:50:97:ab:
         fa:1c:cd:66:64:ee:d6:86:e1:e5:6e:e0:98:e1:d8:c4:4f:d1:
         6f:09:96:3c:1e:0a:bf:f9:c1:8e:4d:5a:e3:06:7c:87:bf:a1:
         81:ba:aa:1c:4e:ab:4d:f0:3f:b7:a0:e0:c3:27:dc:0e:85:eb:
         d2:1c:87:6c:aa:c4:7f:c6:e0:12:35:1f:90:41:4d:3d:7f:fe:
         81:da:b2:63:24:f4:7c:05:b5:ad:ed:27:09:02:b0:00:86:d2:
         41:fc:8b:d0:da:23:4e:d0:2a:59:2e:ab:44:35:16:b1:74:3a:
         3b:d4:dd:c1:7f:30:fa:94:34:c7:d9:60:ca:49:42:9e:6f:e1:
         e6:2b:f1:20:6a:b8:e8:79:5f:66:6e:42:7e:58:dc:cb:70:c5:
         9f:58:1e:7a:6e:5b:ce:9b:d0:09:34:16:b1:eb:88:34:9f:57:
         f0:40:0d:7d:18:a4:ed:e8:bf:4c:62:cd:db:3f:86:31:e6:2d:
         98:20:03:64:41:07:98:20:99:e7:0e:b2:b9:08:c2:0e:19:5a:
         9f:56:34:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:39 2023 by rpki-client on console.sobornost.net