Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/3139312e3234322e3230342e302f32322d3232203d3e20323633343830.roa
File:                     3139312e3234322e3230342e302f32322d3232203d3e20323633343830.roa (raw, json)
Hash identifier:          IKy6jXlenap3BueR5XCZ9yimgsiXLty5VAoAFjRbXpI=
Subject key identifier:   A8:27:A9:05:D0:9D:7E:D4:14:BE:55:7D:D8:4B:F7:B8:ED:F7:48:25
Certificate issuer:       /CN=5442614336999E86885B6AC9A40CA8953FC17D75
Certificate serial:       52D4D11AB3CE60655C76EF0CEC50D8FCE388D6D5
Authority key identifier: 54:42:61:43:36:99:9E:86:88:5B:6A:C9:A4:0C:A8:95:3F:C1:7D:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5442614336999E86885B6AC9A40CA8953FC17D75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/3139312e3234322e3230342e302f32322d3232203d3e20323633343830.roa
Signing time:             Thu 09 Nov 2023 23:11:45 +0000
ROA not before:           Thu 09 Nov 2023 23:06:45 +0000
ROA not after:            Thu 07 Nov 2024 23:11:45 +0000
asID:                     263480
IP address blocks:        191.242.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d4:d1:1a:b3:ce:60:65:5c:76:ef:0c:ec:50:d8:fc:e3:88:d6:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5442614336999E86885B6AC9A40CA8953FC17D75
        Validity
            Not Before: Nov  9 23:06:45 2023 GMT
            Not After : Nov  7 23:11:45 2024 GMT
        Subject: CN=A827A905D09D7ED414BE557DD84BF7B8EDF74825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9e:be:bd:93:ba:e1:a5:48:ef:ef:86:6d:6b:
                    2d:23:61:f7:f1:b0:33:d7:bb:1a:ac:61:79:00:30:
                    60:6f:9b:82:33:0e:6e:cd:d0:b5:83:f0:38:66:d0:
                    0c:16:1c:de:cc:03:52:91:d0:33:a2:ab:cd:c1:73:
                    26:5e:56:8a:fa:71:11:0d:2c:54:39:6d:d5:68:5b:
                    46:64:b4:29:52:85:06:ec:a5:0a:4e:42:01:e6:05:
                    04:fb:94:90:8d:93:62:4e:4a:51:f9:c4:30:88:8c:
                    e7:56:60:67:ba:d2:1a:e7:13:86:76:97:fa:8f:df:
                    a4:dc:95:ab:a2:d0:b9:f7:c0:a5:3d:b5:bf:64:a9:
                    0d:09:f7:57:64:c4:05:42:4f:d3:1a:7b:2d:52:ee:
                    72:f9:9d:2a:e1:fc:7a:f7:b9:6b:ac:78:d7:67:de:
                    81:e0:0c:7d:0b:b3:76:1a:7d:40:07:91:b4:72:dd:
                    59:f6:99:d4:16:fa:20:bf:83:7b:1b:1c:03:01:11:
                    4c:2f:a9:c8:6b:18:c8:4f:a1:d4:f3:ea:1a:98:81:
                    6f:0c:a4:4a:e4:0a:9e:7b:60:5d:8b:76:dc:fa:74:
                    86:c4:1f:96:5c:a6:9d:32:47:25:43:dd:d8:64:c6:
                    46:64:7a:2c:6a:d7:63:d0:01:c3:fa:5c:fa:e7:be:
                    32:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:27:A9:05:D0:9D:7E:D4:14:BE:55:7D:D8:4B:F7:B8:ED:F7:48:25
            X509v3 Authority Key Identifier:
                keyid:54:42:61:43:36:99:9E:86:88:5B:6A:C9:A4:0C:A8:95:3F:C1:7D:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/5442614336999E86885B6AC9A40CA8953FC17D75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5442614336999E86885B6AC9A40CA8953FC17D75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/3139312e3234322e3230342e302f32322d3232203d3e20323633343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:87:ae:ec:8c:06:4f:36:5c:16:b5:20:b0:99:b1:21:cb:1f:
         4b:84:b7:a9:33:08:6f:16:58:68:a2:46:3f:01:58:37:07:7c:
         57:ba:34:81:0d:ba:1c:0f:38:58:80:cf:f2:38:ce:96:80:63:
         82:d1:c4:00:df:91:51:38:4a:03:45:76:e4:ac:3d:28:15:8e:
         ab:ac:02:dd:f6:30:f8:15:a6:8c:9d:2f:82:cd:49:dd:9e:96:
         d1:15:82:89:ea:b6:c6:c8:61:8a:27:9f:16:d5:64:af:29:ba:
         f2:6e:d4:b8:1d:5c:b9:43:ad:44:9b:ff:a5:08:61:7f:e8:a2:
         92:40:6d:05:41:48:6c:4a:a3:3a:5f:ca:91:d0:01:aa:d1:de:
         6b:97:55:dd:7c:df:37:58:18:0d:2f:f8:31:13:ae:2c:02:d5:
         4f:18:14:ed:d2:af:fa:a4:b2:d7:02:d2:02:06:7c:3c:b7:d8:
         11:d6:ab:e8:0d:44:ca:12:09:3a:6e:3d:ab:2d:f1:d8:af:40:
         42:66:79:61:d7:45:c2:73:6d:dd:de:40:f6:b5:97:c6:cb:fc:
         9e:ec:ad:3e:3e:71:59:77:3f:f9:c9:40:ad:97:75:88:a0:0c:
         b5:38:f1:41:d3:b2:41:c1:57:c0:c9:78:87:19:98:c8:2e:67:
         ba:f1:35:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:34 2024 by rpki-client on console.sobornost.net