Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31382e302f32342d3234203d3e20323632343835.roa
File:                     3139312e372e31382e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          kJJEXxgLuE1KNVxkKy1XW+H6GXWbN8ljVpG2MAEtDiQ=
Subject key identifier:   FD:0D:66:6F:69:A2:5B:E5:5C:9E:C1:F0:92:0A:5F:1D:07:CB:95:5E
Certificate issuer:       /CN=7F8163A857457D0C511E761F3AF9EBFAAEB15371
Certificate serial:       764ED1F845D161B6B36758D8FD6829FE13B20775
Authority key identifier: 7F:81:63:A8:57:45:7D:0C:51:1E:76:1F:3A:F9:EB:FA:AE:B1:53:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31382e302f32342d3234203d3e20323632343835.roa
Signing time:             Fri 09 Feb 2024 10:59:26 +0000
ROA not before:           Fri 09 Feb 2024 10:54:26 +0000
ROA not after:            Fri 07 Feb 2025 10:59:26 +0000
asID:                     262485
IP address blocks:        191.7.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4e:d1:f8:45:d1:61:b6:b3:67:58:d8:fd:68:29:fe:13:b2:07:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F8163A857457D0C511E761F3AF9EBFAAEB15371
        Validity
            Not Before: Feb  9 10:54:26 2024 GMT
            Not After : Feb  7 10:59:26 2025 GMT
        Subject: CN=FD0D666F69A25BE55C9EC1F0920A5F1D07CB955E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:cc:32:46:ba:ed:ec:4f:2e:40:25:30:6b:
                    df:72:4a:52:96:92:71:55:e2:c8:c2:68:04:98:14:
                    89:5e:42:4f:9a:38:47:da:77:77:06:63:0e:f8:8b:
                    00:c9:ff:32:21:2d:93:c6:50:e4:35:ab:d9:36:08:
                    8e:91:48:4b:78:4b:b2:39:32:9b:d2:5c:38:f1:d2:
                    b8:ba:c1:42:8d:95:d0:40:fa:4a:40:fc:94:35:50:
                    f4:7e:c0:a8:9b:c7:60:93:6e:03:26:d5:fc:07:74:
                    11:da:9c:21:76:a4:03:dc:ed:3b:27:72:37:af:9b:
                    c7:5b:2a:0d:3a:60:e8:ce:d0:bd:62:de:54:eb:b3:
                    d9:4e:ad:fa:06:42:e0:7b:0f:a8:76:cd:6d:81:82:
                    79:06:4a:4c:ec:9f:26:19:79:b1:21:9f:cf:fc:9b:
                    49:2a:ef:eb:d6:c0:b3:3d:19:da:da:83:91:80:be:
                    b2:00:d0:0a:4c:44:30:6b:4f:e9:c8:0b:67:d3:c0:
                    b6:21:fa:3f:d0:8d:11:30:d3:95:8f:20:b8:d4:e7:
                    04:8a:ef:65:fa:17:da:93:9c:5d:88:2a:e5:3d:96:
                    f1:35:11:d7:d3:73:55:2e:37:60:a9:5a:22:22:9f:
                    c9:0e:f4:3e:ba:30:e9:16:32:95:11:90:88:5f:df:
                    80:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0D:66:6F:69:A2:5B:E5:5C:9E:C1:F0:92:0A:5F:1D:07:CB:95:5E
            X509v3 Authority Key Identifier:
                keyid:7F:81:63:A8:57:45:7D:0C:51:1E:76:1F:3A:F9:EB:FA:AE:B1:53:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31382e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:26:6d:15:51:de:a3:b7:fc:5b:80:cb:d4:3d:ac:95:d8:59:
         d0:58:c5:ec:e5:30:a9:84:0b:e4:c5:9c:24:6e:1f:eb:84:64:
         58:64:09:ae:0b:b5:f2:10:a0:52:41:f8:41:65:13:79:9f:dc:
         96:86:4f:43:db:c1:42:3c:9d:cc:58:09:21:cb:1b:67:e7:00:
         4b:45:60:ce:b6:18:2b:88:8c:8d:68:c1:ec:e1:d6:7f:69:bd:
         51:9f:e6:0c:7f:31:a2:72:aa:ac:81:80:e4:2a:12:60:7e:c6:
         75:8c:33:f8:67:b0:3a:c2:0a:72:bb:6d:4b:87:7e:3c:b8:93:
         b1:ab:17:a5:59:d8:a1:60:8e:6a:ff:9a:95:2e:be:d0:b2:e5:
         ef:1d:3d:01:28:20:72:aa:3c:b4:73:90:04:10:e2:6a:6d:40:
         3a:f8:b9:65:00:cf:f3:f8:54:5c:c5:94:d3:4f:20:93:1d:54:
         f3:88:29:e8:cb:27:f1:d9:3e:10:2f:08:91:8c:73:da:90:5b:
         f4:d8:fd:13:39:0f:2f:65:4c:83:3c:77:24:5e:25:12:85:d0:
         c8:ee:1e:5f:48:b8:79:1d:cd:10:c3:39:b9:59:6e:5a:aa:97:
         b6:f6:18:94:e8:d6:b2:00:91:48:f9:e0:3a:74:dd:38:1c:3f:
         7a:f7:36:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org