Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31392e302f32342d3234203d3e20323632343835.roa
File:                     3139312e372e31392e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          AQryb+5gU6KzAlA71ijTjYUymtG+f8+LiMm03bc0PoA=
Subject key identifier:   57:54:25:9F:7B:BD:75:56:93:5C:A3:02:A6:71:30:A9:D0:15:D7:8D
Certificate issuer:       /CN=7F8163A857457D0C511E761F3AF9EBFAAEB15371
Certificate serial:       69E8FD48739FCA5016BEC676993ED7D6512DCFCD
Authority key identifier: 7F:81:63:A8:57:45:7D:0C:51:1E:76:1F:3A:F9:EB:FA:AE:B1:53:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31392e302f32342d3234203d3e20323632343835.roa
Signing time:             Fri 09 Feb 2024 10:59:25 +0000
ROA not before:           Fri 09 Feb 2024 10:54:25 +0000
ROA not after:            Fri 07 Feb 2025 10:59:25 +0000
asID:                     262485
IP address blocks:        191.7.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e8:fd:48:73:9f:ca:50:16:be:c6:76:99:3e:d7:d6:51:2d:cf:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F8163A857457D0C511E761F3AF9EBFAAEB15371
        Validity
            Not Before: Feb  9 10:54:25 2024 GMT
            Not After : Feb  7 10:59:25 2025 GMT
        Subject: CN=5754259F7BBD7556935CA302A67130A9D015D78D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:ae:e8:e3:ad:45:be:ff:30:04:dc:b7:cf:
                    4b:1d:7d:44:0c:0e:0e:d0:ab:c4:42:ff:f5:36:d0:
                    1d:45:14:9f:48:e6:aa:75:54:e3:6c:17:7a:01:5c:
                    c2:85:87:98:e0:8b:72:e8:51:af:c9:b7:9d:f4:f4:
                    6e:f5:8e:34:f9:fe:eb:a4:e7:f8:a5:97:cc:46:29:
                    ed:88:a3:06:6e:1c:58:34:d4:ce:0e:d6:5c:46:8e:
                    fd:21:1c:51:3d:d5:31:ae:dc:ba:bf:b1:dc:48:cd:
                    9c:28:24:73:8b:ae:a6:ec:b5:23:53:a2:72:28:de:
                    13:22:b1:bb:c4:08:73:e2:e5:d0:e7:f1:88:55:85:
                    c4:30:26:3b:42:07:ad:05:f6:9b:94:fd:fc:4c:7e:
                    d5:58:13:65:b0:8d:0e:2f:7f:7f:08:e5:a3:0c:a6:
                    c3:09:d5:f8:f8:e8:e5:47:39:e6:7c:7b:a0:63:69:
                    0c:3d:f0:4b:31:72:8e:f8:26:d1:38:18:3b:fb:bc:
                    ef:15:fc:b1:55:52:bc:03:e1:91:56:cb:88:d5:c4:
                    bd:45:6d:ba:60:61:b7:5a:a1:a7:77:6c:90:7b:bf:
                    06:3a:8c:ce:9f:b2:e7:2d:7e:70:20:2c:bd:60:f8:
                    13:d2:12:5c:f9:af:26:3d:8b:18:36:87:f4:cb:b1:
                    c4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:54:25:9F:7B:BD:75:56:93:5C:A3:02:A6:71:30:A9:D0:15:D7:8D
            X509v3 Authority Key Identifier:
                keyid:7F:81:63:A8:57:45:7D:0C:51:1E:76:1F:3A:F9:EB:FA:AE:B1:53:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31392e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:ed:f1:ca:26:b4:d4:94:07:24:f3:ba:f0:3f:d3:82:ff:ad:
         0b:49:11:e8:d3:f8:e7:77:4c:c3:a1:89:6d:9a:87:e3:d4:20:
         f7:88:01:19:42:a7:2f:23:c4:36:d8:e3:19:71:4c:05:d0:c2:
         df:03:66:43:7e:e8:fe:da:5a:ae:f0:e7:36:67:00:8a:e5:e5:
         4e:58:34:90:66:5e:cb:d2:a6:9e:ea:12:98:2a:be:60:bf:e4:
         80:13:b9:fc:3d:92:32:1a:d1:72:79:d0:a1:09:90:d5:35:a5:
         15:62:d7:34:38:74:cf:a2:d6:98:c0:a9:7d:bf:38:8a:9c:c9:
         56:eb:63:fd:9e:40:11:3c:73:84:a6:85:fd:77:77:04:c0:37:
         41:ad:bd:da:83:4e:63:f4:ee:87:ea:84:aa:ea:ff:51:5e:68:
         fc:06:8b:6e:00:f5:5e:04:f1:47:25:4f:4d:c6:83:36:07:3d:
         35:85:e2:96:8a:04:2b:d1:32:95:7b:a2:12:89:b2:9a:67:3d:
         11:fd:41:eb:3f:d1:a8:09:a0:d0:43:3d:91:96:73:4a:3f:03:
         0a:dc:38:e4:21:c0:87:fa:e3:17:fa:ee:a5:af:31:c0:2d:37:
         08:5e:2c:40:92:ad:db:76:95:7b:21:ab:47:ea:19:d2:46:bb:
         24:0e:c4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org