Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/0/3139312e372e34382e302f32312d3234203d3e20323633333131.roa
File:                     3139312e372e34382e302f32312d3234203d3e20323633333131.roa (raw, json)
Hash identifier:          JythuBzdK90cNyEAK4AZZfI9bPEnceZ6p3KQ3ny6Qyw=
Subject key identifier:   8D:22:1B:0C:2B:A2:22:39:F3:C5:75:6A:B8:38:7C:2D:DB:D9:EA:FA
Certificate issuer:       /CN=0CE2E9D8B228E9F56BD781EB40042472C4050A4D
Certificate serial:       3BE807548F36A7BBB98CD55275F9EA6687EE2A08
Authority key identifier: 0C:E2:E9:D8:B2:28:E9:F5:6B:D7:81:EB:40:04:24:72:C4:05:0A:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CE2E9D8B228E9F56BD781EB40042472C4050A4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/0/3139312e372e34382e302f32312d3234203d3e20323633333131.roa
Signing time:             Mon 26 Jun 2023 21:00:00 +0000
ROA not before:           Mon 26 Jun 2023 20:55:00 +0000
ROA not after:            Mon 24 Jun 2024 21:00:00 +0000
asID:                     263311
IP address blocks:        191.7.48.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e8:07:54:8f:36:a7:bb:b9:8c:d5:52:75:f9:ea:66:87:ee:2a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE2E9D8B228E9F56BD781EB40042472C4050A4D
        Validity
            Not Before: Jun 26 20:55:00 2023 GMT
            Not After : Jun 24 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b1:75:4f:4b:e4:08:43:92:03:78:cd:97:72:
                    aa:78:cc:48:9d:4a:42:a1:35:6e:d2:1a:5f:44:39:
                    fc:db:4d:00:99:41:92:31:4f:1a:10:30:b1:b0:b4:
                    19:9a:b9:c8:31:00:52:00:55:50:d8:19:fc:89:d7:
                    60:e1:30:0e:a1:86:6e:be:a4:0c:26:f5:79:75:fd:
                    5b:7e:be:5f:89:91:fe:29:d8:f7:1b:05:b2:44:84:
                    20:63:9c:8a:74:2d:ed:47:20:73:d2:e8:49:f8:db:
                    26:59:c0:81:17:52:e5:be:0b:18:da:b0:fe:65:a9:
                    96:97:23:eb:24:43:76:63:f0:76:09:62:88:93:2a:
                    02:6d:9a:fb:e2:f7:61:0e:1b:09:ec:37:45:7d:1e:
                    ac:3d:ab:61:56:d1:9d:19:45:4a:50:26:40:30:42:
                    14:d1:df:44:4d:2f:af:de:d0:5e:05:ad:15:b8:71:
                    29:58:98:92:3d:6d:c5:b3:af:c0:23:c9:0d:7b:f3:
                    8d:5b:d5:f9:0b:03:8a:98:1e:15:24:fc:d3:55:a6:
                    6b:ce:6d:88:50:e9:23:3a:85:5e:77:82:05:96:73:
                    e5:1a:4d:5d:27:40:26:2e:b2:87:84:1b:c0:a8:2f:
                    0b:87:47:f4:84:5a:e2:e1:ac:c4:15:ee:f1:6f:5a:
                    e2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:22:1B:0C:2B:A2:22:39:F3:C5:75:6A:B8:38:7C:2D:DB:D9:EA:FA
            X509v3 Authority Key Identifier:
                keyid:0C:E2:E9:D8:B2:28:E9:F5:6B:D7:81:EB:40:04:24:72:C4:05:0A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/0/0CE2E9D8B228E9F56BD781EB40042472C4050A4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CE2E9D8B228E9F56BD781EB40042472C4050A4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/0/3139312e372e34382e302f32312d3234203d3e20323633333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:15:a9:2b:9f:90:93:e4:5c:16:03:4b:72:d3:04:27:10:30:
         43:a3:1d:b7:3e:81:f0:bc:6d:84:54:b5:31:77:54:e7:33:57:
         a1:e0:95:59:f8:bb:14:61:15:58:51:08:7b:24:eb:00:d1:45:
         3f:aa:c0:4b:56:1e:a2:0e:a3:5f:83:5a:54:0b:26:67:92:1e:
         41:0d:75:5d:fc:d8:6b:05:1d:c6:74:61:4c:06:06:40:3e:e6:
         6c:9c:12:5f:0d:4a:74:6e:3b:fa:46:fc:b1:67:53:a8:dd:6f:
         25:c9:97:24:36:93:c9:91:ba:18:ca:8e:ce:ed:5a:9a:14:e6:
         20:af:f7:6f:db:6f:30:8d:5f:77:79:e1:94:05:b7:97:cf:11:
         54:43:8d:1e:97:51:b5:15:ad:8e:5f:9f:e4:21:73:7e:37:50:
         aa:3a:ef:d9:5f:da:7f:83:02:c1:03:b2:5c:d1:e9:e1:0e:3c:
         20:ac:58:09:6a:cf:2f:bc:55:94:5f:bc:6b:f3:bb:9f:aa:30:
         3c:d3:c9:73:6d:d6:d4:24:38:9d:2c:8f:98:80:88:2e:ba:10:
         86:90:ec:19:a7:44:c1:d8:22:86:df:3d:7a:b5:1d:cc:8f:5a:
         56:61:47:e7:70:86:0d:9a:bd:4c:f3:48:1b:3f:6f:54:ca:10:
         96:7c:9a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org