Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37322e302f32312d3231203d3e20323633343734.roa
File:                     3139312e3234322e37322e302f32312d3231203d3e20323633343734.roa (raw, json)
Hash identifier:          NE3wolU0vM0D3xk6sCiHFHr1ZDI+xRTFPYIhV4ksqZM=
Subject key identifier:   D8:CB:07:8F:D9:CA:7C:E1:D5:54:83:B7:F3:42:B4:BF:46:F8:6A:28
Certificate issuer:       /CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
Certificate serial:       7B247FB3939C6106BB50562E9F104CAE37A0C779
Authority key identifier: C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37322e302f32312d3231203d3e20323633343734.roa
Signing time:             Mon 26 Jun 2023 15:59:52 +0000
ROA not before:           Mon 26 Jun 2023 15:54:52 +0000
ROA not after:            Mon 24 Jun 2024 15:59:52 +0000
asID:                     263474
IP address blocks:        191.242.72.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:24:7f:b3:93:9c:61:06:bb:50:56:2e:9f:10:4c:ae:37:a0:c7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
        Validity
            Not Before: Jun 26 15:54:52 2023 GMT
            Not After : Jun 24 15:59:52 2024 GMT
        Subject: CN=D8CB078FD9CA7CE1D55483B7F342B4BF46F86A28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:56:b3:68:28:30:d3:fe:67:94:37:17:53:
                    0b:4b:0c:05:90:14:2c:14:41:d1:0c:27:e3:3c:35:
                    c1:6c:e4:c4:b6:27:21:5c:45:35:54:a2:62:fb:c4:
                    a9:a0:a3:a2:eb:b4:7a:44:0c:ae:29:75:8b:a2:38:
                    dd:85:df:9b:71:d7:6c:9f:d7:b7:db:eb:a0:12:8b:
                    e7:7a:bc:65:70:0b:45:ec:51:5d:fe:61:b1:dd:98:
                    23:03:1f:9f:cb:ac:5c:a7:28:d3:c3:7a:d0:d9:81:
                    ca:98:62:86:7b:fe:70:33:88:f4:d0:67:f8:08:1a:
                    0e:de:2f:6c:31:20:6a:be:25:47:48:c3:48:a7:5b:
                    89:6f:ef:0f:b4:22:ae:ca:52:46:2b:6a:ed:ae:d2:
                    74:c5:3f:35:1c:34:cd:5d:02:f3:51:60:06:9c:68:
                    fb:cb:7d:22:95:3a:25:eb:8e:14:e0:64:df:f5:fb:
                    b8:9d:6e:21:65:60:ca:c1:66:33:d5:8f:46:78:96:
                    ec:d6:ed:d4:a5:bc:a1:98:f7:ed:ce:d8:6d:b6:61:
                    c1:cb:f4:6a:f2:34:ac:d9:9e:15:47:10:7e:1e:75:
                    e3:0f:f6:fe:d9:c9:f9:64:ab:42:a8:5d:1e:d8:99:
                    9b:66:e8:b8:4d:e0:1b:1b:82:a2:d9:d1:83:ba:1d:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CB:07:8F:D9:CA:7C:E1:D5:54:83:B7:F3:42:B4:BF:46:F8:6A:28
            X509v3 Authority Key Identifier:
                keyid:C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37322e302f32312d3231203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:a4:f2:5a:99:89:e9:9d:d4:07:07:63:58:94:4c:76:37:39:
         f8:1b:b8:4b:cb:ba:0c:fc:3e:69:dc:81:a5:4f:9e:7e:61:8b:
         b2:50:d2:1d:c3:d8:f4:b2:fc:80:d5:0a:86:e2:be:96:2f:36:
         a6:21:02:99:60:6b:0c:4e:0e:e5:bc:59:5a:3a:32:70:7a:a8:
         24:34:1c:93:89:4c:da:3c:74:df:23:8b:0c:6c:1a:81:47:b2:
         d5:40:b9:e6:db:2c:51:aa:84:46:40:51:31:16:27:c1:69:b4:
         d0:6e:c7:94:91:42:80:45:36:07:78:cf:82:67:9d:d1:a2:eb:
         4c:96:d1:aa:1c:b3:e7:36:05:6e:5b:2c:c3:65:aa:73:bb:ca:
         e4:da:c0:4b:09:0c:7f:60:cd:2d:a8:06:fd:23:36:59:bf:91:
         e3:b6:21:60:fa:65:c3:4b:3d:b4:fd:a7:5d:a6:b0:ef:de:55:
         69:0e:a7:55:64:30:77:64:d9:92:3a:21:f4:f2:aa:20:ba:d9:
         0e:de:53:b5:4e:f1:85:fb:0b:6f:27:ca:6f:6c:4a:a2:13:f3:
         1a:4d:f8:7d:4f:fe:c6:32:50:00:85:41:03:1b:cd:9f:f0:ca:
         d2:31:ae:0e:ce:13:9a:82:a4:98:2f:37:85:eb:60:26:af:de:
         ea:c0:ad:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org