Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37322e302f32332d3233203d3e20323633343734.roa
File:                     3139312e3234322e37322e302f32332d3233203d3e20323633343734.roa (raw, json)
Hash identifier:          bG80oWMOGM96oX7O84ohnI047O1NXv42PSw14CQ3iYc=
Subject key identifier:   DE:14:FB:9D:37:DA:DA:F3:74:9C:D6:2F:DF:1E:C5:04:63:66:46:30
Certificate issuer:       /CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
Certificate serial:       241B8B3E35BECD54E959742E4C04C2362C21B803
Authority key identifier: C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37322e302f32332d3233203d3e20323633343734.roa
Signing time:             Mon 26 Jun 2023 16:00:00 +0000
ROA not before:           Mon 26 Jun 2023 15:55:00 +0000
ROA not after:            Mon 24 Jun 2024 16:00:00 +0000
asID:                     263474
IP address blocks:        191.242.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1b:8b:3e:35:be:cd:54:e9:59:74:2e:4c:04:c2:36:2c:21:b8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
        Validity
            Not Before: Jun 26 15:55:00 2023 GMT
            Not After : Jun 24 16:00:00 2024 GMT
        Subject: CN=DE14FB9D37DADAF3749CD62FDF1EC50463664630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f3:23:ba:35:23:37:78:f3:7d:86:8d:ea:d5:
                    e1:00:1d:13:a9:d0:b4:9d:e2:e7:d6:6a:b2:63:63:
                    4e:10:9f:b1:2c:f0:a9:6d:3c:42:fc:bc:1d:35:84:
                    46:84:2a:6e:e8:40:74:74:65:72:f5:5c:d9:0f:95:
                    14:a2:8d:6f:11:d2:4e:ae:4b:d4:d3:7a:5f:8f:ee:
                    b7:97:5a:e5:43:04:09:64:00:c8:09:9e:16:fb:73:
                    4b:1c:78:04:21:2f:47:39:0d:90:10:af:09:64:56:
                    1a:23:71:6e:1c:cc:e9:7b:66:f4:0e:c5:a1:9f:21:
                    52:4d:45:e0:a5:9b:74:88:b1:87:f3:44:6a:02:aa:
                    15:79:c4:99:b6:ab:d7:fd:b4:85:67:3e:6b:28:49:
                    6f:ef:de:36:23:49:3d:f0:2f:01:69:0d:ef:ce:bc:
                    ab:07:a7:e6:ae:b8:01:07:0c:0e:c2:df:50:93:7d:
                    31:d0:6e:76:84:6e:2e:29:34:68:20:8f:60:39:b0:
                    fe:5c:66:b3:40:50:b8:ef:7e:25:b2:46:58:52:df:
                    2c:13:18:2b:12:54:fd:23:f0:6c:09:d8:5f:37:9c:
                    f9:f6:22:30:b5:db:df:1e:04:d3:0c:63:d8:62:f7:
                    57:1b:44:eb:92:3f:27:0e:81:fa:b7:2b:d2:97:c8:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:14:FB:9D:37:DA:DA:F3:74:9C:D6:2F:DF:1E:C5:04:63:66:46:30
            X509v3 Authority Key Identifier:
                keyid:C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37322e302f32332d3233203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:ef:c7:e3:62:a5:5a:e2:d3:4d:1d:62:d6:b9:83:2f:9e:82:
         4e:d0:f5:e0:e0:6e:af:d8:0e:da:d0:59:af:a5:c2:ff:c4:5e:
         fc:ca:41:2c:51:60:7c:d7:d8:78:b7:c2:9e:62:a9:77:00:9e:
         ba:db:00:7d:72:dc:cd:af:54:a8:fc:48:29:a1:c6:d4:06:33:
         a8:71:74:7a:f0:e7:9d:14:ca:79:32:55:77:ca:c5:c2:c2:9b:
         fb:ee:02:04:48:54:86:e5:77:70:4d:c4:35:ea:4c:40:f2:9d:
         53:4d:fc:74:2a:0b:2d:18:d3:38:27:17:32:a4:cd:a2:9f:95:
         a2:c7:cd:01:c5:ed:79:6b:c9:ba:af:55:fa:09:98:7a:27:c2:
         9e:f6:33:43:33:c4:f9:28:03:62:51:46:3e:8e:e8:a6:29:38:
         ea:53:3f:d1:cb:5f:4c:77:d2:dd:00:95:51:66:c7:d7:9b:27:
         86:d9:2f:7c:0e:ba:02:a2:57:89:0d:fb:29:61:23:58:db:ca:
         bd:93:35:2e:2c:a9:04:99:94:6a:48:d6:82:16:70:6a:7e:17:
         cc:7c:74:df:61:01:e5:7c:0b:6a:70:0c:8e:77:8e:a7:e3:61:
         72:ff:2f:32:61:6d:b5:f0:05:2c:8a:f1:d6:87:e5:e5:75:67:
         f1:3e:a1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org