Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37332e302f32342d3234203d3e20323633343734.roa
File:                     3139312e3234322e37332e302f32342d3234203d3e20323633343734.roa (raw, json)
Hash identifier:          kK/+P5UD4LasQJIFe3DV7wMLaYOa1w3WyF/Ais7/xdw=
Subject key identifier:   AC:CD:F2:4E:33:20:0A:D2:A1:4C:33:09:28:8A:88:63:BC:7E:21:EC
Certificate issuer:       /CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
Certificate serial:       6B3033784666370B3F8EA78630085D9A66E7D1CC
Authority key identifier: C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37332e302f32342d3234203d3e20323633343734.roa
Signing time:             Mon 26 Jun 2023 16:00:05 +0000
ROA not before:           Mon 26 Jun 2023 15:55:05 +0000
ROA not after:            Mon 24 Jun 2024 16:00:05 +0000
asID:                     263474
IP address blocks:        191.242.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:30:33:78:46:66:37:0b:3f:8e:a7:86:30:08:5d:9a:66:e7:d1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
        Validity
            Not Before: Jun 26 15:55:05 2023 GMT
            Not After : Jun 24 16:00:05 2024 GMT
        Subject: CN=ACCDF24E33200AD2A14C3309288A8863BC7E21EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:be:6d:6e:97:e9:f6:5e:a2:80:bb:91:00:
                    75:ac:a0:f1:7e:3a:65:44:e0:f3:b2:bc:52:c6:d3:
                    05:27:8f:91:74:ac:9f:f7:1c:16:b2:f8:b2:68:f1:
                    b2:b7:45:c3:67:2e:2a:24:47:81:d9:94:59:3f:7a:
                    62:75:ab:d5:ac:63:e3:89:46:20:2d:0b:81:87:d3:
                    91:0f:9a:98:91:8a:00:93:5f:b6:21:d1:aa:bb:9b:
                    5f:e4:03:a2:e9:b6:82:28:9d:15:53:2e:72:6e:9b:
                    cc:02:3c:ba:a9:df:a3:27:8b:0e:76:23:f8:bf:d4:
                    97:9f:1d:51:df:47:0d:23:5e:5e:b8:b8:d2:b3:27:
                    b5:24:88:0f:3a:54:af:a3:1a:e4:db:bd:e2:46:16:
                    2f:65:70:49:9f:89:f9:85:ed:18:58:7b:85:fa:7b:
                    4e:46:e2:2e:e3:9a:7b:f7:00:6a:c4:d7:71:74:66:
                    01:b2:ef:97:64:d2:e5:0b:3b:98:2e:c0:1a:2d:06:
                    fc:19:d0:65:89:7d:de:61:f6:05:b4:66:c8:c1:10:
                    49:16:60:98:90:27:9c:31:bb:ea:2d:d3:47:5a:c9:
                    aa:76:be:bb:2f:45:f5:70:30:66:d4:a1:a0:11:e8:
                    a6:b9:fe:95:d0:d0:2e:7f:6e:82:f9:9a:15:5c:2e:
                    e4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CD:F2:4E:33:20:0A:D2:A1:4C:33:09:28:8A:88:63:BC:7E:21:EC
            X509v3 Authority Key Identifier:
                keyid:C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37332e302f32342d3234203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:94:77:10:cd:12:72:d2:68:17:f4:af:db:9b:8f:88:59:cf:
         e8:08:e2:66:2a:ba:2a:78:e9:8c:0c:a3:27:1d:ab:1c:e5:29:
         7b:35:77:19:da:43:24:ca:82:14:0e:e3:27:08:b3:49:a7:20:
         d6:67:6b:88:5e:b0:71:dd:de:01:7b:50:6d:5f:a8:b8:9d:41:
         c0:da:06:92:20:89:73:26:62:e3:a0:a6:73:3b:b9:ad:4d:39:
         70:40:15:cc:08:07:4d:bd:cf:d3:a9:f1:58:71:2b:58:8e:70:
         7f:99:dd:68:92:cf:da:02:09:b9:52:37:f2:e2:74:97:c8:dd:
         b8:6e:6d:3f:3c:7d:bb:be:67:8f:d0:32:56:08:d8:13:18:05:
         84:9f:0d:69:85:12:a9:5a:7a:c7:6a:1e:3f:b8:a2:d2:13:7d:
         27:12:95:50:f1:0a:28:4e:a6:19:8e:61:d7:19:55:b0:65:13:
         19:fa:72:03:0e:4b:e7:46:2d:30:d3:3f:33:ce:8f:a5:3e:cc:
         27:b5:8b:81:c0:99:9d:d8:ce:5d:bc:85:8e:5a:2e:6f:de:c2:
         93:f7:45:50:9e:32:f4:dd:88:2e:71:23:b5:5a:5b:62:1a:6d:
         72:75:f0:51:9b:4b:ab:63:8b:d9:1f:ef:b7:7b:9f:66:2b:a0:
         4c:f4:1b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org