Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37352e302f32342d3234203d3e20323633343734.roa
File:                     3139312e3234322e37352e302f32342d3234203d3e20323633343734.roa (raw, json)
Hash identifier:          fiHDQFUO0w7a+xeAblo9UML4ntRaNHYUaWU8WOx1sOc=
Subject key identifier:   A5:EC:4C:20:2F:68:AE:32:42:94:8D:E5:41:8C:88:29:32:D5:76:F0
Certificate issuer:       /CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
Certificate serial:       1DDF5B70294A387680441DB918547AE13C7CB9E3
Authority key identifier: C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37352e302f32342d3234203d3e20323633343734.roa
Signing time:             Mon 30 Oct 2023 11:54:38 +0000
ROA not before:           Mon 30 Oct 2023 11:49:38 +0000
ROA not after:            Mon 28 Oct 2024 11:54:38 +0000
asID:                     263474
IP address blocks:        191.242.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:df:5b:70:29:4a:38:76:80:44:1d:b9:18:54:7a:e1:3c:7c:b9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
        Validity
            Not Before: Oct 30 11:49:38 2023 GMT
            Not After : Oct 28 11:54:38 2024 GMT
        Subject: CN=A5EC4C202F68AE3242948DE5418C882932D576F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ba:df:80:8e:50:7b:2b:72:6c:f5:63:f8:31:
                    c6:51:c0:18:0c:8c:00:58:34:8a:52:5f:b2:53:a5:
                    c7:1c:e4:e0:5e:bc:7d:f3:eb:7f:6e:81:24:a3:d6:
                    12:06:f9:7e:f0:28:39:eb:0c:b4:f7:36:1b:c3:0b:
                    e8:ab:68:f2:c4:4a:6f:12:d2:fe:e6:61:e7:6f:af:
                    4e:d8:b2:c7:87:3d:39:a3:3e:46:89:fc:3f:7d:35:
                    88:15:a1:2b:f3:0e:cb:f0:3f:61:e2:99:97:41:c1:
                    11:8f:11:45:b5:bc:20:84:a9:65:a1:0b:2a:f2:ac:
                    a4:d1:16:b2:09:f0:aa:04:5d:b1:7f:01:3f:20:50:
                    a1:2b:2b:20:02:5a:87:fe:0f:7f:3e:32:21:5f:5d:
                    8e:68:35:36:e5:1e:d8:5f:6d:8d:b2:8e:8e:c9:41:
                    e8:01:d9:8e:14:d1:55:b2:fe:b9:73:5e:5a:42:48:
                    88:24:87:be:78:af:55:de:23:45:63:06:27:14:0a:
                    d2:ab:bc:74:63:d4:70:ff:b6:34:6a:8e:e4:dd:20:
                    c0:be:23:60:a8:fa:31:a1:ab:63:83:73:2b:49:87:
                    02:50:ac:f7:9f:83:a6:0f:86:26:57:1e:67:98:ea:
                    c8:f1:3a:c4:c7:a6:33:6a:ab:a7:06:0a:d7:47:19:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EC:4C:20:2F:68:AE:32:42:94:8D:E5:41:8C:88:29:32:D5:76:F0
            X509v3 Authority Key Identifier:
                keyid:C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37352e302f32342d3234203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:b5:af:e2:9c:fd:a0:91:d7:13:f0:50:96:a9:fb:48:c1:02:
         79:1c:d1:6f:56:89:de:e7:8a:52:1e:1e:35:75:f2:91:2b:a6:
         58:7a:38:2a:e9:d3:8f:11:8c:6c:cf:4a:94:82:08:4b:65:fd:
         79:06:c0:3a:4b:37:d6:ad:64:2a:61:cf:f2:15:44:e9:9c:13:
         84:4e:3c:d5:3f:24:36:79:ca:02:ff:88:56:e1:17:0f:c5:22:
         b8:d3:db:47:b5:ba:ba:a5:88:52:1f:ba:db:51:18:39:6c:67:
         52:54:bf:96:03:7f:c4:96:bd:bb:24:d6:19:f6:61:cc:71:21:
         a4:b1:b3:be:a2:3b:67:a4:e7:58:f4:aa:3f:42:87:36:df:e9:
         91:5a:72:83:c1:c3:5a:01:a0:ac:dd:5f:41:e1:47:c3:56:20:
         a4:bc:31:d7:2c:e3:3b:86:f1:07:2c:e1:eb:01:4d:4b:48:f9:
         bd:7d:50:6d:ae:ac:9a:b4:b0:d9:13:09:2d:7c:36:a2:cf:71:
         89:9e:33:b9:dd:e1:b6:c1:a0:2e:aa:8a:b9:0a:c3:3d:4a:2c:
         2a:94:e5:cc:67:d5:b1:5e:66:1d:41:22:af:3a:3d:38:cb:9c:
         f6:d3:35:99:42:02:79:93:e6:48:ac:17:f8:e7:a5:92:21:3c:
         ca:f3:54:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org