Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37382e302f32342d3234203d3e20323633343734.roa
File:                     3139312e3234322e37382e302f32342d3234203d3e20323633343734.roa (raw, json)
Hash identifier:          DAE6wQF/da0zBaj7tLlY3On4UpK0PE0zWQ6UWWE3bPY=
Subject key identifier:   98:A7:B0:70:93:4B:96:FA:82:3C:95:9E:F5:EE:A3:38:1B:3E:A8:4B
Certificate issuer:       /CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
Certificate serial:       5C84285BA5C274AA64627F2E32D0B6471AA77059
Authority key identifier: C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37382e302f32342d3234203d3e20323633343734.roa
Signing time:             Mon 30 Oct 2023 11:55:11 +0000
ROA not before:           Mon 30 Oct 2023 11:50:11 +0000
ROA not after:            Mon 28 Oct 2024 11:55:11 +0000
asID:                     263474
IP address blocks:        191.242.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:84:28:5b:a5:c2:74:aa:64:62:7f:2e:32:d0:b6:47:1a:a7:70:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
        Validity
            Not Before: Oct 30 11:50:11 2023 GMT
            Not After : Oct 28 11:55:11 2024 GMT
        Subject: CN=98A7B070934B96FA823C959EF5EEA3381B3EA84B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:87:64:73:56:c0:45:b1:41:1a:a8:14:c0:22:
                    0a:8d:04:c7:03:02:30:4c:41:6d:9f:61:fb:7b:97:
                    8f:52:4c:19:95:e4:6a:69:c5:3c:8e:ad:b7:3a:6a:
                    3e:55:c6:76:da:07:c7:8b:b4:e6:04:e5:aa:40:b5:
                    5f:c7:9b:53:ab:f0:cb:aa:3f:e2:34:00:7b:94:70:
                    57:22:a4:96:90:ca:f6:70:05:b4:fb:fe:9d:4d:64:
                    74:c5:45:3b:2e:44:6e:a9:fa:11:97:58:33:1d:b9:
                    34:0e:1f:ee:82:09:62:43:48:7a:8a:3b:c5:a1:9d:
                    ed:cb:fc:f3:da:09:e2:ed:12:20:4c:f0:cf:b6:9e:
                    97:5e:dc:9a:2a:34:f8:5a:d4:7c:da:25:6b:02:18:
                    95:3f:6d:56:f9:d2:05:1d:0f:a3:4a:e3:c5:ec:ae:
                    6f:97:e0:dc:40:aa:1f:3c:10:b5:68:0e:b6:2d:a8:
                    fb:af:80:f8:3c:7d:7b:96:d1:74:86:42:f8:82:e4:
                    26:0e:64:db:30:e4:52:db:af:c6:bc:58:85:0e:9a:
                    10:76:62:25:19:99:5d:72:89:f4:aa:84:c9:c0:e1:
                    dc:f9:77:ed:2f:64:1f:25:a3:bb:3b:19:21:08:04:
                    ea:49:a7:31:19:4b:39:70:f2:20:21:52:e9:9f:5e:
                    af:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A7:B0:70:93:4B:96:FA:82:3C:95:9E:F5:EE:A3:38:1B:3E:A8:4B
            X509v3 Authority Key Identifier:
                keyid:C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37382e302f32342d3234203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:c9:a2:a1:a6:7d:41:c7:5f:08:27:a2:94:ff:2f:9b:a4:85:
         27:7f:f7:4c:58:af:7d:f9:fe:c3:31:66:b7:bd:3b:0c:a8:d5:
         f0:26:54:60:64:19:bb:2a:dc:82:79:16:26:06:8c:39:0b:26:
         1e:a1:b6:cb:2d:59:e9:2c:12:87:e0:9c:4d:c6:ba:69:d3:08:
         f8:78:96:8b:e6:7f:04:c8:e8:8a:2f:b1:85:04:91:1e:95:35:
         ba:d4:65:1f:7d:44:a2:9f:9f:8b:5d:bc:fa:4e:1e:e3:29:1c:
         7c:78:1b:61:82:24:7a:6a:ba:f6:20:10:f1:d5:ef:a0:62:00:
         e7:6a:d8:1a:fe:b4:ad:b1:7d:2a:81:67:18:6b:2b:cb:5d:97:
         d4:ac:db:7b:37:0f:4a:86:bd:a9:5c:2d:19:2f:1d:f3:ca:67:
         b5:5a:3a:18:94:7a:f4:80:a9:29:e3:43:d7:23:d5:4b:31:9e:
         68:39:29:a7:36:b6:26:06:fc:41:d4:ee:31:10:90:6d:a5:ad:
         4e:25:67:79:e1:bb:00:9e:fc:95:f0:4b:a4:23:d0:62:aa:0c:
         7f:de:18:ef:a7:ee:94:70:34:1e:53:91:5a:47:7d:f0:81:07:
         00:b1:b3:f2:55:15:f9:c2:4b:b3:36:bf:89:6b:04:53:18:74:
         00:bd:a2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org