Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37392e302f32342d3234203d3e20323633343734.roa
File:                     3139312e3234322e37392e302f32342d3234203d3e20323633343734.roa (raw, json)
Hash identifier:          LarN+b9bHgH2lAtkq5T0P5heJ22PYaxUqSuLmpIVai8=
Subject key identifier:   2A:1B:B2:DF:74:C1:94:B8:96:A2:94:E9:BB:E6:F3:E8:F0:22:AA:41
Certificate issuer:       /CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
Certificate serial:       4C159BE518CE0422DFF998767506E22DB423EFA3
Authority key identifier: C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37392e302f32342d3234203d3e20323633343734.roa
Signing time:             Mon 26 Jun 2023 16:00:17 +0000
ROA not before:           Mon 26 Jun 2023 15:55:17 +0000
ROA not after:            Mon 24 Jun 2024 16:00:17 +0000
asID:                     263474
IP address blocks:        191.242.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:15:9b:e5:18:ce:04:22:df:f9:98:76:75:06:e2:2d:b4:23:ef:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
        Validity
            Not Before: Jun 26 15:55:17 2023 GMT
            Not After : Jun 24 16:00:17 2024 GMT
        Subject: CN=2A1BB2DF74C194B896A294E9BBE6F3E8F022AA41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6a:ca:68:9b:79:57:f8:75:fc:6f:48:2b:b4:
                    65:b5:e4:97:7c:69:c5:85:74:10:b8:76:de:10:8a:
                    cd:ac:85:1e:62:19:5e:55:e8:a8:fb:c2:12:0e:cd:
                    8e:37:4d:2b:5c:e4:2d:9e:68:c5:07:f2:2b:da:39:
                    2a:2e:b6:80:eb:1d:78:34:79:c1:f2:59:62:6c:ba:
                    bd:ba:0a:e1:61:dc:9c:0c:16:8c:1e:d9:43:a6:05:
                    0d:f3:8d:4d:8e:8e:3f:45:01:a9:a6:1d:8b:91:36:
                    10:7b:80:c8:ba:09:a8:dd:75:43:17:87:7b:5c:49:
                    be:54:34:84:31:2f:fb:dd:b5:0e:c3:be:8e:b5:d2:
                    25:2b:f0:c2:7f:d2:59:03:01:54:0c:bb:7a:af:f2:
                    cf:8a:a5:af:ba:55:7c:e8:80:e1:4d:41:ed:3b:95:
                    d7:ec:71:dd:d2:b8:ba:0a:5f:24:2b:6f:14:a8:c6:
                    cd:81:52:01:da:43:d8:7d:a5:35:50:81:9a:0f:4f:
                    af:38:cf:c1:98:f8:26:6b:5a:f9:c6:30:23:ed:4c:
                    db:3a:db:6f:0b:89:f9:84:18:09:c8:db:2a:33:33:
                    9a:9d:6d:47:08:76:96:cb:ae:be:e5:9c:11:fc:1b:
                    70:c8:7d:e1:25:c1:62:32:46:2f:13:68:5d:e2:40:
                    6c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1B:B2:DF:74:C1:94:B8:96:A2:94:E9:BB:E6:F3:E8:F0:22:AA:41
            X509v3 Authority Key Identifier:
                keyid:C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37392e302f32342d3234203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:6f:ab:34:a4:50:56:9d:37:cd:0f:05:99:9b:e9:31:48:19:
         5f:a3:9d:a2:9f:73:53:92:b7:24:08:7a:81:cf:27:e0:9c:43:
         3f:f7:55:22:09:a3:af:74:56:5e:2d:bf:63:a6:cf:ec:28:46:
         cb:0c:1b:e4:a8:31:a9:97:cf:c0:26:bc:c4:20:af:2f:15:a1:
         74:f2:46:13:47:48:2d:16:fd:9d:59:31:14:79:9b:f5:1c:e2:
         79:29:b3:74:f7:2d:37:66:a8:86:85:50:a1:53:11:7b:d0:67:
         5c:58:b1:ab:32:6c:c4:fd:9f:63:70:dc:ad:d4:96:c1:68:62:
         f5:e5:10:31:16:96:e7:9c:a9:17:ff:c5:7c:a5:39:0f:fd:32:
         0c:b0:be:82:f0:22:b8:c4:5f:60:dd:25:5b:30:84:14:20:8d:
         ed:bc:d0:11:7c:23:2f:5c:81:f3:40:04:4e:db:56:cb:68:25:
         7b:cf:52:7b:35:b3:01:00:00:0c:c0:c8:bb:6d:0f:44:c6:e6:
         0a:ef:6d:19:48:b3:68:cb:72:11:d2:b5:7c:d0:d2:53:88:16:
         a5:12:c1:c7:b9:2b:25:fd:ab:68:33:e0:90:3e:16:c9:20:d7:
         62:bb:73:cd:50:ba:59:9d:5f:fa:67:c6:78:c6:42:85:d4:50:
         3d:65:17:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org