Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/3139302e382e3137322e302f32342d3234203d3e20323731303131.roa
File:                     3139302e382e3137322e302f32342d3234203d3e20323731303131.roa (raw, json)
Hash identifier:          kpQczF7vxvE58KdBWDxaMOLRNgJ3i1BKI3UNBodVoOY=
Subject key identifier:   C9:DC:82:6D:B7:57:8E:88:7E:43:22:15:A1:F8:20:45:94:43:A6:7A
Certificate issuer:       /CN=F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9
Certificate serial:       32813695CE008DF2DE4DAFAA0F5269AE32BC64
Authority key identifier: F6:33:EC:1D:98:41:26:CD:6B:D3:A7:EF:2F:04:BC:6E:15:F2:61:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/3139302e382e3137322e302f32342d3234203d3e20323731303131.roa
Signing time:             Sat 28 Oct 2023 18:00:00 +0000
ROA not before:           Sat 28 Oct 2023 17:55:00 +0000
ROA not after:            Sat 26 Oct 2024 18:00:00 +0000
asID:                     271011
IP address blocks:        190.8.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:81:36:95:ce:00:8d:f2:de:4d:af:aa:0f:52:69:ae:32:bc:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9
        Validity
            Not Before: Oct 28 17:55:00 2023 GMT
            Not After : Oct 26 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:35:eb:ae:95:17:5d:ff:24:14:93:05:88:7b:
                    38:b1:24:fe:94:56:1a:64:d9:1a:94:a7:59:76:2c:
                    96:17:04:42:db:7a:a7:9e:9c:d9:0d:a5:47:c9:3e:
                    9b:9c:bd:7e:ae:de:1b:12:8e:68:28:29:b9:5c:5e:
                    bf:0f:64:04:a7:69:12:66:cc:3f:59:84:bf:4f:d0:
                    58:92:79:70:c7:6b:20:ed:eb:30:22:3a:9c:a7:32:
                    e3:a2:ad:fe:01:5f:93:19:88:e4:29:03:a5:7f:4a:
                    cc:8f:0e:e1:15:9d:34:a1:ae:5e:2f:85:35:64:74:
                    35:16:23:0a:79:3d:75:a6:1d:f2:f5:60:29:d4:cc:
                    15:9a:9b:78:b1:1f:ca:3d:8a:53:88:37:98:8c:d5:
                    4c:3b:f3:31:ab:62:26:b6:07:10:43:93:36:50:bf:
                    17:6c:da:88:1e:f6:3d:22:41:fe:5c:bf:0a:80:44:
                    b0:9e:9d:da:62:92:c2:f7:44:3c:68:bb:46:6d:5f:
                    3e:cb:d0:1a:f2:91:ef:b7:b4:52:f0:6e:7a:a3:fb:
                    08:65:f0:0e:fc:10:d0:2e:b0:64:4e:74:af:d6:0c:
                    a2:b6:19:6d:36:71:65:3a:2c:61:b6:23:d9:66:51:
                    2a:96:bb:4f:89:24:6a:d0:9e:55:8b:c3:f2:71:d5:
                    32:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DC:82:6D:B7:57:8E:88:7E:43:22:15:A1:F8:20:45:94:43:A6:7A
            X509v3 Authority Key Identifier:
                keyid:F6:33:EC:1D:98:41:26:CD:6B:D3:A7:EF:2F:04:BC:6E:15:F2:61:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/3139302e382e3137322e302f32342d3234203d3e20323731303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:ff:b9:f2:2a:a2:dc:65:ff:19:08:4e:a8:de:12:f8:51:85:
         04:28:79:99:02:b0:78:e2:04:1e:e7:bc:e0:3c:b0:10:69:36:
         6a:cd:f5:53:a0:bd:80:cc:7d:65:27:d3:c3:81:3b:57:f3:f6:
         62:06:30:f8:b3:08:8b:e9:7b:2c:6a:6c:64:44:74:79:c0:64:
         18:96:3c:6b:f6:d8:32:04:6d:ee:c6:3b:e0:a6:d2:5c:ed:8c:
         ba:9c:ee:1e:4e:78:a8:90:23:61:e7:d3:3a:4a:47:b2:a0:1e:
         c9:52:39:1a:b4:59:75:39:d1:7c:62:fe:e9:36:eb:0b:dd:df:
         5e:52:8f:c9:f6:e8:cd:6c:1b:c4:44:b5:c3:f3:15:2d:b6:e9:
         77:2b:05:53:0d:d9:67:1c:a2:68:9b:53:70:a6:7a:a8:0f:b2:
         83:d0:fa:6a:fb:a8:45:0b:8a:31:7e:fa:9a:26:2f:80:26:0c:
         71:04:3f:e0:49:40:bf:1f:15:67:63:9a:b0:82:0d:ef:49:88:
         fb:66:57:f1:8d:a5:0a:c6:be:e7:32:2f:5f:5f:71:90:25:62:
         0f:40:44:b5:82:8f:d4:5e:3d:ab:18:96:c0:13:5a:58:e0:0c:
         c6:84:2f:07:04:51:30:93:19:eb:a3:2e:48:5a:56:8d:73:85:
         d5:9f:48:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org