Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/0/3139312e3234332e37322e302f32312d3234203d3e20323633343939.roa
File:                     3139312e3234332e37322e302f32312d3234203d3e20323633343939.roa (raw, json)
Hash identifier:          hS40/HnWYFDlTSa696iKWdUQx/AvWtfIm0tHz+ICBG0=
Subject key identifier:   9D:B6:B6:5B:72:A7:85:04:E4:EA:F4:21:9D:72:BF:CB:89:0C:3B:BB
Certificate issuer:       /CN=9C4168E5104D077D81E4B301D2558E7CC963310C
Certificate serial:       791043D8EEAF283A9AAE9E0A0DA923C9DC944CCF
Authority key identifier: 9C:41:68:E5:10:4D:07:7D:81:E4:B3:01:D2:55:8E:7C:C9:63:31:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C4168E5104D077D81E4B301D2558E7CC963310C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/0/3139312e3234332e37322e302f32312d3234203d3e20323633343939.roa
Signing time:             Thu 03 Aug 2023 22:00:00 +0000
ROA not before:           Thu 03 Aug 2023 21:55:00 +0000
ROA not after:            Thu 01 Aug 2024 22:00:00 +0000
asID:                     263499
IP address blocks:        191.243.72.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:10:43:d8:ee:af:28:3a:9a:ae:9e:0a:0d:a9:23:c9:dc:94:4c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C4168E5104D077D81E4B301D2558E7CC963310C
        Validity
            Not Before: Aug  3 21:55:00 2023 GMT
            Not After : Aug  1 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:e5:99:b4:2d:2b:24:c8:2c:ae:78:4f:82:
                    9a:86:fa:19:9d:29:39:8b:ec:d8:43:7c:53:33:0d:
                    27:9c:77:2b:95:17:40:97:18:58:f7:0f:2d:04:05:
                    4d:b1:8a:38:3b:17:94:92:dd:b4:5f:b9:55:0b:c4:
                    2a:97:09:20:cc:c2:17:f0:e5:96:57:2d:a0:2c:69:
                    0b:07:ab:45:37:91:d9:76:89:b0:c9:3a:bd:59:24:
                    45:3b:81:48:17:cd:29:4a:2a:f9:37:1a:fa:7f:7d:
                    0e:61:50:30:9f:3d:0c:e7:f6:8d:5f:03:ef:ed:c7:
                    83:de:ff:68:7c:6d:58:98:ac:d2:71:d7:3e:44:be:
                    7b:16:73:de:72:4d:6a:31:6b:be:2e:23:0a:fe:d4:
                    1c:3f:40:85:83:d8:44:91:d1:f7:50:de:ce:07:27:
                    e3:68:6a:07:5d:01:9e:9d:92:e8:72:0a:1c:a9:d3:
                    04:58:8f:80:14:0a:9a:9c:a7:55:65:6f:7e:d2:5f:
                    16:82:db:c4:f8:58:59:f3:c3:57:b6:44:57:96:ef:
                    76:f4:4a:14:45:0c:43:bd:f3:a8:a3:8e:bd:2f:0b:
                    20:05:4c:57:b6:56:d5:8b:8e:b5:5e:c6:68:77:a3:
                    75:d8:0c:56:86:8e:b5:0f:cc:22:e5:e2:07:fd:c8:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B6:B6:5B:72:A7:85:04:E4:EA:F4:21:9D:72:BF:CB:89:0C:3B:BB
            X509v3 Authority Key Identifier:
                keyid:9C:41:68:E5:10:4D:07:7D:81:E4:B3:01:D2:55:8E:7C:C9:63:31:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/0/9C4168E5104D077D81E4B301D2558E7CC963310C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C4168E5104D077D81E4B301D2558E7CC963310C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/0/3139312e3234332e37322e302f32312d3234203d3e20323633343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         24:84:0b:3c:84:d3:47:c3:3f:6a:ef:4b:79:79:d1:2d:24:51:
         45:bb:b8:76:6b:94:54:a7:4a:01:92:d4:4c:2f:a1:6f:39:9b:
         ca:f2:84:f2:22:4e:8f:b5:49:05:b8:0e:f4:0f:3f:c5:63:39:
         40:8a:cf:5a:c8:a2:98:f9:c6:f2:f7:c2:8f:13:7f:c8:b3:ed:
         7d:af:61:16:df:1f:9f:66:6a:aa:a3:d0:af:29:db:5c:ac:e3:
         23:e3:f1:a4:c0:ac:2c:af:e2:6b:b0:5d:d7:d7:a7:6d:5a:22:
         73:3f:f6:d2:ac:a4:e9:92:ad:0b:0d:12:00:c8:44:30:98:fd:
         f7:7b:38:4c:b8:44:3c:48:24:55:da:3d:4f:42:77:5b:75:a9:
         66:72:07:20:01:ae:a1:fb:3c:08:ed:05:d0:8e:99:31:4b:2f:
         49:68:53:61:d9:80:2b:b0:04:73:14:39:52:e2:24:98:2f:95:
         98:cf:ab:a8:2c:ad:fe:05:80:6d:e2:4c:8c:a8:69:2f:f0:33:
         69:12:2a:d8:e3:50:ae:4f:0e:19:34:9c:df:17:d1:1c:8b:85:
         af:05:d1:bb:30:52:f2:3c:15:ff:a9:69:c6:0e:c6:d1:ef:5d:
         5f:10:65:6f:1c:31:24:aa:19:77:e9:03:b6:dc:71:a2:a3:f4:
         b6:b6:f3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org