Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e36332e302f32342d3234203d3e20323633343936.roa
File:                     3139312e3234332e36332e302f32342d3234203d3e20323633343936.roa (raw, json)
Hash identifier:          yOH8CQo2PlnU9w4+kvzzqyTmpk4qi/7bVW2Bcfm/ZGo=
Subject key identifier:   8A:7E:7B:F2:AB:18:CA:FB:80:28:33:03:4D:B4:14:2D:B3:ED:59:DE
Certificate issuer:       /CN=7B013DB812A088B5F605EA84BA700530A5872843
Certificate serial:       6198E9229C5C374E16A19D0F0F365B169F050AF1
Authority key identifier: 7B:01:3D:B8:12:A0:88:B5:F6:05:EA:84:BA:70:05:30:A5:87:28:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B013DB812A088B5F605EA84BA700530A5872843.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e36332e302f32342d3234203d3e20323633343936.roa
Signing time:             Mon 07 Feb 2022 12:09:23 +0000
ROA not before:           Mon 07 Feb 2022 12:04:23 +0000
ROA not after:            Mon 06 Feb 2023 12:09:23 +0000
asID:                     263496
IP address blocks:        191.243.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:98:e9:22:9c:5c:37:4e:16:a1:9d:0f:0f:36:5b:16:9f:05:0a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B013DB812A088B5F605EA84BA700530A5872843
        Validity
            Not Before: Feb  7 12:04:23 2022 GMT
            Not After : Feb  6 12:09:23 2023 GMT
        Subject: CN=8A7E7BF2AB18CAFB802833034DB4142DB3ED59DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:2c:94:01:a5:b6:e2:e4:50:a2:cd:66:c3:
                    79:0a:04:a7:43:e5:9a:d8:c3:b3:70:a1:09:b4:bf:
                    83:27:4f:cd:f3:cf:50:99:8c:87:e0:38:c0:4c:e9:
                    4c:23:1a:8a:3a:f8:b7:07:cf:db:e7:60:cb:1b:24:
                    9a:ab:4a:39:7f:db:9a:d0:26:06:c2:d4:37:77:f3:
                    36:d3:23:f2:bf:32:e8:02:fe:61:8f:3c:4b:1a:35:
                    b9:21:2c:89:1b:0c:60:e2:bd:df:d1:df:f2:d3:26:
                    25:7e:3c:c5:8e:6a:bd:25:5f:ea:ee:db:38:0c:bd:
                    b9:27:7d:80:cb:2f:33:89:ef:9e:e8:23:02:0c:61:
                    36:e9:d3:7c:7b:3d:b5:b4:36:28:5f:49:a8:bb:30:
                    f6:8f:3d:65:57:31:e5:70:41:87:7c:b2:2f:27:ef:
                    f6:f4:3b:b1:28:ba:c2:21:19:3f:1b:c8:a6:fd:ed:
                    58:be:f9:1c:52:b5:01:78:97:e4:47:d0:d9:3a:e5:
                    f9:39:a4:57:0c:00:c6:e9:d0:53:08:28:fd:5d:5a:
                    94:02:0b:6b:4d:92:c3:d9:c3:a3:4e:d6:9c:be:e3:
                    28:e5:1d:97:ad:bf:3a:96:02:10:63:4d:a5:ff:9c:
                    24:0f:6b:82:5f:da:43:d9:20:a7:e1:fe:3b:ea:fe:
                    81:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7E:7B:F2:AB:18:CA:FB:80:28:33:03:4D:B4:14:2D:B3:ED:59:DE
            X509v3 Authority Key Identifier:
                keyid:7B:01:3D:B8:12:A0:88:B5:F6:05:EA:84:BA:70:05:30:A5:87:28:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/7B013DB812A088B5F605EA84BA700530A5872843.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B013DB812A088B5F605EA84BA700530A5872843.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e36332e302f32342d3234203d3e20323633343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:e4:d4:fa:17:8e:58:04:f0:e8:b1:42:ec:2b:52:b1:b6:4e:
         24:3c:df:c4:20:eb:44:8f:d8:68:16:aa:e1:56:77:e7:91:95:
         b3:3d:44:39:86:ae:b3:1a:33:a1:1d:4b:a7:95:4b:88:dc:af:
         05:e2:70:9d:04:3c:42:8a:4a:07:0f:01:13:cd:75:04:e9:1b:
         81:4a:be:e0:37:e7:7d:75:a3:31:00:51:d3:d9:fd:b3:ba:c9:
         51:37:0c:57:2d:cb:da:57:5a:97:27:17:16:61:3c:40:b3:62:
         9d:51:ef:fd:be:95:7c:31:74:1f:bd:77:5b:1e:3f:53:20:3b:
         94:0c:61:2f:fc:28:44:cf:99:b7:75:ae:20:24:04:c6:5b:02:
         8c:8a:c9:ac:c4:2c:47:7f:1a:e1:31:50:e7:fa:d1:36:ea:71:
         7d:45:95:9b:94:ea:a2:22:e8:00:cf:62:b5:5f:14:62:3d:79:
         a4:ab:a0:95:83:8a:88:67:45:7c:9a:8e:cd:20:26:34:6a:9e:
         0a:b3:80:1a:6b:c7:ab:dc:73:fe:2f:9c:67:34:bf:64:d5:61:
         0a:0e:50:ad:a2:33:d0:64:85:92:8b:ea:20:4e:29:b7:6d:68:
         49:66:80:bd:ca:5d:20:44:07:02:77:1c:3c:78:a5:22:e9:36:
         93:d4:19:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:20 2023 by rpki-client on console-ams.rpki-client.org