Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/0/3139312e372e3136382e302f32312d3234203d3e20323632383631.roa
File:                     3139312e372e3136382e302f32312d3234203d3e20323632383631.roa (raw, json)
Hash identifier:          dHSDcmqN773u2l1dnsdstFp2pWhnqyxdvTgiTEU5zpM=
Subject key identifier:   DA:01:0F:29:10:3A:F0:60:FB:7E:8B:D5:7F:29:11:E0:36:6E:C3:AF
Certificate issuer:       /CN=665F497A664051E7799FA890013BCC2F5B0B4428
Certificate serial:       6C589723A91C051F510E29A05D6B8C7B1F244625
Authority key identifier: 66:5F:49:7A:66:40:51:E7:79:9F:A8:90:01:3B:CC:2F:5B:0B:44:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/665F497A664051E7799FA890013BCC2F5B0B4428.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/0/3139312e372e3136382e302f32312d3234203d3e20323632383631.roa
Signing time:             Fri 09 Feb 2024 15:42:34 +0000
ROA not before:           Fri 09 Feb 2024 15:37:34 +0000
ROA not after:            Fri 07 Feb 2025 15:42:34 +0000
asID:                     262861
IP address blocks:        191.7.168.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:58:97:23:a9:1c:05:1f:51:0e:29:a0:5d:6b:8c:7b:1f:24:46:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665F497A664051E7799FA890013BCC2F5B0B4428
        Validity
            Not Before: Feb  9 15:37:34 2024 GMT
            Not After : Feb  7 15:42:34 2025 GMT
        Subject: CN=DA010F29103AF060FB7E8BD57F2911E0366EC3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:81:80:0e:20:93:08:af:c1:f3:db:c3:ff:
                    37:38:f8:53:db:b2:95:97:03:46:6f:47:d6:d7:c7:
                    9a:13:50:6c:f9:fe:79:30:8c:18:0e:91:b7:7d:87:
                    44:81:b8:c8:35:7e:e6:fb:32:64:b2:fe:bd:62:d6:
                    da:ad:db:0c:e5:88:0b:c8:32:54:5b:92:d4:77:9b:
                    53:af:af:39:00:07:ea:44:be:0e:99:38:6c:e0:26:
                    19:6a:54:ec:e2:25:98:84:3e:d8:95:05:78:ed:b5:
                    95:d9:44:e4:4d:38:7f:a7:f9:f7:a9:35:65:84:67:
                    a2:96:14:0e:15:f5:9a:0d:00:fd:c9:f7:3a:f8:c4:
                    9b:43:83:b8:a0:e0:41:51:2e:15:96:75:7c:ab:70:
                    5e:34:e2:04:06:09:2b:b0:66:5a:2a:12:73:26:46:
                    05:7a:fd:b1:a6:b8:06:cf:d3:93:47:13:a3:09:49:
                    1a:9b:5f:3c:9a:8d:34:eb:f5:93:37:eb:8d:a0:4c:
                    7c:51:c6:39:d6:de:45:92:a9:b3:b0:1f:c0:6b:cc:
                    3d:80:4b:2d:2d:f9:e1:60:50:71:d4:e0:f9:6c:45:
                    87:54:1d:14:2b:af:e6:b5:dd:1a:32:b1:18:4b:a3:
                    f1:3d:40:67:54:b4:c4:e3:38:70:4b:97:25:ec:92:
                    3b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:01:0F:29:10:3A:F0:60:FB:7E:8B:D5:7F:29:11:E0:36:6E:C3:AF
            X509v3 Authority Key Identifier:
                keyid:66:5F:49:7A:66:40:51:E7:79:9F:A8:90:01:3B:CC:2F:5B:0B:44:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/0/665F497A664051E7799FA890013BCC2F5B0B4428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/665F497A664051E7799FA890013BCC2F5B0B4428.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/0/3139312e372e3136382e302f32312d3234203d3e20323632383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b9:99:41:2d:6d:10:d3:17:ca:e0:cc:31:53:b8:67:23:f0:ea:
         0e:af:ea:61:3b:8b:7d:06:86:7b:6e:aa:66:9b:38:0a:0c:fe:
         aa:80:71:8e:10:12:4f:6c:5c:f2:49:c5:53:6e:55:aa:ab:1d:
         76:8f:51:7d:88:9a:af:25:de:60:13:49:eb:60:99:e8:18:84:
         0e:4a:38:d2:68:7a:49:8b:c9:f4:8e:51:8e:b5:47:32:d6:b6:
         54:d8:29:c0:1a:ec:50:ea:00:52:fc:8e:71:7f:e0:6c:28:12:
         de:d7:58:8e:31:84:67:7d:84:ea:2f:a1:b0:2b:d7:a4:81:b6:
         00:d7:14:12:a4:91:6b:65:0f:91:a6:07:8d:9d:e9:88:2f:3b:
         42:d3:8c:06:c0:25:72:75:6b:0c:8f:2d:25:b5:e5:29:19:07:
         9f:ae:6b:7e:49:d2:07:7e:ae:34:80:11:44:34:1b:ff:39:ab:
         c6:30:43:75:fa:4e:fc:22:eb:18:fd:34:b4:dc:7e:9b:2b:4e:
         41:c2:14:18:9b:4f:cf:8b:2b:54:16:51:d5:ed:14:bd:da:95:
         60:52:50:ec:38:18:99:54:e5:73:a7:07:1b:3e:de:ef:ea:79:
         9f:6a:57:c8:44:c0:ef:9c:27:a6:fb:d5:b1:3c:f9:04:a0:e5:
         44:47:03:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org