Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3139312e362e38302e302f32312d3231203d3e20323632393932.roa
File:                     3139312e362e38302e302f32312d3231203d3e20323632393932.roa (raw, json)
Hash identifier:          56M8KxemWQ69cIAXwEIAG36h6fyHMaHQuWe+gBph77w=
Subject key identifier:   45:0A:7A:6F:A2:85:5B:D7:9C:2C:42:6C:D0:95:F9:26:8E:51:E9:51
Certificate issuer:       /CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
Certificate serial:       7700ACF75863577F7328C4E0FB1B0AAF4E4D44F7
Authority key identifier: 45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3139312e362e38302e302f32312d3231203d3e20323632393932.roa
Signing time:             Mon 23 Jan 2023 21:42:25 +0000
ROA not before:           Mon 23 Jan 2023 21:37:25 +0000
ROA not after:            Mon 22 Jan 2024 21:42:25 +0000
asID:                     262992
IP address blocks:        191.6.80.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:00:ac:f7:58:63:57:7f:73:28:c4:e0:fb:1b:0a:af:4e:4d:44:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
        Validity
            Not Before: Jan 23 21:37:25 2023 GMT
            Not After : Jan 22 21:42:25 2024 GMT
        Subject: CN=450A7A6FA2855BD79C2C426CD095F9268E51E951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fb:46:ec:80:01:ad:92:8f:0d:ae:76:cb:4a:
                    d1:72:7e:cf:3f:73:03:04:75:2f:66:7c:00:7c:a0:
                    7a:6d:a8:eb:18:8b:ec:f1:ed:28:54:d5:05:26:8f:
                    1c:da:24:9b:9d:85:a1:c4:a1:e7:f2:57:ad:a3:8f:
                    33:b4:29:07:45:56:bd:b5:da:40:55:be:64:d6:d7:
                    7a:9b:27:fa:4a:83:73:06:05:49:ef:4c:d0:08:e2:
                    83:90:90:b0:b8:06:4a:58:c6:8f:0a:e3:8b:e3:09:
                    d4:a8:d9:92:f9:83:2f:62:9a:50:00:d9:db:7f:59:
                    65:6f:4e:49:51:ad:8d:7c:4a:89:4e:1f:00:6e:54:
                    e1:40:76:63:21:cf:33:d6:bf:18:9f:28:7d:8b:f6:
                    cc:21:42:36:85:60:22:91:ea:e7:8c:57:e8:90:0c:
                    47:1f:43:e2:55:40:e7:9a:b3:49:90:db:da:16:84:
                    56:54:45:fe:d6:a8:a9:fb:41:d8:82:7e:3e:aa:2c:
                    24:9a:4c:e6:83:77:3d:a0:15:74:06:43:6d:a9:a0:
                    30:b7:40:db:9f:a1:46:93:e8:82:c2:6d:2a:20:57:
                    f1:72:ab:6d:b0:e3:5d:d3:72:a1:d4:51:82:d8:dc:
                    cc:5e:ef:bf:04:56:76:61:37:ba:a1:56:c1:53:29:
                    bf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0A:7A:6F:A2:85:5B:D7:9C:2C:42:6C:D0:95:F9:26:8E:51:E9:51
            X509v3 Authority Key Identifier:
                keyid:45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/4579E09F6F46B73500F1877C7F7BC8F0F677E607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3139312e362e38302e302f32312d3231203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:1d:8f:81:ec:ce:98:8c:80:4b:33:7b:2a:ca:16:25:c2:82:
         ed:02:48:6a:cc:f5:db:2c:b2:56:31:c2:c7:1e:ad:50:0e:b6:
         de:21:ff:02:b3:41:95:4d:01:60:b1:8e:2d:a9:42:84:8e:bf:
         69:d6:ee:36:f3:17:60:65:09:bc:89:43:9d:96:cf:37:ce:d2:
         48:47:24:65:d6:af:a9:78:06:0e:56:93:70:d0:27:d5:2d:48:
         bc:56:e1:44:f2:09:a1:cf:4f:00:6b:16:a7:4b:bf:18:f6:13:
         f1:65:85:86:24:09:77:ea:d3:8f:2d:79:68:7a:4e:f7:da:a8:
         0a:44:05:ac:ce:e7:fa:f5:28:31:b7:a2:8d:73:44:84:69:f9:
         17:ad:e1:7e:9c:44:3a:10:4f:fa:02:79:2e:05:20:a0:56:db:
         4e:da:05:a5:3f:de:1e:f6:cf:26:03:8e:4d:2e:ef:3f:0b:ef:
         2a:81:2e:70:da:01:6c:6d:b6:e6:55:20:25:12:b9:15:a7:41:
         19:34:d2:f6:8d:33:e9:aa:5c:54:ee:ed:2a:ae:31:31:b1:21:
         8d:b9:2f:7b:27:ee:e5:72:45:25:1b:57:5b:b2:02:2f:28:eb:
         d6:8b:37:8c:64:54:f0:b1:1a:9e:eb:7c:ad:5f:28:fe:cd:b8:
         14:f0:32:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org