Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/3139322e3134312e3137322e302f32322d3232203d3e20323637343930.roa
File:                     3139322e3134312e3137322e302f32322d3232203d3e20323637343930.roa (raw, json)
Hash identifier:          1k5jUYwmBTIsAIxs2K3+jjR/HamKzQi06EN4Nw9+qgY=
Subject key identifier:   72:0C:B3:37:74:3E:24:87:28:70:5B:DE:DA:41:D2:17:77:17:D4:4F
Certificate issuer:       /CN=26D731497C1CFA82C4EAD24B5AE0CB77B38F08D1
Certificate serial:       6B4B38BDD03E6617B0E3E6AC4F94F5E9306C4A39
Authority key identifier: 26:D7:31:49:7C:1C:FA:82:C4:EA:D2:4B:5A:E0:CB:77:B3:8F:08:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26D731497C1CFA82C4EAD24B5AE0CB77B38F08D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/3139322e3134312e3137322e302f32322d3232203d3e20323637343930.roa
Signing time:             Wed 08 Mar 2023 09:15:56 +0000
ROA not before:           Wed 08 Mar 2023 09:10:56 +0000
ROA not after:            Wed 06 Mar 2024 09:15:56 +0000
asID:                     267490
IP address blocks:        192.141.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4b:38:bd:d0:3e:66:17:b0:e3:e6:ac:4f:94:f5:e9:30:6c:4a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26D731497C1CFA82C4EAD24B5AE0CB77B38F08D1
        Validity
            Not Before: Mar  8 09:10:56 2023 GMT
            Not After : Mar  6 09:15:56 2024 GMT
        Subject: CN=720CB337743E248728705BDEDA41D2177717D44F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0c:c4:a6:14:ef:b5:9a:93:32:f1:10:b2:6b:
                    49:5d:a4:36:ae:3a:d4:ac:d7:2f:8a:4e:9d:7f:5c:
                    3d:95:6b:db:41:49:44:da:dc:93:9f:41:fd:9a:bc:
                    14:4f:77:6c:37:6d:67:fa:67:e5:b3:e1:35:b6:e1:
                    e3:8d:73:77:64:34:55:f7:26:3d:ef:59:0b:3b:04:
                    52:57:71:6f:e9:93:f4:3b:37:d2:0b:7f:70:eb:89:
                    6d:03:8d:65:0d:8f:24:c6:ed:3e:43:eb:66:1c:00:
                    3c:45:4c:6f:9b:f3:20:93:56:38:7f:da:3d:46:5e:
                    1a:73:8d:01:28:bd:35:5a:ad:99:ef:78:54:f9:f0:
                    2f:06:ed:b9:f4:82:08:f3:ef:79:95:68:bf:99:e0:
                    9d:6c:b4:50:bc:b7:02:39:d6:ff:99:95:e0:1d:1c:
                    50:c3:6f:f6:b2:26:7d:89:68:f3:b6:8e:72:e2:13:
                    96:42:87:fb:e2:66:c8:88:44:d7:16:7b:f5:bd:5c:
                    fa:a1:5c:33:43:00:fd:e6:3a:cd:83:8c:b7:6e:d7:
                    4d:9d:10:74:26:15:79:24:d9:fd:73:36:d8:9a:01:
                    d4:5c:bb:b6:79:ea:d5:19:c9:99:6c:85:1a:c9:39:
                    38:46:f7:24:d3:b7:95:b0:2d:fc:45:57:0f:e7:de:
                    77:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0C:B3:37:74:3E:24:87:28:70:5B:DE:DA:41:D2:17:77:17:D4:4F
            X509v3 Authority Key Identifier:
                keyid:26:D7:31:49:7C:1C:FA:82:C4:EA:D2:4B:5A:E0:CB:77:B3:8F:08:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/26D731497C1CFA82C4EAD24B5AE0CB77B38F08D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26D731497C1CFA82C4EAD24B5AE0CB77B38F08D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/3139322e3134312e3137322e302f32322d3232203d3e20323637343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:e7:ce:7a:68:d8:8a:d2:27:9e:e8:e7:17:63:20:c9:c8:ee:
         df:0f:e8:36:f8:7a:2f:2b:8c:e7:7e:df:c4:0e:cb:0f:46:95:
         61:2f:55:c3:9e:5b:c4:fb:de:a7:8c:63:09:94:32:1e:2c:a2:
         86:94:a2:3e:01:6d:ab:d1:52:91:16:46:a0:8c:11:b9:a5:7f:
         c7:e1:9d:75:84:7b:5a:a3:9c:63:ec:b0:a6:83:d6:28:dd:47:
         7d:8d:18:84:75:15:d6:3c:aa:34:f1:cd:ca:35:4a:07:ec:f3:
         8c:eb:45:4c:e7:27:96:3b:dc:51:8a:49:c3:cb:ab:e2:a6:f2:
         a6:d1:0b:46:29:8c:6e:b7:16:30:5c:74:03:83:0a:f8:8d:f2:
         80:d7:a8:98:6c:4c:41:ac:13:ee:f8:13:43:63:d2:58:6e:0f:
         47:a4:55:86:a8:06:dd:97:6b:16:36:0e:43:72:0e:59:6b:f7:
         ed:32:5d:02:fa:03:cf:3d:ca:1d:86:1e:a7:41:91:1c:52:20:
         87:37:41:be:50:11:fe:06:2e:0e:a0:b6:ff:b0:66:ba:03:38:
         cf:aa:35:5a:91:9c:a8:d3:ba:35:d2:a2:83:7b:f7:38:57:21:
         78:43:d9:99:ab:26:80:86:97:e9:18:1a:55:b4:c7:b0:9a:ce:
         2b:6a:4e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org