Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HufT6zCNxXBAE32P7QyppzpwE6Qxx6DbaXotG9agcm7/0/3139322e3134312e3139362e302f32322d3234203d3e20323637343734.roa
File:                     3139322e3134312e3139362e302f32322d3234203d3e20323637343734.roa (raw, json)
Hash identifier:          tacBoRzhsQdmGCSv6bS2/XEspDLzmoq7hsya0XMinNo=
Subject key identifier:   76:F3:E0:0F:E2:33:2E:20:A2:82:77:5E:A6:82:AE:09:54:2F:8C:32
Certificate issuer:       /CN=0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000
Certificate serial:       4AE84BB04AF11F3277C2B695A163B4978A6C116F
Authority key identifier: 0B:FB:53:DE:E2:9C:7D:19:78:AB:6A:0F:9C:CB:8E:ED:83:2A:D0:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HufT6zCNxXBAE32P7QyppzpwE6Qxx6DbaXotG9agcm7/0/3139322e3134312e3139362e302f32322d3234203d3e20323637343734.roa
Signing time:             Tue 18 Apr 2023 12:58:53 +0000
ROA not before:           Tue 18 Apr 2023 12:53:53 +0000
ROA not after:            Tue 16 Apr 2024 12:58:53 +0000
asID:                     267474
IP address blocks:        192.141.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e8:4b:b0:4a:f1:1f:32:77:c2:b6:95:a1:63:b4:97:8a:6c:11:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000
        Validity
            Not Before: Apr 18 12:53:53 2023 GMT
            Not After : Apr 16 12:58:53 2024 GMT
        Subject: CN=76F3E00FE2332E20A282775EA682AE09542F8C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d1:9f:4a:24:6d:d5:b9:30:64:a9:70:ef:26:
                    70:bb:57:b7:bc:6b:b5:b4:4b:ea:37:82:9e:b7:e2:
                    e8:d7:77:48:d9:3d:21:97:07:91:05:6d:fc:6b:40:
                    f2:ba:1d:a5:c9:d2:a3:71:64:7e:0f:41:19:c1:d3:
                    00:1e:8c:26:98:02:e6:a8:43:2a:7f:78:9d:92:57:
                    65:4e:53:bb:c3:40:22:47:56:ff:54:c3:61:2e:86:
                    74:be:4b:4e:17:90:10:97:c5:83:d3:e8:0c:a9:a1:
                    59:86:49:ba:ef:cb:d7:55:6f:50:2d:d3:ab:b4:0a:
                    5b:ce:40:da:2a:d0:72:24:ec:77:65:eb:90:d2:63:
                    06:cb:ef:69:3a:c2:43:60:80:84:ab:a4:fb:c7:58:
                    98:15:4d:06:c7:fc:8e:3d:bc:a0:45:9b:e8:8d:9e:
                    f6:55:3e:68:ab:dc:18:59:08:cf:6f:3c:cc:80:76:
                    5e:c9:63:53:ae:80:be:92:25:ba:98:86:da:03:7a:
                    4e:77:c3:17:cd:57:9c:67:5d:a3:41:b2:8b:f1:01:
                    c5:4c:b1:4d:47:47:4c:2c:9c:7f:b3:6b:a5:31:db:
                    fa:cd:4e:37:cb:c8:07:e0:09:ab:3d:68:ef:01:31:
                    9c:c1:41:db:e1:1c:bc:f6:60:52:11:94:2f:73:dc:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F3:E0:0F:E2:33:2E:20:A2:82:77:5E:A6:82:AE:09:54:2F:8C:32
            X509v3 Authority Key Identifier:
                keyid:0B:FB:53:DE:E2:9C:7D:19:78:AB:6A:0F:9C:CB:8E:ED:83:2A:D0:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HufT6zCNxXBAE32P7QyppzpwE6Qxx6DbaXotG9agcm7/0/0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HufT6zCNxXBAE32P7QyppzpwE6Qxx6DbaXotG9agcm7/0/3139322e3134312e3139362e302f32322d3234203d3e20323637343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:63:41:b6:3a:9b:7f:95:30:3e:5b:8d:36:3c:62:48:c2:80:
         2f:48:2f:73:6c:a2:5c:0f:6b:3c:01:03:00:b3:b7:ef:0f:73:
         6a:20:d1:d7:32:10:5b:b6:42:79:c4:81:dc:e0:4f:ab:99:0b:
         6a:03:68:8f:42:c1:53:da:b2:ca:d2:bb:91:87:1f:fd:6d:24:
         4d:e2:e0:cc:04:08:26:00:c7:65:8f:73:4b:8c:da:28:19:22:
         ac:c8:e9:18:69:a3:06:ec:e6:f6:d8:d9:ce:d4:e3:61:df:6c:
         41:1e:ac:e6:8c:56:9a:bc:f0:00:2e:59:9d:d7:0a:fd:a7:2d:
         87:53:3c:58:e5:c7:06:c2:70:c4:b8:2c:10:55:f8:21:b2:46:
         ad:9b:57:d3:70:3a:6b:c7:bc:37:24:7a:99:61:2c:b0:f5:df:
         f9:9c:b1:0e:fe:c3:e7:68:7b:af:49:8e:97:1c:7d:05:06:eb:
         f3:fd:bf:08:bc:84:f0:63:e4:b6:e1:ff:d3:e1:29:d6:41:19:
         c7:70:75:43:19:98:4b:d8:72:f2:e5:84:75:cf:4f:b3:ed:a1:
         34:39:0b:17:70:3a:7c:ff:18:27:b5:15:9b:1d:2d:e6:9e:64:
         d2:92:c8:ca:81:25:50:f6:d2:0e:39:d8:02:53:ce:32:e2:b4:
         a5:e1:ee:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org