Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/1/3139382e3138342e3136312e302f32342d3234203d3e203131393933.roa
File:                     3139382e3138342e3136312e302f32342d3234203d3e203131393933.roa (raw, json)
Hash identifier:          XhUe23Rj1xJKUPFog6meDCZIMuoeS01i/MgfqL8MTTY=
Subject key identifier:   F6:5B:D8:F5:37:E1:53:A9:3F:43:16:78:42:16:7B:1C:23:0B:14:14
Certificate issuer:       /CN=D9E7A0210528723D646525CFCB73A4EC0737CC58
Certificate serial:       075C4FF86117C9F61B6AB97100414C858DEC0773
Authority key identifier: D9:E7:A0:21:05:28:72:3D:64:65:25:CF:CB:73:A4:EC:07:37:CC:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9E7A0210528723D646525CFCB73A4EC0737CC58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/1/3139382e3138342e3136312e302f32342d3234203d3e203131393933.roa
Signing time:             Sat 24 Feb 2024 02:29:52 +0000
ROA not before:           Sat 24 Feb 2024 02:24:52 +0000
ROA not after:            Sat 22 Feb 2025 02:29:52 +0000
asID:                     11993
IP address blocks:        198.184.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5c:4f:f8:61:17:c9:f6:1b:6a:b9:71:00:41:4c:85:8d:ec:07:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9E7A0210528723D646525CFCB73A4EC0737CC58
        Validity
            Not Before: Feb 24 02:24:52 2024 GMT
            Not After : Feb 22 02:29:52 2025 GMT
        Subject: CN=F65BD8F537E153A93F43167842167B1C230B1414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a3:32:b8:24:5a:d2:c0:70:b8:60:56:13:bd:
                    10:da:48:8b:d0:5e:48:09:94:ea:73:75:83:20:6e:
                    45:1b:00:8d:ba:d4:ad:f8:c9:95:75:74:76:aa:3a:
                    16:55:e4:63:59:e5:a9:f0:0e:c1:76:d9:b0:46:b7:
                    59:fb:6c:28:d7:08:2f:50:af:62:37:df:0a:35:50:
                    7d:41:79:a6:cb:25:8d:d6:88:d6:8f:0c:bf:b0:af:
                    44:10:83:94:65:ea:4b:29:e5:93:b9:24:6e:34:9e:
                    d4:10:2e:e8:3b:3e:06:d1:ef:4b:5d:ae:f9:90:03:
                    e0:95:f5:b3:94:e4:7e:58:cf:ba:b9:89:94:14:b2:
                    5c:ea:2e:40:30:b7:53:05:d2:e8:bc:4a:bf:b6:9f:
                    ec:6a:25:d1:5c:c5:b4:e7:0a:9a:66:c4:5c:6d:78:
                    67:90:26:6c:6d:b6:4d:2a:3d:a5:15:a8:10:94:a7:
                    35:ef:da:b1:55:76:fa:ec:6b:c3:ec:3d:79:59:98:
                    5a:e0:da:e6:22:8f:eb:53:72:c3:c1:c7:1e:89:24:
                    14:ad:5b:8c:9d:7a:0c:d6:17:9d:b5:ba:10:ef:38:
                    ed:8c:e3:89:63:08:ae:92:9e:14:8e:44:41:e7:9d:
                    e4:33:c4:e4:c5:5d:cb:35:1f:ea:fc:1f:5d:47:51:
                    66:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5B:D8:F5:37:E1:53:A9:3F:43:16:78:42:16:7B:1C:23:0B:14:14
            X509v3 Authority Key Identifier:
                keyid:D9:E7:A0:21:05:28:72:3D:64:65:25:CF:CB:73:A4:EC:07:37:CC:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/1/D9E7A0210528723D646525CFCB73A4EC0737CC58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9E7A0210528723D646525CFCB73A4EC0737CC58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/1/3139382e3138342e3136312e302f32342d3234203d3e203131393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.184.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:03:0d:10:e5:90:98:7c:6e:d1:52:a3:56:3f:3c:99:e9:7c:
         f2:0d:33:7c:39:3a:1e:83:a1:0d:8a:80:e6:58:9d:e9:8b:4b:
         b8:0c:d3:45:a6:e5:cb:69:0a:a8:5f:b3:7e:d0:8c:f8:61:15:
         94:ab:0c:53:63:1e:71:9a:ba:98:eb:59:54:a9:3d:51:9d:c5:
         6e:66:ab:8c:a7:d4:1a:9b:26:82:59:18:d3:30:5c:59:a7:73:
         86:81:3f:df:f2:ce:d0:1b:d6:e2:bb:ce:2b:1a:f9:76:b1:4b:
         03:e1:a2:3e:7a:6c:48:78:59:8f:af:50:35:66:ff:7f:d6:04:
         bb:a9:06:57:3d:ab:6a:11:6a:cc:e6:69:92:e4:b4:e6:45:f2:
         48:e4:ce:6d:13:25:0c:6e:8e:a9:1c:28:2d:92:f9:9c:af:bb:
         e1:92:10:90:b8:54:05:14:49:b5:20:f9:25:d3:fa:c5:0b:03:
         ce:63:69:10:5e:74:ab:2f:c6:f2:e5:69:34:dc:18:ee:f6:8f:
         ce:f6:95:89:80:aa:d0:f8:1e:d8:31:d7:7c:8e:05:40:e3:56:
         fb:72:b3:9f:4b:83:e6:cf:78:8a:8f:4e:44:0e:ed:83:de:2e:
         a1:94:16:35:25:fe:98:01:74:1e:78:00:73:7e:61:b3:ec:9f:
         15:9c:5e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org