Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
File:                     3139312e3234302e302e302f31372d3235203d3e203238323032.roa (raw, json)
Hash identifier:          /aqGO61LNTWv0h0M/dNyor0qrrtWCDwxA4sE1I2lR/Q=
Subject key identifier:   22:F4:3A:78:94:F4:B3:C4:E9:F3:F2:A0:18:F2:A9:41:95:41:F2:A6
Certificate issuer:       /CN=EE2CA5226BA54EB97440397DC62AB9F75B58FA95
Certificate serial:       3164515A6F7D7DB9DF56B50456775B39247FC340
Authority key identifier: EE:2C:A5:22:6B:A5:4E:B9:74:40:39:7D:C6:2A:B9:F7:5B:58:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
Signing time:             Wed 13 Dec 2023 12:36:38 +0000
ROA not before:           Wed 13 Dec 2023 12:31:38 +0000
ROA not after:            Wed 11 Dec 2024 12:36:38 +0000
asID:                     28202
IP address blocks:        191.240.0.0/17 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:64:51:5a:6f:7d:7d:b9:df:56:b5:04:56:77:5b:39:24:7f:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE2CA5226BA54EB97440397DC62AB9F75B58FA95
        Validity
            Not Before: Dec 13 12:31:38 2023 GMT
            Not After : Dec 11 12:36:38 2024 GMT
        Subject: CN=22F43A7894F4B3C4E9F3F2A018F2A9419541F2A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ff:3a:1b:89:05:0e:ff:63:20:44:db:0d:0c:
                    19:3c:ba:5e:e7:bb:0b:b0:5e:d1:c5:83:cf:c5:21:
                    c5:ab:26:e1:bf:05:df:c1:85:dc:a2:f5:3f:bb:95:
                    64:90:78:ad:ec:7a:bd:88:af:7f:08:f8:0c:01:dc:
                    f9:1e:e7:d6:53:d2:9b:df:3b:67:10:b2:d6:23:13:
                    20:b4:b9:1d:0d:50:56:01:a9:ee:2d:63:87:db:24:
                    dd:02:b6:d9:b8:69:4a:b4:6b:cb:e5:5c:be:b5:e0:
                    be:61:5e:f1:c2:c0:b4:48:ea:c3:51:04:d6:61:d9:
                    4f:5c:01:60:f9:05:51:14:fa:4b:2f:39:be:5e:c6:
                    98:f2:ec:50:09:bd:e1:24:93:2d:79:fd:ef:c9:ef:
                    c6:e3:85:d5:cc:91:3d:7a:db:6d:8b:86:c2:05:09:
                    8d:a3:49:95:58:c3:13:83:44:94:e8:8a:a8:33:05:
                    6a:89:f6:25:94:79:a2:09:30:3f:68:03:22:1c:f4:
                    f0:3e:4c:a4:6b:e4:ac:cd:39:a6:af:d3:ee:19:b2:
                    ee:da:15:0f:17:e5:e1:3e:ca:ca:12:1b:ac:83:6b:
                    8d:e4:56:d5:3b:d8:ec:92:86:e5:d6:1a:22:02:d9:
                    03:0c:76:8f:28:64:53:3a:93:91:aa:ae:d9:30:b4:
                    59:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F4:3A:78:94:F4:B3:C4:E9:F3:F2:A0:18:F2:A9:41:95:41:F2:A6
            X509v3 Authority Key Identifier:
                keyid:EE:2C:A5:22:6B:A5:4E:B9:74:40:39:7D:C6:2A:B9:F7:5B:58:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e3234302e302e302f31372d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2f:e0:73:8d:32:8b:42:8e:69:19:91:e8:89:15:9c:23:d6:07:
         18:00:28:8e:7f:cd:a6:c6:6f:28:6b:2e:20:00:5e:ca:ee:ed:
         20:46:f6:e3:31:79:b2:12:1a:8d:27:a1:16:89:aa:89:bc:3c:
         30:f2:fd:ed:c9:be:81:e7:fe:34:26:73:46:b4:ff:9d:82:2f:
         92:63:c2:cd:53:9f:6c:8b:50:56:60:c7:87:b5:90:1f:37:82:
         84:65:ce:b2:4b:97:70:a5:51:20:8b:06:a1:a3:bd:44:c5:de:
         57:20:6e:25:73:c0:75:61:f0:dd:45:12:56:63:59:67:70:11:
         3e:26:a0:78:c8:c5:b5:47:fc:a9:62:25:7c:cc:9e:ab:7a:79:
         39:a5:2c:d1:39:be:6c:84:85:97:bc:94:21:9e:c0:d8:c4:d6:
         11:4e:a4:0d:db:86:e9:3c:d7:1f:24:a6:1f:5f:48:b6:ba:ab:
         ef:04:c0:96:c6:8b:76:dd:66:3a:da:83:67:4b:68:66:5a:59:
         b6:58:4a:88:37:1b:e5:bb:c6:dc:e3:28:c8:ef:74:56:2f:1e:
         ba:7a:fc:bc:c9:47:c3:97:53:47:89:9f:49:ad:62:e5:cc:a4:
         e6:9c:ae:57:56:de:4c:83:eb:54:ff:e0:3a:da:cd:fc:a6:2c:
         49:2a:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org