Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/3139312e35332e302e302f31362d3235203d3e203238323032.roa
File:                     3139312e35332e302e302f31362d3235203d3e203238323032.roa (raw, json)
Hash identifier:          KrwbmS6k2/ku2hmUprDFUxz84HFCHuG0Ks1RbHDFSx8=
Subject key identifier:   A3:42:23:B8:0C:EA:10:D9:5F:B3:E3:AF:B2:F6:63:93:66:BE:39:2F
Certificate issuer:       /CN=E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8
Certificate serial:       07FC36859C8CE715DB876E0AB31F1E2CA5C1F949
Authority key identifier: E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/3139312e35332e302e302f31362d3235203d3e203238323032.roa
Signing time:             Thu 22 Jun 2023 11:13:39 +0000
ROA not before:           Thu 22 Jun 2023 11:08:39 +0000
ROA not after:            Thu 20 Jun 2024 11:13:39 +0000
asID:                     28202
IP address blocks:        191.53.0.0/16 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fc:36:85:9c:8c:e7:15:db:87:6e:0a:b3:1f:1e:2c:a5:c1:f9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8
        Validity
            Not Before: Jun 22 11:08:39 2023 GMT
            Not After : Jun 20 11:13:39 2024 GMT
        Subject: CN=A34223B80CEA10D95FB3E3AFB2F6639366BE392F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:09:e0:5e:57:13:da:b6:50:fd:af:37:f5:
                    c6:1a:81:e7:bd:92:39:50:fc:3a:18:93:93:a1:c6:
                    e4:32:03:80:13:5f:c7:ba:26:64:ae:11:1a:10:4d:
                    78:03:30:6a:fc:e8:95:50:d9:0b:bc:ff:55:99:da:
                    7b:89:81:a0:cd:bd:a9:58:4f:5c:1a:15:4b:15:2a:
                    7e:0f:ef:a5:be:ae:b8:ba:9a:f5:6a:2f:3a:5d:72:
                    d9:f8:17:28:1d:76:66:91:7e:29:c1:07:38:cc:38:
                    18:07:47:68:b2:ae:78:0d:a8:19:b2:bf:44:6f:de:
                    19:74:69:ac:44:13:cc:69:22:4e:37:b9:41:d5:8b:
                    12:fe:64:b9:da:fb:cd:7a:a5:6e:49:c5:03:53:9e:
                    14:72:d3:a2:f8:3b:f9:63:67:3b:85:a3:4f:78:de:
                    37:80:7f:82:ca:09:0a:f2:44:1c:c9:e6:5b:f0:e4:
                    e1:3d:fb:1c:73:0d:cd:c4:a5:61:a1:62:49:34:48:
                    83:c3:67:63:54:2d:a0:dd:4c:ec:ad:5c:40:76:f4:
                    3a:66:d5:26:26:20:8b:6d:c4:6b:a8:ef:41:62:d0:
                    24:b2:5d:21:e7:c9:96:f8:11:0f:b1:70:23:4b:ee:
                    86:a8:fb:ce:d6:ef:aa:e1:ec:f4:4c:c8:c0:37:59:
                    b3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:42:23:B8:0C:EA:10:D9:5F:B3:E3:AF:B2:F6:63:93:66:BE:39:2F
            X509v3 Authority Key Identifier:
                keyid:E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/3139312e35332e302e302f31362d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:41:6c:fc:86:42:a5:21:a9:58:bd:dc:77:e4:fc:71:8c:21:
         a7:4e:2d:8d:57:10:15:a3:35:d8:4e:cb:70:b4:fe:d1:55:35:
         8b:11:2d:07:17:46:57:85:b7:73:42:d7:b7:e9:4c:ff:74:f0:
         7a:69:95:83:c9:95:fa:22:8f:57:5b:12:e6:0b:d6:82:a9:3b:
         88:ab:c6:43:67:76:ef:a0:cb:dd:74:48:7e:34:2d:91:58:ad:
         de:98:b9:61:8d:4c:f2:57:ea:1c:20:69:40:27:29:5f:87:3d:
         b5:af:eb:f4:4b:51:44:a1:53:59:42:9f:dd:c8:03:ed:54:2b:
         81:f2:b2:30:37:a4:bd:c8:23:30:04:a4:2a:b5:18:11:b3:72:
         85:f9:8c:46:7f:06:35:0d:f6:53:0b:46:96:53:57:ae:aa:b8:
         33:c3:c8:f7:db:94:e5:b2:83:92:aa:c2:53:1d:b3:5d:55:07:
         c3:80:f1:7c:c3:75:c3:61:20:7d:e9:fe:3b:b0:08:a9:3f:32:
         d9:d3:33:bd:b7:27:9a:92:5b:9d:ee:41:ee:64:55:1c:b3:91:
         89:b6:3d:82:34:60:1c:51:84:8e:d6:cc:03:b6:b5:a0:0d:e0:
         18:9b:4f:17:07:39:96:cd:0c:ad:c6:58:a9:c1:45:b6:07:a9:
         64:ed:7f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org