Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3139312e372e31372e302f32342d3234203d3e20323632343835.roa
File:                     3139312e372e31372e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          hc6ALlkf/WmPTu+YWdjjZbSEdeSotDuJnI5CzAbslCw=
Subject key identifier:   DA:1B:7A:A3:F3:7D:00:28:4A:1C:A2:B3:5E:FE:5D:B0:82:88:BD:1F
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       5650D9DC73597F2BDF32C2D47C7A19FD25D9F5A3
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3139312e372e31372e302f32342d3234203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:44 +0000
ROA not before:           Thu 04 Apr 2024 12:30:44 +0000
ROA not after:            Thu 03 Apr 2025 12:35:44 +0000
asID:                     262485
IP address blocks:        191.7.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:50:d9:dc:73:59:7f:2b:df:32:c2:d4:7c:7a:19:fd:25:d9:f5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:44 2024 GMT
            Not After : Apr  3 12:35:44 2025 GMT
        Subject: CN=DA1B7AA3F37D00284A1CA2B35EFE5DB08288BD1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:54:3e:d5:77:e3:9d:06:e1:e8:fa:ea:3a:
                    99:99:97:35:3e:ae:88:0b:2b:06:4d:a0:68:d8:d0:
                    a9:fe:18:cc:67:ac:31:6e:d7:81:54:82:d2:02:4f:
                    d9:d5:72:03:bf:ac:03:28:00:ff:57:41:58:77:3a:
                    93:47:0a:8f:73:31:c8:45:5a:87:cc:ad:63:a0:7e:
                    fa:25:d4:64:53:5e:01:31:a3:77:88:af:65:16:51:
                    e2:63:13:83:72:f6:a5:a4:00:1d:54:43:4f:94:56:
                    56:38:d7:6d:f9:10:b5:39:1f:32:65:ca:dc:fc:46:
                    c4:88:e9:06:84:d3:7c:60:cf:33:a8:f1:be:9d:25:
                    09:f8:a2:f5:0d:10:72:4a:b2:e7:5c:ba:97:07:f2:
                    90:db:0e:bb:3c:97:f2:75:ef:ce:4d:de:5c:11:37:
                    98:82:c6:eb:14:1a:6e:36:15:22:27:94:a8:54:e5:
                    d1:5a:5c:6d:9b:ea:5a:27:27:92:09:62:57:e3:4c:
                    66:3d:65:b0:6b:08:55:ef:26:c7:28:3e:27:97:cb:
                    d0:ae:53:4b:24:61:ed:be:b9:82:a6:43:53:6d:06:
                    78:08:09:fe:4a:29:c4:f7:af:8f:bd:cb:b4:a4:23:
                    48:e3:4a:03:b4:92:4f:a9:63:18:ef:5a:79:e6:6f:
                    b0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1B:7A:A3:F3:7D:00:28:4A:1C:A2:B3:5E:FE:5D:B0:82:88:BD:1F
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3139312e372e31372e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:1b:23:6e:1f:09:a5:8e:26:79:a9:14:56:03:e4:56:f3:11:
         2b:11:07:9a:ea:df:ac:9c:d8:e0:fe:7b:37:fc:e2:c8:23:76:
         96:d9:3b:2e:6a:8e:54:7a:26:8d:de:1b:13:42:28:f5:97:2c:
         57:aa:21:6f:e8:28:99:a8:4c:e1:66:cf:79:cf:c2:d3:50:3b:
         c6:8d:c7:c0:19:67:e1:1d:75:aa:91:cc:18:83:06:db:a9:60:
         4c:05:a3:72:a0:1a:e7:e1:d1:53:bc:5d:70:c1:92:96:f8:83:
         62:80:36:14:20:7e:b6:77:c7:cb:6e:9d:67:ea:cf:3f:30:3c:
         6a:a8:4d:c7:85:e0:e2:84:e0:ae:5e:6f:4e:92:0c:ac:25:60:
         2e:16:b2:9a:ed:79:5d:35:00:06:b7:76:91:55:41:c5:f9:bb:
         53:b8:4f:28:3f:2e:67:da:1d:b8:72:cb:de:a2:bc:52:ec:41:
         9d:f7:e3:dc:fb:f2:62:f6:7c:94:24:ff:d7:30:c7:a6:fc:d3:
         a7:f4:13:d6:43:9c:bb:d1:48:97:35:36:d9:6b:da:c3:ce:00:
         d6:3b:89:c0:8a:60:72:ed:23:75:c8:b2:45:83:2a:68:2a:5d:
         e9:54:37:97:37:bd:91:32:bf:3a:a0:d6:56:5e:78:44:31:c4:
         18:5b:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org