Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3139312e372e31382e302f32342d3234203d3e20323632343835.roa
File:                     3139312e372e31382e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          WU0lia4mFd8d+ubEDD2XiBiSAruvEdTqKg4fzFv9tNM=
Subject key identifier:   FD:58:1A:18:06:13:CF:66:E1:A7:96:C4:82:76:7E:6E:D8:E6:CA:98
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       1A9D129C8555B994C3923409488160D48C9BC7A1
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3139312e372e31382e302f32342d3234203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:46 +0000
ROA not before:           Thu 04 Apr 2024 12:30:46 +0000
ROA not after:            Thu 03 Apr 2025 12:35:46 +0000
asID:                     262485
IP address blocks:        191.7.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9d:12:9c:85:55:b9:94:c3:92:34:09:48:81:60:d4:8c:9b:c7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:46 2024 GMT
            Not After : Apr  3 12:35:46 2025 GMT
        Subject: CN=FD581A180613CF66E1A796C482767E6ED8E6CA98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:95:d6:67:fa:3e:30:35:b5:ea:39:ac:1d:61:
                    b4:61:04:09:a0:37:ca:ac:ef:54:79:51:f3:00:49:
                    d2:5a:1d:a6:a4:5d:7b:18:d8:a7:bf:6a:d7:46:50:
                    26:74:c8:ba:48:37:00:5a:e1:7f:05:6d:ef:b6:3b:
                    94:eb:14:d1:67:1a:4d:db:b3:a9:b8:34:05:73:19:
                    37:14:d5:b4:0e:e5:4c:7e:5c:47:de:22:1a:ec:56:
                    62:ad:b1:6d:bf:6e:0e:5b:11:cf:e2:b0:72:56:ef:
                    94:56:c1:de:43:07:a7:9f:7a:45:90:7a:6b:a7:9f:
                    46:b8:4f:f6:b4:d6:d6:2b:46:d8:9c:73:aa:43:d0:
                    02:bb:f9:73:eb:c9:5a:2d:c6:65:21:fe:49:a2:ae:
                    6e:26:26:b7:1e:65:64:fc:de:83:90:37:c8:3a:c4:
                    99:78:b5:c2:f3:b5:98:4c:5e:cc:ed:05:b2:da:fd:
                    27:b6:84:f1:e9:f4:bd:b8:18:c4:e8:33:cc:92:a6:
                    5c:ef:77:1f:6a:4c:92:73:be:fc:ec:c9:d4:5b:c0:
                    34:c2:f6:6b:d9:06:66:72:77:a3:ea:66:f5:88:6f:
                    f9:ec:d6:f1:25:0a:ec:13:db:75:04:37:89:c4:ec:
                    4e:ca:93:28:7a:3d:99:66:54:a2:8c:2a:d4:40:46:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:58:1A:18:06:13:CF:66:E1:A7:96:C4:82:76:7E:6E:D8:E6:CA:98
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3139312e372e31382e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:13:96:b2:0a:e9:af:b2:2b:c1:2b:a5:37:5c:49:99:0e:d8:
         1e:10:0c:24:87:8d:d3:4e:ab:bc:74:01:ba:9f:3a:85:82:7a:
         96:60:bb:de:e4:d7:35:1d:49:4c:95:cb:b4:34:83:bc:61:b9:
         63:a0:03:c3:5d:57:9f:a0:64:9f:9b:55:00:4f:ea:0b:12:9b:
         f8:9f:b5:ff:b8:b5:df:ca:8f:cd:50:ee:0f:f9:f8:7f:1e:c9:
         bf:94:71:f4:97:9a:31:d6:a3:07:26:59:c3:92:e8:4d:a0:55:
         79:7e:cc:fe:d4:97:bc:ac:cc:73:f8:9d:3b:85:da:c6:55:28:
         ff:1b:ec:4c:94:b4:e9:ce:5a:d0:9e:40:4b:0b:73:34:ee:27:
         88:0f:76:fb:68:ad:31:d9:5a:65:7a:54:2b:b0:d6:fe:35:fa:
         18:39:d3:9d:13:85:9e:4e:31:56:97:d9:2e:60:2c:3a:d9:f5:
         23:b8:37:fd:0b:14:24:2f:a0:c5:7d:93:c6:f9:4a:98:6a:69:
         91:fc:fd:95:65:d1:d4:19:92:57:f9:c9:1f:25:5d:6f:f0:b9:
         09:37:8f:82:40:82:c2:4d:89:a5:05:42:54:da:1f:b8:2e:20:
         d5:d2:65:3c:2e:00:6c:88:eb:22:45:94:65:f5:aa:8f:ba:6e:
         3c:95:19:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org