Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa
File:                     3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa (raw, json)
Hash identifier:          sMrE9zDYMWiNIwNmuWazujY6IwiEGcYz/trRcLzrAV0=
Subject key identifier:   FA:03:DF:61:50:18:F0:0A:94:80:0A:9A:DA:9F:F6:8F:62:88:9D:4E
Certificate issuer:       /CN=CD8207F50B5584700354C87E2FDD3EEDAABE3E9C
Certificate serial:       2E25659EB56F17CF6D235D6249E1D58208EAE7A4
Authority key identifier: CD:82:07:F5:0B:55:84:70:03:54:C8:7E:2F:DD:3E:ED:AA:BE:3E:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa
Signing time:             Thu 20 Jul 2023 22:00:00 +0000
ROA not before:           Thu 20 Jul 2023 21:55:00 +0000
ROA not after:            Thu 18 Jul 2024 22:00:00 +0000
asID:                     262891
IP address blocks:        191.253.72.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:25:65:9e:b5:6f:17:cf:6d:23:5d:62:49:e1:d5:82:08:ea:e7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8207F50B5584700354C87E2FDD3EEDAABE3E9C
        Validity
            Not Before: Jul 20 21:55:00 2023 GMT
            Not After : Jul 18 22:00:00 2024 GMT
        Subject: CN=FA03DF615018F00A94800A9ADA9FF68F62889D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:f8:ca:d5:56:d2:40:6f:ec:af:dd:1b:f1:
                    02:68:3f:b0:dc:bb:44:ba:4b:a2:08:e4:d6:96:ca:
                    b4:30:37:2c:f3:7c:3b:95:73:c4:d7:34:72:88:f6:
                    95:ee:02:a7:b3:e9:ae:33:a4:f2:28:dc:1c:18:60:
                    4f:e6:da:ee:44:ac:be:0e:1c:f4:0a:fb:eb:63:37:
                    7d:bd:ea:04:a7:84:44:17:f7:98:ad:09:42:5d:ca:
                    fb:f5:85:e6:71:bb:70:93:f0:28:35:c8:71:20:72:
                    ef:00:6b:1b:be:9b:17:0d:11:16:ea:e6:de:bd:a8:
                    be:ff:1f:ef:72:39:cb:d7:68:29:97:f5:56:0b:eb:
                    9a:1d:12:19:a1:02:e1:97:97:a6:11:a4:07:1b:a0:
                    64:4c:de:a0:51:66:3a:d4:64:ee:5b:fa:0e:40:e9:
                    ce:ce:be:0f:e2:d6:29:d4:8f:3a:78:2f:47:d0:93:
                    38:62:95:9d:64:30:07:32:26:27:9a:85:63:20:25:
                    92:2c:7e:ad:1e:d7:30:fc:0b:a6:88:96:5e:38:47:
                    99:d2:04:b2:fe:1f:23:82:25:ed:ea:97:57:05:7e:
                    49:bf:e0:e2:aa:c5:03:11:b3:a2:85:26:ca:fb:7d:
                    ed:4c:51:45:c6:c3:ff:2c:e4:fc:97:9d:51:c2:4c:
                    2c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:03:DF:61:50:18:F0:0A:94:80:0A:9A:DA:9F:F6:8F:62:88:9D:4E
            X509v3 Authority Key Identifier:
                keyid:CD:82:07:F5:0B:55:84:70:03:54:C8:7E:2F:DD:3E:ED:AA:BE:3E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:2e:c1:43:44:b7:25:34:37:b7:4d:a4:3b:6e:69:b1:e9:9c:
         d2:ec:36:85:9c:63:9f:85:2e:88:4a:cb:cd:3c:2f:39:15:52:
         ed:29:f0:e6:e5:92:6e:2f:b4:61:40:4b:52:26:2e:43:5e:ce:
         81:cd:01:2e:d6:de:e3:19:2d:8a:0d:9f:80:9d:bb:2a:40:53:
         19:c4:92:f0:9d:43:d9:da:10:2d:91:ab:b3:55:85:4b:7f:0a:
         50:7a:0d:af:e9:c0:b0:8f:44:df:45:36:16:ac:b4:72:13:0b:
         d4:39:aa:66:46:15:6c:fa:78:9a:27:d8:d6:29:f1:f2:8e:b7:
         83:62:d8:2c:62:e2:4c:83:65:6d:9d:ee:a0:1d:b8:9c:31:88:
         c2:c3:01:1c:61:f5:d1:07:2b:65:03:0c:07:e8:d8:c3:0b:23:
         c7:88:3d:89:a3:ce:b6:20:2a:46:f7:83:f9:fa:4a:ca:fa:62:
         e4:27:b3:c0:9f:d1:7c:cd:c7:c1:a0:a0:0b:64:c2:78:18:c8:
         14:03:92:39:42:17:e9:ef:bc:71:83:f0:43:68:49:23:53:ef:
         be:5e:2d:78:54:b6:99:1f:89:53:57:9d:5b:8d:e3:6f:66:36:
         8a:2d:f0:99:a9:b3:b1:02:de:bf:b7:9a:d6:87:91:b9:97:50:
         7c:1a:f9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org