Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3139312e3235332e3232342e302f31392d3230203d3e203238353830.roa
File:                     3139312e3235332e3232342e302f31392d3230203d3e203238353830.roa (raw, json)
Hash identifier:          dqDWiU6IsZszVAzM7oJ9PEVQ3ny10VLAsFU4Ht3wQmw=
Subject key identifier:   03:4F:B2:35:29:5D:AA:E4:1B:13:EF:90:CA:CC:69:E0:23:C5:CB:16
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       64F7C3580734E5936695DDB599303ACDB684DD51
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3139312e3235332e3232342e302f31392d3230203d3e203238353830.roa
Signing time:             Tue 22 Nov 2022 17:45:25 +0000
ROA not before:           Tue 22 Nov 2022 17:40:25 +0000
ROA not after:            Tue 21 Nov 2023 17:45:25 +0000
asID:                     28580
IP address blocks:        191.253.224.0/19 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f7:c3:58:07:34:e5:93:66:95:dd:b5:99:30:3a:cd:b6:84:dd:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Nov 22 17:40:25 2022 GMT
            Not After : Nov 21 17:45:25 2023 GMT
        Subject: CN=034FB235295DAAE41B13EF90CACC69E023C5CB16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:36:5c:e4:93:02:04:95:bd:ec:7c:81:e0:bb:
                    b4:33:c5:8d:aa:2a:2d:ea:9d:3c:b9:d4:f9:18:bb:
                    5c:cb:93:c4:3c:21:33:4b:d5:2a:91:f4:74:55:46:
                    15:7d:54:af:5b:c6:83:e8:f6:d3:c5:80:06:55:59:
                    4d:01:76:4f:ad:f0:e5:22:d5:3f:a4:c5:01:8f:fa:
                    6c:58:cd:5e:f5:db:5e:39:72:50:67:4e:8e:ea:9e:
                    35:4a:15:a3:09:dc:c1:68:93:86:56:ee:de:88:f4:
                    86:c0:c6:ff:4d:6b:2a:b6:d4:56:43:28:2d:40:3d:
                    f6:52:26:ae:63:f9:81:33:7e:5b:9c:ef:37:12:3f:
                    32:97:1d:38:76:aa:19:07:b0:16:64:f4:3c:ff:e9:
                    e0:74:cc:f5:c6:0e:7a:3e:e5:de:d2:18:41:2f:4b:
                    4e:39:a5:35:29:3b:24:a1:6e:ef:88:10:c1:2b:e0:
                    bc:9c:b3:da:94:98:1b:48:49:58:63:77:78:f3:f4:
                    d6:41:d8:f9:cc:05:95:28:57:ac:d2:99:af:19:7f:
                    0f:d2:ac:64:97:42:2e:b8:e0:49:9b:6e:ee:c6:29:
                    6d:97:b8:a4:25:36:1a:d3:4c:64:b0:eb:ef:62:8a:
                    01:33:ab:0f:7b:65:eb:cb:14:84:7e:0f:f0:ca:4a:
                    d2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4F:B2:35:29:5D:AA:E4:1B:13:EF:90:CA:CC:69:E0:23:C5:CB:16
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3139312e3235332e3232342e302f31392d3230203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:6c:b5:5f:f7:67:e7:46:10:59:ed:ce:fb:af:8e:c5:e7:cc:
         46:91:ed:04:7c:88:f1:49:ca:a6:8b:28:0a:3e:57:d9:5d:4f:
         ce:45:31:91:85:00:49:6a:41:1b:21:71:ae:8d:80:05:03:d0:
         9c:47:04:dd:f2:04:63:87:3b:ab:c7:20:d4:11:37:3e:31:e7:
         d2:04:35:cc:38:72:b9:20:53:90:6c:79:db:f5:cd:24:a7:7a:
         77:9d:38:35:f5:2d:b9:ee:3f:6d:41:3f:10:8a:6b:d3:4a:14:
         a7:b9:4e:98:52:d9:a4:f6:02:3d:fc:61:e0:6a:a5:55:ca:78:
         85:46:d3:96:d3:89:8b:be:d4:29:a6:3b:26:7d:e5:e5:e5:19:
         b3:9b:99:c0:84:34:af:d6:61:48:8b:0f:63:4e:32:31:b1:72:
         85:54:05:3e:b3:77:cc:45:c2:37:ef:2e:4f:22:00:01:f2:9d:
         b5:32:33:c0:4e:e3:a4:ce:14:64:2f:22:02:56:1d:13:b1:95:
         98:71:2a:51:13:7f:0b:c0:f7:e4:f1:73:e5:e6:b2:cd:cd:ab:
         70:62:30:f5:62:bd:e4:27:52:32:36:dc:8f:d3:fb:6f:4c:55:
         eb:8e:67:02:db:e1:f1:a0:73:1e:8b:d1:99:00:0a:e0:8b:73:
         64:53:76:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org