Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3139312e372e3133362e302f32342d3234203d3e20323633333231.roa
File:                     3139312e372e3133362e302f32342d3234203d3e20323633333231.roa (raw, json)
Hash identifier:          Edy46enEwOjIk4T+n9iTW4mVQKPUbxDh6O1W9kY5PbI=
Subject key identifier:   6F:7B:A7:43:F9:2E:35:F2:7E:E9:94:55:6D:31:81:FD:BF:D8:E3:CA
Certificate issuer:       /CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
Certificate serial:       249B059EC788DC436FE506E818F8CCA1D666C13C
Authority key identifier: D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3139312e372e3133362e302f32342d3234203d3e20323633333231.roa
Signing time:             Thu 20 Jul 2023 12:43:25 +0000
ROA not before:           Thu 20 Jul 2023 12:38:25 +0000
ROA not after:            Thu 18 Jul 2024 12:43:25 +0000
asID:                     263321
IP address blocks:        191.7.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9b:05:9e:c7:88:dc:43:6f:e5:06:e8:18:f8:cc:a1:d6:66:c1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
        Validity
            Not Before: Jul 20 12:38:25 2023 GMT
            Not After : Jul 18 12:43:25 2024 GMT
        Subject: CN=6F7BA743F92E35F27EE994556D3181FDBFD8E3CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:07:bd:3b:26:95:01:83:df:89:ef:8a:56:
                    99:ba:2f:b9:49:30:dc:5d:59:1c:6c:c7:fc:26:34:
                    da:f8:bb:0c:1b:ae:42:cc:bc:6f:84:b9:ed:a0:8c:
                    74:ba:ac:ec:e6:0c:d5:0b:c8:90:6f:6d:a2:e8:59:
                    84:1d:78:81:2d:bb:b0:c9:6f:48:48:e5:0e:85:b5:
                    8e:64:d9:47:19:ed:d1:88:89:9d:73:84:7d:c6:c7:
                    3e:5a:97:98:9a:69:71:a6:ad:95:d2:b5:31:20:76:
                    7f:ca:43:62:0d:2a:cf:e6:e0:a0:3b:a9:aa:1e:8c:
                    49:8b:b6:74:aa:eb:e0:ac:15:d9:06:cd:4c:20:35:
                    6b:47:63:54:46:97:28:8b:56:00:ad:de:e8:62:cf:
                    25:7d:c9:94:90:c8:54:e8:6c:fa:a1:b6:2f:70:4b:
                    9b:c4:9d:ba:da:31:5b:78:cb:8c:98:8a:04:e5:28:
                    37:c2:34:37:20:f9:fa:41:c3:33:14:71:80:0c:6a:
                    90:aa:dd:e9:f9:02:d3:0c:b2:a6:00:8d:11:ea:4d:
                    6f:0c:97:55:95:c2:6c:94:ed:ca:ca:fa:77:52:1e:
                    90:c5:db:d9:fe:a4:2a:56:96:c3:8f:79:25:df:60:
                    4a:4e:1b:60:f8:35:ec:f2:e3:19:9d:bd:09:e0:08:
                    d9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7B:A7:43:F9:2E:35:F2:7E:E9:94:55:6D:31:81:FD:BF:D8:E3:CA
            X509v3 Authority Key Identifier:
                keyid:D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3139312e372e3133362e302f32342d3234203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:d7:0b:3e:e9:25:03:20:31:21:b2:a3:3e:50:66:94:92:92:
         24:19:05:08:9f:7b:22:77:55:51:18:9e:77:bd:63:af:dd:cf:
         0e:f7:97:35:8d:7f:83:7b:e0:f0:60:57:15:b9:cc:32:87:4a:
         7e:73:59:b0:89:77:60:a4:de:6e:b1:36:8a:25:55:45:aa:2e:
         02:78:62:39:7f:e5:8a:75:e3:80:c9:f9:2d:5c:66:0d:c2:ef:
         86:40:71:cf:5c:48:b1:1c:0c:94:19:f6:35:64:3a:14:8b:77:
         ed:7e:8f:60:e2:c4:76:22:d0:df:6c:bf:65:8a:cb:6b:df:b8:
         be:7a:a0:d7:8e:1e:80:f1:82:6e:6d:cb:55:6c:1c:1d:b3:1b:
         d6:12:21:80:14:c6:90:8e:4a:5b:81:2a:4a:09:06:66:d8:80:
         89:80:ca:19:66:5f:c7:2c:e5:c8:ea:a3:1f:94:4e:e5:93:8d:
         00:d0:72:25:c8:6a:43:32:db:f5:62:c7:a0:8c:ee:73:28:41:
         76:f7:20:86:c4:c0:6a:fc:db:56:39:f9:89:5f:fd:bf:4f:ab:
         b7:b2:98:a4:c5:dd:ca:ba:d1:3b:8b:5f:5e:62:71:fa:10:d8:
         e5:80:ff:33:24:b4:e8:8a:97:ab:fc:af:1d:c0:6e:43:30:69:
         70:a7:cb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org