Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3139312e3234332e3134342e302f33302d3332203d3e20323633303437.roa
File:                     3139312e3234332e3134342e302f33302d3332203d3e20323633303437.roa (raw, json)
Hash identifier:          OstFMDAw+zMvljgEtGMv9uNgN03wK52ebMqpc4EHJeY=
Subject key identifier:   72:F9:81:FD:63:4D:9C:46:C1:A0:9C:0B:9C:33:6D:2F:E5:D0:AC:3C
Certificate issuer:       /CN=C2F8774838BF1072B38B7276FB6CD2F3BBFD5645
Certificate serial:       76E2695686FA6C824903FC25F4145CD6346AF5FD
Authority key identifier: C2:F8:77:48:38:BF:10:72:B3:8B:72:76:FB:6C:D2:F3:BB:FD:56:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2F8774838BF1072B38B7276FB6CD2F3BBFD5645.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3139312e3234332e3134342e302f33302d3332203d3e20323633303437.roa
Signing time:             Mon 25 Mar 2024 18:00:58 +0000
ROA not before:           Mon 25 Mar 2024 17:55:58 +0000
ROA not after:            Mon 24 Mar 2025 18:00:58 +0000
asID:                     263047
IP address blocks:        191.243.144.0/30 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e2:69:56:86:fa:6c:82:49:03:fc:25:f4:14:5c:d6:34:6a:f5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F8774838BF1072B38B7276FB6CD2F3BBFD5645
        Validity
            Not Before: Mar 25 17:55:58 2024 GMT
            Not After : Mar 24 18:00:58 2025 GMT
        Subject: CN=72F981FD634D9C46C1A09C0B9C336D2FE5D0AC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a4:ed:dd:55:56:04:9b:9b:4c:43:c3:96:e3:
                    a7:19:8f:e5:7b:4a:2b:d1:e1:af:cd:24:a1:79:08:
                    68:d8:d8:09:ae:80:9e:4b:ab:93:58:ca:37:1f:53:
                    72:d7:74:66:4c:1a:33:0f:cc:88:55:3f:32:30:6c:
                    0e:bf:39:c9:90:34:07:ba:ec:9a:54:6c:69:f9:85:
                    4a:4b:a9:5e:d7:7d:99:20:6f:83:4a:b9:fb:9e:45:
                    18:5b:f8:31:8c:a5:45:5a:f4:44:5e:90:84:d3:18:
                    7f:c1:87:ae:55:c5:24:62:b8:59:61:f4:0e:ef:1e:
                    5f:a9:94:7f:3b:1c:61:27:d0:dc:a1:d3:6b:b4:e6:
                    34:58:d7:00:aa:9b:2f:83:c2:c6:28:b2:d0:b8:78:
                    5b:38:c6:8d:69:a7:9b:69:52:1a:2e:dc:35:00:16:
                    d7:e3:39:c8:69:29:ec:e9:95:3d:fc:d4:dd:25:0a:
                    e8:d7:6a:9c:f5:fa:ca:1b:68:a5:28:2f:9a:5e:c9:
                    b9:1e:6f:ce:7c:b3:cc:db:09:3e:ef:16:88:77:07:
                    e5:40:01:8d:0a:79:22:0c:6a:97:57:d5:2b:5f:99:
                    46:31:9b:cc:45:eb:38:c4:8f:bb:c6:0c:a4:28:48:
                    0b:a2:c2:b8:90:46:ee:6b:98:8c:79:ea:9f:93:a3:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F9:81:FD:63:4D:9C:46:C1:A0:9C:0B:9C:33:6D:2F:E5:D0:AC:3C
            X509v3 Authority Key Identifier:
                keyid:C2:F8:77:48:38:BF:10:72:B3:8B:72:76:FB:6C:D2:F3:BB:FD:56:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/C2F8774838BF1072B38B7276FB6CD2F3BBFD5645.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2F8774838BF1072B38B7276FB6CD2F3BBFD5645.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3139312e3234332e3134342e302f33302d3332203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.144.0/30

    Signature Algorithm: sha256WithRSAEncryption
         32:49:c1:24:20:11:0c:cd:dd:23:98:b7:c4:2e:91:9d:7b:03:
         bf:f5:05:e3:d2:ea:1b:f8:4c:b0:fb:12:95:d3:87:5d:d9:25:
         5b:94:0f:75:4b:e8:ef:c9:96:43:b2:0b:d0:72:ab:91:77:10:
         c7:ea:9c:7c:ef:f9:8f:c7:6f:f2:99:db:5c:75:1b:28:cd:93:
         42:5f:44:6e:49:14:a9:97:2f:c2:73:b0:57:d5:a2:c4:11:0e:
         f5:b2:8b:3c:4e:26:b7:bd:bd:79:cb:dd:96:69:31:89:1f:41:
         f4:07:3d:7a:df:e6:46:18:62:79:0b:4c:61:4d:ce:ac:40:e6:
         bf:9a:5a:82:22:27:3d:08:39:a4:c0:83:6e:15:8d:78:a5:75:
         57:12:f1:80:60:37:3c:02:be:75:a6:71:cf:c3:d8:f3:60:1e:
         c3:59:c3:6d:75:48:84:44:55:f6:ed:10:b8:d3:c3:9b:3d:50:
         71:0c:f9:82:d7:5a:81:42:80:20:10:a0:7c:10:dc:86:a5:d2:
         da:3b:90:0e:fd:cc:d3:dc:a8:d5:bb:b9:0e:b1:ea:4e:a4:1d:
         0c:c4:6c:52:87:29:dc:3e:56:4a:04:4d:21:43:cc:03:8c:a5:
         62:51:62:f5:07:1e:b3:ac:0d:8d:45:66:73:a6:1f:0b:57:ff:
         68:59:be:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org