Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e302e302f32322d3232203d3e20323637343430.roa
File:                     3139322e3134312e302e302f32322d3232203d3e20323637343430.roa (raw, json)
Hash identifier:          Zs6xM4+ol40lzr4XlIk51XxlHiduUlleLDjTvwilF5Q=
Subject key identifier:   AF:75:12:05:C9:B0:2C:D2:96:89:54:0C:46:7D:23:2B:C8:A0:4B:48
Certificate issuer:       /CN=EF6AEB803CC403F45B9CBCD3D19315F4B58253DD
Certificate serial:       4793B18E3A9F79DFA4E23723F74D2CF6EDF15080
Authority key identifier: EF:6A:EB:80:3C:C4:03:F4:5B:9C:BC:D3:D1:93:15:F4:B5:82:53:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF6AEB803CC403F45B9CBCD3D19315F4B58253DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e302e302f32322d3232203d3e20323637343430.roa
Signing time:             Mon 01 Apr 2024 13:06:21 +0000
ROA not before:           Mon 01 Apr 2024 13:01:21 +0000
ROA not after:            Mon 31 Mar 2025 13:06:21 +0000
asID:                     267440
IP address blocks:        192.141.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:93:b1:8e:3a:9f:79:df:a4:e2:37:23:f7:4d:2c:f6:ed:f1:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6AEB803CC403F45B9CBCD3D19315F4B58253DD
        Validity
            Not Before: Apr  1 13:01:21 2024 GMT
            Not After : Mar 31 13:06:21 2025 GMT
        Subject: CN=AF751205C9B02CD29689540C467D232BC8A04B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:4c:55:80:88:3e:73:89:65:7d:4b:49:37:
                    8c:e9:28:de:05:f7:65:cf:96:17:89:e4:16:75:a2:
                    4d:f1:73:ee:c4:5a:47:3c:9a:2c:fc:37:ad:0e:b4:
                    45:93:7c:53:c6:0c:01:02:f3:46:e4:7f:b8:65:42:
                    ea:a4:e3:f3:1d:1a:8d:ac:f3:39:eb:cb:98:aa:4b:
                    b2:07:6e:a9:22:c2:df:77:ac:0e:ad:e0:f9:69:e3:
                    f6:08:d8:60:d7:b1:80:63:5e:81:b8:5f:2f:fb:3c:
                    eb:42:0a:b1:80:0d:2c:01:92:70:35:a5:c7:42:43:
                    0f:b5:32:36:58:61:38:49:eb:c1:f6:18:df:8c:51:
                    45:d5:94:c1:6f:dd:ec:b4:43:45:45:88:58:fd:67:
                    f2:3a:b6:cc:c5:37:79:b8:37:0a:6a:f5:e4:db:0f:
                    62:a6:d8:ad:fd:81:10:da:2e:20:17:dc:92:cd:ef:
                    f8:41:70:de:5a:c8:9d:2b:d3:34:d8:8e:03:fa:af:
                    fa:50:df:f8:30:6d:00:60:ad:61:19:62:5a:d1:eb:
                    41:2c:5b:14:e7:b8:dd:8c:20:b3:7a:44:f4:7b:6a:
                    f6:77:00:69:e4:ef:7f:20:36:05:a1:a5:c7:e5:f0:
                    a3:9e:d7:14:ee:e7:96:63:b2:19:95:31:8d:0f:8f:
                    bb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:75:12:05:C9:B0:2C:D2:96:89:54:0C:46:7D:23:2B:C8:A0:4B:48
            X509v3 Authority Key Identifier:
                keyid:EF:6A:EB:80:3C:C4:03:F4:5B:9C:BC:D3:D1:93:15:F4:B5:82:53:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/EF6AEB803CC403F45B9CBCD3D19315F4B58253DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF6AEB803CC403F45B9CBCD3D19315F4B58253DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e302e302f32322d3232203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:b8:1c:7b:e2:a9:cd:6f:01:4a:a8:03:6b:d1:61:8d:ca:bb:
         f0:ab:82:f9:d5:48:fa:27:78:98:6e:bf:e9:77:e0:58:d1:d1:
         3f:e8:cb:ef:04:e3:83:81:fe:f1:77:cf:3c:80:f3:56:af:fe:
         7b:2e:22:90:70:74:6e:fb:6f:8e:20:3a:bf:e9:a3:ae:8e:93:
         31:3a:12:9c:18:66:61:01:b6:88:1c:cc:c8:86:96:4d:10:d1:
         57:55:d3:92:b2:1e:2d:fe:9f:b8:dc:fd:d8:3e:31:15:ed:b9:
         fe:74:94:ff:29:c7:ba:7d:66:e0:a8:c3:5f:16:74:d7:23:65:
         29:1e:c7:39:49:89:d8:98:74:35:60:6e:62:e1:db:59:9e:e4:
         21:2b:3b:58:47:9a:1e:f9:cb:f5:fb:06:54:9c:d5:6d:99:78:
         31:af:26:49:be:9e:10:c9:e9:b0:c9:df:41:ba:f5:05:59:1e:
         b6:99:18:a3:a6:03:60:a7:50:d9:23:48:79:97:8d:10:84:d1:
         0d:7d:c2:d1:77:c8:bb:d2:c0:ca:ea:62:6c:83:e3:3c:83:99:
         48:c8:e7:8d:8b:12:9d:43:bc:60:00:8d:65:c3:be:99:05:92:
         53:0b:cb:0d:e5:48:e5:29:3c:87:4b:2e:1e:e9:da:4f:f9:a7:
         c5:fd:07:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org