Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/1/3139312e372e3134342e302f32302d3234203d3e20323633333230.roa
File:                     3139312e372e3134342e302f32302d3234203d3e20323633333230.roa (raw, json)
Hash identifier:          n990KWEZh45FMbQyh3Pmb+rKC5Op34okSg/tYdxa+qc=
Subject key identifier:   BA:D7:67:14:56:6F:5E:2A:16:F8:23:5B:8C:D4:6D:BA:97:C6:02:D1
Certificate issuer:       /CN=717DC8BA5F820F9C596A4EBA29C7518024CE28CB
Certificate serial:       2647928C623C03D4D142595F01C689C5A422A944
Authority key identifier: 71:7D:C8:BA:5F:82:0F:9C:59:6A:4E:BA:29:C7:51:80:24:CE:28:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717DC8BA5F820F9C596A4EBA29C7518024CE28CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/1/3139312e372e3134342e302f32302d3234203d3e20323633333230.roa
Signing time:             Thu 04 Apr 2024 10:46:52 +0000
ROA not before:           Thu 04 Apr 2024 10:41:52 +0000
ROA not after:            Thu 03 Apr 2025 10:46:52 +0000
asID:                     263320
IP address blocks:        191.7.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:47:92:8c:62:3c:03:d4:d1:42:59:5f:01:c6:89:c5:a4:22:a9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717DC8BA5F820F9C596A4EBA29C7518024CE28CB
        Validity
            Not Before: Apr  4 10:41:52 2024 GMT
            Not After : Apr  3 10:46:52 2025 GMT
        Subject: CN=BAD76714566F5E2A16F8235B8CD46DBA97C602D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:51:68:95:07:01:fd:fb:dc:c8:d1:a1:27:
                    cb:1f:7b:18:48:29:e7:1e:6c:6a:2d:b4:18:5c:74:
                    5d:c6:02:09:e9:7e:81:05:54:8b:13:25:2e:10:ca:
                    3c:7e:33:eb:1c:03:30:92:8d:54:38:a6:67:fd:50:
                    ef:cf:91:e5:95:b5:ad:49:71:8d:ef:b5:1a:ee:3d:
                    a0:a8:91:6a:e4:9b:f3:1e:74:c9:d3:b0:d5:87:d4:
                    7f:fc:81:10:6e:ba:60:fa:a2:db:39:17:5d:5c:e1:
                    c2:d0:29:29:de:e0:19:83:34:65:94:5a:34:f4:0f:
                    89:ef:16:01:4b:8c:c1:17:ac:b6:52:0b:78:61:23:
                    54:72:64:88:f4:78:4e:aa:e7:cc:2d:9f:da:eb:0e:
                    f1:24:2a:d7:28:6f:49:1b:da:34:3f:60:9c:7e:8c:
                    73:37:fc:b4:89:49:ff:8b:3f:da:bc:0f:3d:7f:5c:
                    99:d8:ac:ce:7b:18:cc:2b:53:2a:7f:d1:65:37:64:
                    92:d4:3e:56:21:22:00:d4:ff:60:90:ad:df:35:f2:
                    6a:26:7d:0b:06:f6:12:ab:5f:3b:01:7c:5b:05:df:
                    ff:4b:9d:e9:0c:71:32:df:5d:86:88:f5:07:7f:0f:
                    27:72:86:9d:23:8f:f1:67:f5:4b:9c:71:92:5e:92:
                    44:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D7:67:14:56:6F:5E:2A:16:F8:23:5B:8C:D4:6D:BA:97:C6:02:D1
            X509v3 Authority Key Identifier:
                keyid:71:7D:C8:BA:5F:82:0F:9C:59:6A:4E:BA:29:C7:51:80:24:CE:28:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/1/717DC8BA5F820F9C596A4EBA29C7518024CE28CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717DC8BA5F820F9C596A4EBA29C7518024CE28CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/1/3139312e372e3134342e302f32302d3234203d3e20323633333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         89:63:7e:d8:d3:0c:f1:55:89:f5:cd:97:ab:24:de:07:3e:80:
         1c:30:4d:ae:1b:0f:ea:d4:11:13:31:e3:81:b1:fa:d8:d2:87:
         c8:59:13:c1:db:a9:8b:36:31:f6:7c:5a:2b:f2:f9:95:84:92:
         39:fb:ba:fc:a1:2f:dd:12:16:29:ac:10:b9:0d:68:b4:f9:90:
         d1:49:56:1c:91:8f:21:14:67:93:ba:a2:5d:07:fd:99:56:81:
         89:4f:fb:d8:05:ed:b5:87:e2:9e:d7:6b:65:4b:78:d1:1d:ff:
         45:75:61:69:a6:76:a2:ac:f6:1d:c5:eb:e5:0c:6d:93:06:fc:
         88:0f:92:9a:7e:a8:78:ca:9f:35:f9:90:ff:da:6b:c8:90:bd:
         24:10:b1:1a:3b:82:24:ad:97:37:bd:9f:18:cc:81:ff:3c:07:
         52:1f:2c:22:26:26:ac:93:49:97:c3:cd:af:7d:8f:62:1f:99:
         25:66:57:73:0a:15:5f:a3:7d:4c:60:cd:c4:f4:a2:d5:ac:17:
         ab:6b:71:ec:18:34:49:71:d1:ca:dc:6c:62:c6:82:91:b1:53:
         1e:89:b3:b6:b5:1b:a5:29:b1:a2:7d:37:56:2d:3b:f0:24:c0:
         7e:bd:a3:dd:75:e8:73:6b:b3:bd:6c:a1:86:e0:10:3b:79:71:
         a1:dd:3a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org