Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/1/3139312e372e3134352e302f32342d3234203d3e20323733363539.roa
File:                     3139312e372e3134352e302f32342d3234203d3e20323733363539.roa (raw, json)
Hash identifier:          SuOv67YN0i768GjZXcna3RXD/c/SxdobrLeKclQNF88=
Subject key identifier:   24:C3:88:AE:13:8C:E4:29:EB:21:3F:40:B4:48:97:40:AC:AD:F5:F0
Certificate issuer:       /CN=717DC8BA5F820F9C596A4EBA29C7518024CE28CB
Certificate serial:       361A4DCB6A9EEF1F589A77A05518608CB9850FDE
Authority key identifier: 71:7D:C8:BA:5F:82:0F:9C:59:6A:4E:BA:29:C7:51:80:24:CE:28:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717DC8BA5F820F9C596A4EBA29C7518024CE28CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/1/3139312e372e3134352e302f32342d3234203d3e20323733363539.roa
Signing time:             Thu 04 Apr 2024 10:46:52 +0000
ROA not before:           Thu 04 Apr 2024 10:41:52 +0000
ROA not after:            Thu 03 Apr 2025 10:46:52 +0000
asID:                     273659
IP address blocks:        191.7.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1a:4d:cb:6a:9e:ef:1f:58:9a:77:a0:55:18:60:8c:b9:85:0f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717DC8BA5F820F9C596A4EBA29C7518024CE28CB
        Validity
            Not Before: Apr  4 10:41:52 2024 GMT
            Not After : Apr  3 10:46:52 2025 GMT
        Subject: CN=24C388AE138CE429EB213F40B4489740ACADF5F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:22:c1:64:17:4a:98:ae:f7:4a:9d:05:96:
                    77:9a:69:96:2b:0f:7b:de:bf:83:e0:85:d3:85:21:
                    02:bc:22:6a:4c:a6:f3:5e:64:7a:a5:ff:a9:8a:71:
                    03:88:83:9e:dc:ad:a5:bb:ad:39:d0:a0:1f:81:fc:
                    2d:a9:51:25:a9:a1:33:74:c7:ad:b1:61:93:d9:e7:
                    1f:67:2d:01:5d:e6:86:ce:41:ef:f1:90:3d:11:13:
                    eb:df:f2:22:e3:e5:56:94:0e:f6:2c:4c:88:22:06:
                    b6:7f:25:b4:36:c3:9a:c9:96:f3:a4:8c:1b:83:86:
                    e8:c6:f3:e3:71:7d:45:6a:35:15:ec:73:aa:f6:7e:
                    6c:c8:b0:63:35:a9:7c:6f:e8:60:0c:83:16:65:4d:
                    d1:4a:a0:5e:9c:b0:be:27:dd:8a:93:21:cc:6c:51:
                    f7:a1:d9:55:51:34:44:72:ab:2f:b1:9e:0d:e8:f4:
                    2b:35:e1:f4:bf:38:d3:a0:20:6c:fd:24:d1:b7:46:
                    65:4d:48:e6:e3:de:b0:66:b7:6d:9e:a2:75:bc:28:
                    83:72:9f:29:c8:40:27:61:59:8c:15:7b:26:5d:6b:
                    2f:d8:7a:62:eb:73:17:ec:75:79:33:63:f5:da:58:
                    3a:8e:de:c6:15:bf:1b:ad:5e:40:57:3e:34:89:4a:
                    91:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C3:88:AE:13:8C:E4:29:EB:21:3F:40:B4:48:97:40:AC:AD:F5:F0
            X509v3 Authority Key Identifier:
                keyid:71:7D:C8:BA:5F:82:0F:9C:59:6A:4E:BA:29:C7:51:80:24:CE:28:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/1/717DC8BA5F820F9C596A4EBA29C7518024CE28CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717DC8BA5F820F9C596A4EBA29C7518024CE28CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/1/3139312e372e3134352e302f32342d3234203d3e20323733363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:2d:23:b2:a9:31:e9:6c:78:ae:c1:c5:9c:22:db:98:f2:4d:
         0e:c2:c2:82:d5:4e:13:8c:9f:f7:b5:6f:6d:78:0e:34:fd:be:
         66:c7:7c:0a:db:5c:bd:bf:5c:52:98:5c:4d:2b:97:4f:86:36:
         fd:c0:25:f2:74:15:73:25:a7:8c:fd:ba:49:31:5c:a0:06:52:
         f6:6d:96:1e:6f:0f:19:53:d9:c2:15:56:95:46:df:c3:6d:ee:
         55:22:19:72:25:3c:cd:4f:21:15:ce:c9:70:ad:89:5a:e8:a3:
         ed:c8:3a:18:9e:44:e0:65:40:cf:ea:a7:a0:4d:75:d5:e3:e7:
         51:97:e0:4f:ea:67:d8:46:7d:e4:54:92:71:54:b4:30:e3:44:
         16:f0:41:7c:7b:8c:54:ef:86:67:5a:81:ad:47:07:d0:d4:54:
         a5:e8:fb:e8:b5:b3:03:00:1b:d9:44:1a:81:7d:1d:da:bb:9c:
         ab:fb:f9:30:64:8b:94:23:18:35:ea:2d:8f:97:c5:74:ab:b6:
         6a:ec:71:c6:6c:80:fa:aa:0b:f8:d4:88:87:3d:64:68:2a:39:
         b4:4f:ac:ad:0a:87:35:02:12:0d:01:22:9e:e1:c6:4f:00:65:
         cb:14:51:eb:c6:8f:2c:c9:0a:01:b9:b6:c1:9c:2e:db:ba:57:
         e2:6f:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org