Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233362e302f32322d3232203d3e20323633353433.roa
File:                     3139312e352e3233362e302f32322d3232203d3e20323633353433.roa (raw, json)
Hash identifier:          6hkLJ/GUTOxoImge9iWA2Gffw/Si7jxUE/3wgwqlkw0=
Subject key identifier:   6A:3A:BF:02:C7:C9:0F:D0:F7:77:0B:9E:28:DC:73:44:88:EE:7C:B0
Certificate issuer:       /CN=FC264A56450200CCB89788286F7FBCE41CDAA658
Certificate serial:       202FA9954FBDAA95E43896B8C9C4962DB3D80ED0
Authority key identifier: FC:26:4A:56:45:02:00:CC:B8:97:88:28:6F:7F:BC:E4:1C:DA:A6:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC264A56450200CCB89788286F7FBCE41CDAA658.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233362e302f32322d3232203d3e20323633353433.roa
Signing time:             Mon 10 Jul 2023 12:40:28 +0000
ROA not before:           Mon 10 Jul 2023 12:35:28 +0000
ROA not after:            Mon 08 Jul 2024 12:40:28 +0000
asID:                     263543
IP address blocks:        191.5.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2f:a9:95:4f:bd:aa:95:e4:38:96:b8:c9:c4:96:2d:b3:d8:0e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC264A56450200CCB89788286F7FBCE41CDAA658
        Validity
            Not Before: Jul 10 12:35:28 2023 GMT
            Not After : Jul  8 12:40:28 2024 GMT
        Subject: CN=6A3ABF02C7C90FD0F7770B9E28DC734488EE7CB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5c:cb:12:a1:d8:26:70:50:df:2d:cc:a4:95:
                    a6:58:2d:0e:cd:33:cf:4f:54:af:36:91:bd:e6:0d:
                    84:66:45:11:40:90:00:9d:4e:6a:69:05:b9:da:73:
                    08:48:1f:d1:2b:69:1b:aa:2c:d2:e9:dd:da:75:20:
                    6f:03:58:56:cd:92:0b:da:a6:f4:ba:f8:17:d7:84:
                    ad:fb:0f:63:12:92:29:05:47:92:3b:65:e7:09:6b:
                    80:3b:9a:7e:39:d2:31:15:ef:61:c5:e7:3e:1d:5d:
                    12:b8:8c:7f:5b:8e:e8:4e:2f:3b:a5:87:e8:90:17:
                    3d:36:fe:67:c2:3b:ee:7c:55:7e:d6:c0:40:f1:12:
                    bf:9c:eb:25:86:e9:13:3c:f2:23:57:58:1b:67:12:
                    ba:e8:38:de:e0:12:73:c5:a8:ed:8a:cd:51:53:4d:
                    79:21:a8:c5:5b:74:c9:6c:7c:c8:d9:56:b4:b5:62:
                    8c:05:7d:e2:b7:91:d4:0a:4c:ef:8b:0d:b1:f1:bb:
                    b3:64:fa:5e:27:1e:ac:ff:cc:c2:26:ba:68:2e:e5:
                    d8:8f:38:1a:94:99:18:50:8c:b9:5a:1b:7b:f1:ce:
                    63:b9:a8:6c:eb:8c:ea:29:dc:72:3b:64:b1:50:34:
                    b1:e1:ca:4d:13:e9:dc:fd:fc:ed:ae:5c:b3:84:1a:
                    07:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3A:BF:02:C7:C9:0F:D0:F7:77:0B:9E:28:DC:73:44:88:EE:7C:B0
            X509v3 Authority Key Identifier:
                keyid:FC:26:4A:56:45:02:00:CC:B8:97:88:28:6F:7F:BC:E4:1C:DA:A6:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/FC264A56450200CCB89788286F7FBCE41CDAA658.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC264A56450200CCB89788286F7FBCE41CDAA658.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233362e302f32322d3232203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:ae:38:9c:06:a1:17:01:12:05:91:4a:d3:3f:42:c7:0a:e0:
         06:2a:8b:43:ac:91:14:a8:2a:f8:7f:48:57:d5:8e:e6:48:4d:
         cc:b4:0b:8d:d0:ff:6c:f6:e6:ac:7c:0d:ac:17:40:3f:61:cb:
         f8:69:70:ba:04:de:6b:f1:ba:a8:ba:d2:95:cb:df:4d:b5:3a:
         45:9f:57:0c:a7:c7:12:40:0c:ba:19:49:85:62:4d:27:db:9b:
         a4:1f:b8:cc:a2:06:cd:ec:4e:2f:98:e1:13:7c:c4:47:28:94:
         a8:f4:a0:0d:25:f9:ca:31:4f:5a:b6:98:c0:e1:33:9f:d8:e4:
         6a:74:f9:13:24:a5:25:d9:29:e6:af:86:28:c6:5e:bf:a6:0b:
         68:82:a0:f2:09:f4:30:71:f4:f4:6a:73:cf:31:0e:ca:47:ef:
         0e:ad:bb:69:e0:eb:59:a2:38:ca:91:a0:9d:e9:99:ea:cb:72:
         48:69:29:89:a8:92:2f:bf:0d:08:5e:ce:8a:27:b8:4a:15:a6:
         13:fc:7c:e3:3b:ef:7c:40:9d:7a:b4:2c:39:fc:40:f1:34:af:
         fe:f7:a0:37:c9:79:fe:d9:44:51:b7:35:f5:3e:f0:13:37:0c:
         f1:26:da:36:8a:aa:64:79:47:e0:b5:af:10:88:eb:9f:ca:f8:
         90:f1:79:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org