Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233382e302f32332d3233203d3e20323633353433.roa
File:                     3139312e352e3233382e302f32332d3233203d3e20323633353433.roa (raw, json)
Hash identifier:          xeUhJnTbbSp6oTFft5U8r4BiCb3FTP2AmesqRTuMvrU=
Subject key identifier:   3B:E0:C5:CE:ED:9A:26:4C:7E:F4:E5:F6:9E:68:FD:BA:68:DB:E2:B9
Certificate issuer:       /CN=FC264A56450200CCB89788286F7FBCE41CDAA658
Certificate serial:       0F537125A1152280AAE29B8A213829653B5852EE
Authority key identifier: FC:26:4A:56:45:02:00:CC:B8:97:88:28:6F:7F:BC:E4:1C:DA:A6:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC264A56450200CCB89788286F7FBCE41CDAA658.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233382e302f32332d3233203d3e20323633353433.roa
Signing time:             Mon 10 Jul 2023 12:41:01 +0000
ROA not before:           Mon 10 Jul 2023 12:36:01 +0000
ROA not after:            Mon 08 Jul 2024 12:41:01 +0000
asID:                     263543
IP address blocks:        191.5.238.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:53:71:25:a1:15:22:80:aa:e2:9b:8a:21:38:29:65:3b:58:52:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC264A56450200CCB89788286F7FBCE41CDAA658
        Validity
            Not Before: Jul 10 12:36:01 2023 GMT
            Not After : Jul  8 12:41:01 2024 GMT
        Subject: CN=3BE0C5CEED9A264C7EF4E5F69E68FDBA68DBE2B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:64:8c:e7:e7:22:ce:4f:ae:bf:61:db:2a:9e:
                    4a:3c:b3:26:79:2c:10:c4:01:37:50:e6:dd:b5:4e:
                    e8:99:23:2f:89:3c:cc:d5:e7:45:ba:49:dd:c3:38:
                    bb:40:4b:0e:19:c3:66:fa:b1:c3:92:a5:e7:a9:43:
                    ff:37:af:47:3f:d1:cc:40:9b:6d:b6:db:69:df:6b:
                    31:a2:1e:cf:bb:60:2c:74:39:17:93:90:9c:cf:74:
                    d3:c4:62:80:86:5c:46:ba:06:6d:b5:ff:4d:61:af:
                    11:3a:3c:0b:21:2e:42:b1:89:df:b8:f7:85:46:58:
                    e1:8d:1a:a7:58:21:3a:4e:f8:4b:01:76:88:5e:ae:
                    95:e2:51:39:b0:34:c0:59:64:8f:30:96:72:11:44:
                    26:1e:0e:61:f4:2b:08:15:4e:b1:8d:c5:05:80:42:
                    4b:aa:32:4f:b1:e8:a1:53:0d:19:29:cd:0d:57:0e:
                    a2:2f:af:3b:62:7a:f5:68:94:6a:38:5b:1f:a7:22:
                    a8:16:13:5c:c6:14:3d:3b:ba:d1:95:e0:85:97:14:
                    e6:6c:1d:7a:0e:46:5b:7e:89:31:0f:b0:27:b1:34:
                    77:7d:46:c9:6e:9a:8e:d6:4e:a1:4b:fb:73:ff:3c:
                    17:cd:de:5f:90:e9:94:e1:4c:49:01:6a:28:de:49:
                    6e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E0:C5:CE:ED:9A:26:4C:7E:F4:E5:F6:9E:68:FD:BA:68:DB:E2:B9
            X509v3 Authority Key Identifier:
                keyid:FC:26:4A:56:45:02:00:CC:B8:97:88:28:6F:7F:BC:E4:1C:DA:A6:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/FC264A56450200CCB89788286F7FBCE41CDAA658.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC264A56450200CCB89788286F7FBCE41CDAA658.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233382e302f32332d3233203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:90:d4:9a:69:04:76:a0:ae:5f:63:ef:7d:14:2a:a3:5d:6a:
         25:b1:d2:78:f2:00:9a:db:dc:79:ff:40:40:c5:6c:1a:2e:8e:
         f4:82:66:b6:59:8a:19:87:c3:63:99:f9:5b:40:06:b1:e6:ea:
         c7:b2:27:03:f4:aa:a6:e7:42:5b:d8:b0:89:66:ce:cd:95:c8:
         8f:37:94:fa:57:93:ad:17:6e:e8:5c:0e:0d:a3:a0:e4:0b:da:
         bd:7f:2a:c3:6e:fd:33:8d:e2:92:bb:9e:1b:a7:54:45:0c:e2:
         d5:8e:00:f1:b1:44:65:0d:a7:b7:40:d4:02:b2:ca:e6:8c:4e:
         fa:4e:a0:53:a3:61:c7:74:61:2f:38:a0:d5:ce:12:b5:ad:2b:
         6a:dd:fa:87:cd:10:77:b2:22:5c:59:c2:70:cc:8d:fc:a6:f8:
         a9:23:d6:3e:46:92:64:9b:db:db:1d:ea:b4:01:7a:be:e8:16:
         f9:ed:ce:13:88:f5:97:76:f4:53:24:c6:ef:b2:c0:88:fc:4a:
         44:0d:91:9c:db:b2:fa:f0:98:c3:07:35:bf:d1:d1:c7:d1:42:
         fd:0e:9b:f2:ca:41:a3:5b:1d:dd:77:a4:64:e4:10:77:a9:f7:
         13:65:d6:00:00:29:6b:38:7b:37:a6:1e:ba:ee:94:3c:52:3c:
         e1:30:67:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org