Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233382e302f32342d3234203d3e20323633353433.roa
File:                     3139312e352e3233382e302f32342d3234203d3e20323633353433.roa (raw, json)
Hash identifier:          rIYY8N7QFH3M0+s8+cYgIk0eFw3mzb2IqEsYBAgQVMw=
Subject key identifier:   81:81:3D:4F:D5:78:7D:F3:8F:86:4B:32:19:A0:86:D6:C7:3B:BE:9F
Certificate issuer:       /CN=FC264A56450200CCB89788286F7FBCE41CDAA658
Certificate serial:       60DA90468098E43A586AFE420A4EA8FFC55DB731
Authority key identifier: FC:26:4A:56:45:02:00:CC:B8:97:88:28:6F:7F:BC:E4:1C:DA:A6:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC264A56450200CCB89788286F7FBCE41CDAA658.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233382e302f32342d3234203d3e20323633353433.roa
Signing time:             Mon 10 Jul 2023 12:41:59 +0000
ROA not before:           Mon 10 Jul 2023 12:36:59 +0000
ROA not after:            Mon 08 Jul 2024 12:41:59 +0000
asID:                     263543
IP address blocks:        191.5.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:da:90:46:80:98:e4:3a:58:6a:fe:42:0a:4e:a8:ff:c5:5d:b7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC264A56450200CCB89788286F7FBCE41CDAA658
        Validity
            Not Before: Jul 10 12:36:59 2023 GMT
            Not After : Jul  8 12:41:59 2024 GMT
        Subject: CN=81813D4FD5787DF38F864B3219A086D6C73BBE9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:30:04:a9:79:61:02:58:c9:b1:d8:5e:68:
                    5a:8f:cd:55:76:09:b3:b1:8c:33:e3:ad:10:4f:89:
                    13:53:44:a4:a5:2c:a9:a8:28:51:7d:4b:26:4a:af:
                    ff:3e:fe:ba:84:7c:b6:66:07:37:d1:44:f3:06:16:
                    54:72:7e:f8:fe:06:1f:f0:8a:d6:8a:74:f1:ed:02:
                    f0:4e:c5:f8:64:f1:78:1a:58:b6:f8:69:56:90:b5:
                    c7:f3:2b:6e:d2:93:ef:ea:3d:c6:98:11:b9:69:06:
                    ca:ab:70:df:16:c3:03:25:69:f8:5a:e0:3c:b3:f7:
                    2d:cd:dc:ea:5e:92:6d:74:8f:fe:e5:13:0e:02:2c:
                    1c:bf:a6:c5:69:c3:3f:74:5c:a5:85:5e:1b:fd:58:
                    fc:fd:c7:e8:b2:0e:18:a8:b7:24:ad:fb:3d:9c:a9:
                    19:fe:11:a6:02:ca:33:f0:5c:fb:dd:4b:5e:35:30:
                    38:7b:bd:b8:93:db:ab:f2:fb:bc:bf:1f:b2:55:01:
                    4a:52:f8:64:26:77:3c:e2:a7:b0:b7:5d:11:82:8f:
                    34:41:56:1a:5c:3a:f6:dd:7f:55:03:24:11:6e:18:
                    59:85:07:a2:b4:4c:8f:3d:94:a6:cf:e3:ac:8b:e0:
                    3b:a5:5b:cb:e0:d8:7b:ff:2b:f3:3c:f4:3b:61:16:
                    00:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:81:3D:4F:D5:78:7D:F3:8F:86:4B:32:19:A0:86:D6:C7:3B:BE:9F
            X509v3 Authority Key Identifier:
                keyid:FC:26:4A:56:45:02:00:CC:B8:97:88:28:6F:7F:BC:E4:1C:DA:A6:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/FC264A56450200CCB89788286F7FBCE41CDAA658.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC264A56450200CCB89788286F7FBCE41CDAA658.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233382e302f32342d3234203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:5d:67:c3:29:ad:a3:78:52:f7:fe:04:58:6c:6a:b6:26:28:
         40:d9:9e:0d:48:f7:d3:eb:7c:9c:69:52:62:98:af:22:86:c9:
         52:df:ec:29:17:9f:fe:17:a7:89:e4:51:90:d1:51:26:e8:34:
         62:81:1e:d2:7c:00:db:fb:c1:71:ab:33:c5:e1:48:0e:9a:3b:
         0d:df:71:c7:74:dc:14:26:75:cd:ff:cf:27:15:4a:26:e9:c9:
         af:fc:b9:2d:ae:d8:71:f7:9f:09:c3:8f:7e:6b:3e:e9:9c:44:
         2b:3a:29:f8:6c:70:56:4d:88:21:dd:e4:b5:c6:ff:65:aa:07:
         f1:1c:94:f4:8a:eb:87:d6:f1:fc:c2:80:41:26:c3:5a:4f:83:
         69:d2:f2:0e:92:39:77:21:54:e1:c5:47:36:0d:4e:6f:1a:67:
         b5:9f:2c:14:01:bc:ed:b0:30:00:3e:49:6a:a6:6b:10:86:fc:
         88:16:6c:1e:15:51:a1:c2:d1:84:b8:f9:33:c9:6b:ab:be:82:
         5d:2b:f1:c4:13:65:a3:a7:53:b7:a4:fd:df:ad:bc:a2:0e:53:
         57:2e:34:49:62:82:00:40:f8:09:44:de:07:de:af:d9:f1:a0:
         55:f2:fd:5a:db:04:79:5e:4e:97:1d:f6:a9:11:84:bc:67:17:
         d7:a2:96:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org