Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233392e302f32342d3234203d3e20323633353433.roa
File:                     3139312e352e3233392e302f32342d3234203d3e20323633353433.roa (raw, json)
Hash identifier:          NiUBpwJ1tTa37cCRiFKHWwPsDzgmAd7iY4nQk4PWz1Q=
Subject key identifier:   8A:6D:B9:D9:52:C3:0B:54:B5:0A:E3:85:F2:46:D7:14:32:24:D8:AE
Certificate issuer:       /CN=FC264A56450200CCB89788286F7FBCE41CDAA658
Certificate serial:       584ECB0533322FA2A4E10E17097DCDB3C0A7C59D
Authority key identifier: FC:26:4A:56:45:02:00:CC:B8:97:88:28:6F:7F:BC:E4:1C:DA:A6:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC264A56450200CCB89788286F7FBCE41CDAA658.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233392e302f32342d3234203d3e20323633353433.roa
Signing time:             Mon 10 Jul 2023 12:42:22 +0000
ROA not before:           Mon 10 Jul 2023 12:37:22 +0000
ROA not after:            Mon 08 Jul 2024 12:42:22 +0000
asID:                     263543
IP address blocks:        191.5.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4e:cb:05:33:32:2f:a2:a4:e1:0e:17:09:7d:cd:b3:c0:a7:c5:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC264A56450200CCB89788286F7FBCE41CDAA658
        Validity
            Not Before: Jul 10 12:37:22 2023 GMT
            Not After : Jul  8 12:42:22 2024 GMT
        Subject: CN=8A6DB9D952C30B54B50AE385F246D7143224D8AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:36:99:1a:0f:33:bd:c7:33:b0:8d:55:86:
                    8a:f1:21:7a:4e:52:4d:02:e7:e1:8d:8e:b3:99:4c:
                    ff:ea:d5:c4:9b:a1:51:e4:3e:5a:87:a6:b7:9b:5f:
                    d9:57:64:36:d8:03:31:a1:b4:39:27:da:ed:49:cd:
                    de:41:9c:f3:51:8a:96:8e:27:c3:4b:29:e8:6e:ef:
                    d1:33:73:c2:9a:f3:d5:b5:84:3b:2d:c7:42:9e:0a:
                    ae:9b:be:41:3b:ad:1e:f7:65:94:b0:c1:42:d2:31:
                    d0:da:8a:ca:b4:ef:e8:79:d3:1d:b4:53:85:3e:ac:
                    2b:fa:33:d2:3b:28:9e:c9:7f:cd:e8:94:7d:48:27:
                    6d:a6:d6:dc:45:e1:35:1c:96:96:96:25:6f:10:c0:
                    a4:b5:d8:e3:03:4d:27:11:dd:63:3f:ab:2d:92:4f:
                    c9:f1:02:1b:45:82:25:8c:22:1e:e9:c6:f4:aa:7f:
                    7d:85:37:fe:b2:8a:19:74:94:0e:da:7c:ea:ed:cb:
                    6b:fd:dc:dc:b9:e7:27:52:ad:5e:3c:8c:fa:b9:67:
                    af:ab:96:8a:0f:e0:92:76:26:30:9c:95:9e:0a:f9:
                    78:10:df:94:89:8a:45:a3:9d:26:97:44:c0:e5:f1:
                    27:b5:4a:d4:48:86:d2:2b:bb:57:ac:94:04:66:5b:
                    e8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6D:B9:D9:52:C3:0B:54:B5:0A:E3:85:F2:46:D7:14:32:24:D8:AE
            X509v3 Authority Key Identifier:
                keyid:FC:26:4A:56:45:02:00:CC:B8:97:88:28:6F:7F:BC:E4:1C:DA:A6:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/FC264A56450200CCB89788286F7FBCE41CDAA658.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC264A56450200CCB89788286F7FBCE41CDAA658.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233392e302f32342d3234203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d3:b8:00:e9:d7:57:35:03:e3:b3:81:9b:4e:00:6c:ee:f2:
         ca:cd:20:c4:e0:b1:cd:93:5d:c8:19:80:09:eb:31:24:2a:58:
         f1:a3:8b:6e:7a:88:3a:3f:7a:84:9d:63:9e:8d:c1:2e:32:05:
         fc:53:53:52:62:d9:94:fa:14:81:a1:93:c3:82:d0:2e:1b:cd:
         ed:37:a8:1b:1e:3d:98:b5:bb:e1:1d:04:5a:bb:47:57:76:ff:
         0f:66:49:62:40:58:23:50:8c:c4:5a:ed:b3:fb:f4:8c:47:57:
         ae:ae:4a:70:50:3b:dc:67:3c:44:0f:fc:a5:fa:d9:31:21:79:
         59:3f:21:e0:95:a0:54:a8:8f:d0:6e:0d:32:a0:bd:0c:45:86:
         86:d8:4b:70:91:35:f6:33:95:dd:6b:d0:cd:2a:74:03:56:b5:
         6b:d2:31:42:5a:fa:f6:40:0e:5b:62:f8:a1:00:63:37:cd:b6:
         f6:89:0c:d9:74:47:32:fe:4c:44:8f:f7:7a:dc:9d:29:c9:bc:
         9b:b2:a7:6f:41:68:9e:7d:fd:24:82:4a:49:96:39:e2:95:90:
         2e:3d:a2:0f:73:f2:e9:2b:dc:f7:a7:2d:71:4f:d2:23:8d:5a:
         2e:33:06:f0:6a:9a:f4:fd:1d:98:d3:ce:73:3b:51:a1:e6:2f:
         65:0c:aa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org