Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37322e302f32312d3234203d3e20323633343734.roa
File:                     3139312e3234322e37322e302f32312d3234203d3e20323633343734.roa (raw, json)
Hash identifier:          lrtCHBYsWgVpa6VA8prof6ErwuIWvGX76myKjmfyBNU=
Subject key identifier:   0F:5C:4F:91:45:24:46:B0:55:0B:47:6C:3E:D7:84:30:13:8C:A7:E9
Certificate issuer:       /CN=AAA918430499F3E9894B3CF0249B298084501D20
Certificate serial:       0433AD2366D92F0B5160D5956BAC3CB72B7750C8
Authority key identifier: AA:A9:18:43:04:99:F3:E9:89:4B:3C:F0:24:9B:29:80:84:50:1D:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAA918430499F3E9894B3CF0249B298084501D20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37322e302f32312d3234203d3e20323633343734.roa
Signing time:             Wed 13 Jul 2022 19:01:49 +0000
ROA not before:           Wed 13 Jul 2022 18:56:49 +0000
ROA not after:            Wed 12 Jul 2023 19:01:49 +0000
asID:                     263474
IP address blocks:        191.242.72.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:33:ad:23:66:d9:2f:0b:51:60:d5:95:6b:ac:3c:b7:2b:77:50:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAA918430499F3E9894B3CF0249B298084501D20
        Validity
            Not Before: Jul 13 18:56:49 2022 GMT
            Not After : Jul 12 19:01:49 2023 GMT
        Subject: CN=0F5C4F91452446B0550B476C3ED78430138CA7E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:70:73:cc:70:9b:a1:f1:95:23:31:31:9e:
                    e5:0e:bd:e3:10:7f:b6:0d:7f:36:82:c4:a5:b0:ec:
                    71:2d:50:a8:31:6a:ec:37:40:b5:6e:cc:73:01:ec:
                    b8:66:4d:b5:18:fd:4f:94:30:51:b0:f4:09:90:3e:
                    aa:bd:f5:3c:7d:41:97:aa:4b:fe:f7:1c:55:be:2f:
                    b8:cb:d4:fd:ae:33:59:37:a6:29:45:9a:c6:fc:4a:
                    b3:3f:74:94:be:77:c8:7b:91:37:c2:1f:c8:d5:32:
                    f0:a9:7c:2b:ed:1a:81:de:13:30:b8:28:da:f2:65:
                    25:3e:aa:0c:8c:5a:87:2b:96:23:12:18:72:75:44:
                    2f:0a:b0:33:c1:8c:d0:69:f2:26:b0:25:24:3e:c9:
                    c3:dd:f2:1f:8f:55:b9:d2:0f:5d:11:96:0b:4b:87:
                    20:6c:16:03:54:9d:cf:5b:e8:30:30:19:ed:38:d7:
                    17:a1:14:68:c3:92:ed:d4:09:2e:1b:32:1f:ae:69:
                    a4:b1:f1:dd:2e:ee:75:6b:2a:38:26:e3:f2:7f:38:
                    ee:3a:ff:54:56:ff:60:c3:cc:b1:4d:db:6f:5d:a2:
                    48:c6:39:bd:d3:5c:4b:ef:e4:86:3c:1c:c5:6f:d5:
                    d5:b7:23:37:45:32:4f:04:d3:09:3c:5d:80:cc:16:
                    44:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5C:4F:91:45:24:46:B0:55:0B:47:6C:3E:D7:84:30:13:8C:A7:E9
            X509v3 Authority Key Identifier:
                keyid:AA:A9:18:43:04:99:F3:E9:89:4B:3C:F0:24:9B:29:80:84:50:1D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/AAA918430499F3E9894B3CF0249B298084501D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAA918430499F3E9894B3CF0249B298084501D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37322e302f32312d3234203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:a1:d3:be:91:fd:72:b4:f7:56:2e:08:df:04:b6:a1:a9:e9:
         a1:ed:dd:e0:0b:28:5a:60:9f:c3:53:1a:5d:33:a5:87:fe:64:
         ec:57:9a:79:7f:03:f7:85:46:23:e0:cc:1f:65:ee:84:1b:e0:
         9e:01:e5:63:0f:6b:1c:0c:2a:5d:dc:77:df:39:44:e0:b9:c9:
         d6:1c:f2:c2:e0:39:b2:bd:e5:e2:6c:93:27:d5:83:50:ac:d5:
         fc:df:6b:41:64:2a:55:37:0c:31:1c:af:59:96:6a:69:d7:a7:
         5f:6b:4d:9e:6b:25:0e:5a:b7:36:c3:00:39:60:fd:d7:66:62:
         b9:22:81:c7:ed:19:83:f8:eb:90:b5:3e:9a:54:37:12:29:a6:
         6b:7a:1a:7b:0d:62:92:e6:9c:3a:6b:b1:81:8c:b7:5e:ba:5f:
         8f:a3:57:eb:61:61:25:50:a7:6d:57:ea:c7:00:bd:8e:4f:e9:
         be:1b:e0:e8:5b:57:e7:a3:ac:d4:28:9d:91:80:b0:21:7c:b5:
         30:57:de:ec:f9:40:e4:6e:37:31:92:70:49:e1:b0:53:b5:70:
         a2:2e:ae:2c:66:75:30:33:74:91:59:f0:d1:14:25:24:71:18:
         a0:65:d0:4d:40:ba:bf:b3:5f:93:52:df:0e:fc:5d:0c:5b:f2:
         c9:a8:58:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org