Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37362e302f32322d3232203d3e20323633343734.roa
File:                     3139312e3234322e37362e302f32322d3232203d3e20323633343734.roa (raw, json)
Hash identifier:          /riMshjdPwz+++Oq3TlGK8WwJrWzT+cfCJkVWaf6+ds=
Subject key identifier:   E9:93:E6:7E:FB:93:7C:BA:C8:C0:2F:AD:0C:11:AE:99:C2:3C:9B:AE
Certificate issuer:       /CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
Certificate serial:       2F0861AF00DAC47415B7498FEEA1719A42C7AB1B
Authority key identifier: C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37362e302f32322d3232203d3e20323633343734.roa
Signing time:             Mon 26 Jun 2023 16:00:10 +0000
ROA not before:           Mon 26 Jun 2023 15:55:10 +0000
ROA not after:            Mon 24 Jun 2024 16:00:10 +0000
asID:                     263474
IP address blocks:        191.242.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:08:61:af:00:da:c4:74:15:b7:49:8f:ee:a1:71:9a:42:c7:ab:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
        Validity
            Not Before: Jun 26 15:55:10 2023 GMT
            Not After : Jun 24 16:00:10 2024 GMT
        Subject: CN=E993E67EFB937CBAC8C02FAD0C11AE99C23C9BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:24:9d:54:77:cf:f7:1f:49:cd:2c:c9:88:05:
                    60:54:d1:33:a9:65:bf:4f:30:8b:76:c4:3d:3f:24:
                    e7:52:f0:eb:25:bb:71:ba:0d:15:c5:d5:89:a6:c4:
                    31:d3:07:a0:c5:18:6a:5d:74:9a:f6:65:43:07:25:
                    6a:ad:d3:68:b1:43:f2:52:75:0f:84:18:95:5c:0d:
                    54:59:79:31:9e:24:3c:2c:e5:36:75:b5:e1:10:77:
                    40:2d:85:14:1d:92:f5:a1:52:35:20:4d:81:bd:a0:
                    14:bf:22:17:78:da:d5:2b:98:78:d5:a0:3b:35:9e:
                    e8:b6:a3:1d:72:49:9e:94:da:32:0c:64:7c:54:85:
                    0f:cb:34:1f:18:86:ec:a6:23:3b:68:07:2d:1d:b3:
                    5b:ef:7a:3f:1f:e4:35:bc:c8:f9:5f:15:25:a8:2b:
                    88:d7:08:5b:de:c2:1f:cc:8c:68:ff:37:36:cb:f7:
                    a7:e7:fb:75:9c:e9:45:c3:6f:e2:8d:c1:9e:5e:aa:
                    b8:d7:ca:c8:de:28:9d:b4:dd:39:75:dd:31:8a:fe:
                    2f:4f:26:2b:8e:f7:fb:69:02:17:1b:8e:b0:c2:9d:
                    75:ab:ca:90:86:9e:05:da:7c:17:d4:7d:5f:ab:45:
                    bf:03:06:98:a8:93:0f:7c:84:d2:5b:ef:5d:e4:39:
                    c3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:93:E6:7E:FB:93:7C:BA:C8:C0:2F:AD:0C:11:AE:99:C2:3C:9B:AE
            X509v3 Authority Key Identifier:
                keyid:C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37362e302f32322d3232203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:f4:8b:cf:c2:18:51:79:5b:75:95:77:13:17:7b:11:10:d2:
         7f:c8:17:f0:00:9b:08:06:3b:d5:3d:c0:a9:b8:84:b0:08:57:
         9d:42:de:ed:12:e4:7a:03:41:ab:c5:ed:d2:1a:e8:5f:a6:2d:
         66:f1:32:47:67:6e:da:e8:69:77:82:1e:60:1b:25:3f:c5:14:
         f2:b5:05:bd:28:6e:ee:3a:f9:61:56:2a:8d:48:9e:b8:8e:53:
         4e:47:5e:eb:a9:1c:bf:98:0e:c4:0f:82:1d:3c:9b:59:d3:ae:
         63:b2:58:e0:c1:0d:0a:88:ca:d5:a3:10:c8:c2:c1:da:3b:22:
         a9:b3:e6:7a:28:30:cd:07:e7:be:60:1d:51:3c:5b:62:89:1e:
         0d:bf:f0:7f:91:4d:49:cd:48:3d:58:a9:7e:e3:41:db:aa:05:
         17:c5:63:85:aa:20:10:ee:e5:1d:66:05:8b:04:60:4d:5e:2c:
         6b:4b:29:df:1b:81:e6:45:dd:d9:ab:56:b2:d1:86:08:57:25:
         ba:94:c4:88:a4:45:32:7e:da:de:c4:98:9c:ee:58:93:27:d7:
         d5:5f:92:66:d2:cf:f4:1c:a5:b6:03:4c:2a:0e:73:45:95:a1:
         73:5b:a2:13:1a:5e:f4:ab:59:28:d0:c9:f7:82:3b:1e:67:c8:
         ba:5c:63:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org