Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37362e302f32332d3233203d3e20323633343734.roa
File:                     3139312e3234322e37362e302f32332d3233203d3e20323633343734.roa (raw, json)
Hash identifier:          EWH7dCd5FinkyIHPMLXQ0wt/MdodwesV0mYzxFBFpnw=
Subject key identifier:   99:C3:F0:91:57:48:93:2F:52:09:03:6A:A5:F5:F7:E5:F2:07:BF:A0
Certificate issuer:       /CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
Certificate serial:       3F223BA72998D900F2544BC8876BA15E970A5DB5
Authority key identifier: C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37362e302f32332d3233203d3e20323633343734.roa
Signing time:             Mon 26 Jun 2023 16:00:13 +0000
ROA not before:           Mon 26 Jun 2023 15:55:13 +0000
ROA not after:            Mon 24 Jun 2024 16:00:13 +0000
asID:                     263474
IP address blocks:        191.242.76.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:22:3b:a7:29:98:d9:00:f2:54:4b:c8:87:6b:a1:5e:97:0a:5d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
        Validity
            Not Before: Jun 26 15:55:13 2023 GMT
            Not After : Jun 24 16:00:13 2024 GMT
        Subject: CN=99C3F0915748932F5209036AA5F5F7E5F207BFA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f3:73:58:70:f7:a5:12:ab:d2:6e:21:58:7c:
                    76:47:19:cc:da:a7:2a:d2:fe:53:5b:06:d6:33:7d:
                    10:ae:1d:5a:42:df:03:f6:f9:63:6f:5e:19:a6:fc:
                    94:3f:27:4a:7e:6c:ae:8a:db:b3:d5:07:dd:77:66:
                    ef:b9:7e:d1:57:ee:81:9e:b6:f5:fd:36:cd:bd:c8:
                    96:84:90:3a:28:cd:01:b9:e7:fa:57:04:85:dc:ea:
                    b1:9b:01:13:49:31:3e:5c:e8:53:c9:e2:1f:38:74:
                    70:b7:7e:01:29:22:a4:37:ab:83:e9:2a:95:f2:9e:
                    27:d8:03:e6:ab:ff:3b:c5:a8:17:3e:4e:52:93:d6:
                    5e:0f:56:b0:98:12:3b:79:54:eb:83:ae:6a:87:5c:
                    6e:7c:f7:75:d2:18:49:95:22:11:88:fe:37:4e:8b:
                    8d:28:bd:c5:40:5c:85:00:78:ec:c6:10:4c:70:fe:
                    6b:82:7f:51:75:ac:c9:35:96:98:fc:b9:74:a2:32:
                    ee:96:a6:c5:0d:4b:48:23:5d:61:d9:85:d0:c8:b2:
                    17:f8:24:62:d3:bf:1a:fe:32:6b:32:cd:54:ac:4c:
                    a2:01:10:1f:5e:66:fc:9a:87:40:0d:10:6d:05:8d:
                    9b:94:83:0f:e6:ee:7e:13:f4:fe:66:fd:e7:9c:5c:
                    c1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C3:F0:91:57:48:93:2F:52:09:03:6A:A5:F5:F7:E5:F2:07:BF:A0
            X509v3 Authority Key Identifier:
                keyid:C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37362e302f32332d3233203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:1f:1d:f7:d3:18:18:24:c9:88:cd:c2:ac:8b:d7:01:89:a2:
         1b:58:4b:e6:6c:d7:e3:0d:72:92:0e:ba:96:a9:d2:4e:06:cd:
         f3:9f:e5:ca:a0:68:73:74:af:3e:a0:e5:f5:32:af:f7:8c:aa:
         90:ee:13:6a:cb:7e:c7:ae:7b:7a:3f:4f:89:eb:a7:80:05:91:
         a0:0c:bc:a5:7c:d6:d6:9d:b7:74:b8:24:06:04:40:a5:c3:44:
         b9:85:fc:aa:3a:1c:8e:92:0a:f4:15:d3:dd:f7:3d:6e:bb:76:
         8d:30:d7:b2:f6:ea:59:96:ec:59:bb:23:00:31:60:9a:bc:23:
         ca:e3:28:01:74:d8:97:46:61:cc:02:f8:34:9e:8b:22:8c:18:
         6e:f8:c2:71:2a:00:ab:26:a2:fb:98:6d:8a:dc:f1:bb:d3:36:
         bc:e9:fc:7f:c4:25:76:dd:ad:7c:a6:6d:0d:d8:88:af:1e:10:
         30:c3:11:58:b7:1d:ea:6a:a5:40:04:19:3e:6a:3c:dd:72:90:
         bc:55:a5:92:b8:87:d6:95:35:a0:54:69:52:0b:5e:8c:67:0e:
         d0:6f:00:f3:b6:7f:a9:b2:c0:2b:b1:9e:4b:6d:01:2a:0d:e3:
         e7:e8:b9:47:e5:70:8f:ca:8f:37:6c:f7:29:c4:1b:77:30:4e:
         e3:38:0f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org