Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37372e302f32342d3234203d3e20323633343734.roa
File:                     3139312e3234322e37372e302f32342d3234203d3e20323633343734.roa (raw, json)
Hash identifier:          d+QnGg0SLc4jLQzSgjEmNwld4pUoE+2xBrB3dXVhwcc=
Subject key identifier:   F1:42:7E:A9:19:F9:64:16:D5:24:75:CE:17:C0:3C:D9:58:CB:4A:9B
Certificate issuer:       /CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
Certificate serial:       29CAF526E857A12A915193CBF9EBD111F72366F1
Authority key identifier: C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37372e302f32342d3234203d3e20323633343734.roa
Signing time:             Mon 30 Oct 2023 11:54:58 +0000
ROA not before:           Mon 30 Oct 2023 11:49:58 +0000
ROA not after:            Mon 28 Oct 2024 11:54:58 +0000
asID:                     263474
IP address blocks:        191.242.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ca:f5:26:e8:57:a1:2a:91:51:93:cb:f9:eb:d1:11:f7:23:66:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C858AC6D85672A66D3D5599F9237160F9B1B9433
        Validity
            Not Before: Oct 30 11:49:58 2023 GMT
            Not After : Oct 28 11:54:58 2024 GMT
        Subject: CN=F1427EA919F96416D52475CE17C03CD958CB4A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f4:19:f6:08:0e:c8:b8:d3:17:ec:f3:94:0a:
                    50:c9:c6:ea:d2:bc:19:0b:00:c1:d9:0c:41:14:67:
                    9e:fb:99:14:52:33:7a:cf:18:5a:44:89:5d:d6:dc:
                    fb:de:ff:ba:e6:e8:87:40:ef:c0:5a:85:42:d7:19:
                    ff:a6:cf:56:c4:5b:69:b4:7a:1a:c2:12:60:0d:fb:
                    6c:ec:66:fa:f0:63:40:5f:0e:f1:04:a6:ab:7c:c4:
                    15:86:5e:d2:d1:de:be:be:92:fe:12:c9:87:15:dd:
                    00:59:d3:51:a8:63:99:56:b9:16:ac:4f:d4:7e:02:
                    c5:e8:08:35:19:39:24:05:c3:4a:18:c0:eb:15:49:
                    49:39:a1:ee:d9:35:3a:d7:19:18:5b:28:2d:ba:70:
                    d1:80:39:26:c2:ec:36:3b:de:09:c7:9b:68:01:3b:
                    bd:ee:54:d5:6f:ce:a6:67:ca:9a:e9:0f:51:d5:54:
                    d9:2d:b5:13:06:cd:15:93:8e:57:8b:76:da:e6:8b:
                    46:c3:f1:71:cc:41:a1:58:d4:6a:5f:ce:4a:64:e5:
                    bb:d1:63:a8:9d:06:89:8e:c7:ec:27:7f:ce:99:dd:
                    24:08:85:dc:81:e0:08:6c:57:b6:fd:f7:4f:ed:c5:
                    2f:ff:4d:cf:0d:75:43:1d:06:cf:90:8e:83:e6:cc:
                    a5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:42:7E:A9:19:F9:64:16:D5:24:75:CE:17:C0:3C:D9:58:CB:4A:9B
            X509v3 Authority Key Identifier:
                keyid:C8:58:AC:6D:85:67:2A:66:D3:D5:59:9F:92:37:16:0F:9B:1B:94:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C858AC6D85672A66D3D5599F9237160F9B1B9433.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/3139312e3234322e37372e302f32342d3234203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:f7:79:dc:26:c4:73:bf:ab:6c:bc:71:c9:f5:9c:21:b4:32:
         38:92:60:bd:1f:39:1d:f7:5a:14:26:4c:c2:de:52:3c:d0:92:
         5c:f8:bc:14:a9:e5:59:0d:95:24:e0:99:fe:cd:30:7d:fd:e5:
         58:30:e9:ea:46:c4:5e:7b:08:ce:00:95:d5:bd:4b:f0:8b:97:
         a8:3a:b3:84:ac:ad:2a:f8:d2:82:9d:b6:19:17:dd:33:b1:46:
         79:ff:cf:de:d2:15:2f:88:f2:0b:36:ce:26:a4:ac:8b:31:5e:
         8d:92:7e:b8:ec:bf:65:6f:dc:0b:9d:7a:f9:dc:e3:6b:b1:a4:
         d4:e8:3b:c7:e3:4a:5e:95:cb:0b:aa:3f:15:11:93:16:fe:4e:
         62:70:38:46:1d:40:40:f8:e1:56:6b:dc:7c:17:1f:8d:d1:d1:
         7a:86:b2:f9:ee:0a:9b:e0:6b:5e:a3:72:9c:51:68:9d:14:3c:
         48:50:29:52:fb:70:3d:51:bd:97:27:e6:97:98:13:71:84:01:
         16:13:fe:25:cc:0b:f0:d3:da:87:9e:6d:7d:d6:7a:6f:ac:bd:
         6a:34:74:11:70:1e:56:b0:c6:67:2a:50:a8:50:0f:02:07:60:
         d6:21:25:36:07:f5:f8:3d:fb:cd:d8:12:1a:47:e4:19:da:8e:
         7f:49:03:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org