Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139322e302f31392d3139203d3e203533303631.roa
File:                     3139312e3234312e3139322e302f31392d3139203d3e203533303631.roa (raw, json)
Hash identifier:          J3dpP70zh60ywb1D7zza+x36FQWty0TEeQkgZ074w00=
Subject key identifier:   60:56:F8:C7:05:A8:A2:1D:BC:E2:12:AE:38:6A:63:C0:F3:5F:5E:EA
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       5AE0C2F742D158CE8B3015A8D1038936CA2FE628
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139322e302f31392d3139203d3e203533303631.roa
Signing time:             Thu 07 Mar 2024 20:02:03 +0000
ROA not before:           Thu 07 Mar 2024 19:57:03 +0000
ROA not after:            Thu 06 Mar 2025 20:02:03 +0000
asID:                     53061
IP address blocks:        191.241.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e0:c2:f7:42:d1:58:ce:8b:30:15:a8:d1:03:89:36:ca:2f:e6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Mar  7 19:57:03 2024 GMT
            Not After : Mar  6 20:02:03 2025 GMT
        Subject: CN=6056F8C705A8A21DBCE212AE386A63C0F35F5EEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:60:f1:76:bc:81:8c:a1:b3:9b:64:bf:6d:b4:
                    9c:7c:83:5f:2b:59:b9:09:85:28:c2:34:ae:e9:65:
                    e3:95:8c:fb:e4:d3:b0:76:db:bb:34:f0:45:5e:75:
                    d9:e3:51:41:26:2f:4f:73:74:7b:7c:84:ce:96:d8:
                    6f:ea:78:e1:fb:b7:4f:bd:05:0c:8a:85:f5:1f:49:
                    b7:02:04:cd:4a:a7:e0:1e:6b:e3:5d:56:d1:33:54:
                    cb:c6:08:bd:d4:d5:38:86:f2:12:c7:7f:a0:ec:cd:
                    cb:d1:a0:69:ab:00:31:f9:4a:7b:b2:d0:56:5a:da:
                    a3:35:61:5d:54:4d:3c:48:c4:e2:47:31:dd:96:3a:
                    8f:3e:de:82:c2:c5:d7:4b:89:d5:96:b0:20:1a:57:
                    d4:f4:71:31:d5:08:b2:f3:88:6e:67:b4:af:ca:98:
                    a7:23:49:f1:a0:e3:59:c9:cd:d2:77:9f:77:5e:cd:
                    80:af:90:25:4f:e4:d8:25:c6:0a:fb:7b:0f:ec:c2:
                    fc:38:1e:d3:66:e6:c5:68:ae:ed:c9:53:ad:e4:7e:
                    3b:31:fa:5e:2b:d0:49:ea:c9:d9:9d:f3:55:e7:19:
                    7b:c5:27:ee:1d:64:f4:9a:d7:0a:c7:3a:ea:4d:50:
                    09:7e:d9:ef:d1:16:90:ef:16:41:5b:fc:e0:8b:22:
                    ff:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:56:F8:C7:05:A8:A2:1D:BC:E2:12:AE:38:6A:63:C0:F3:5F:5E:EA
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139322e302f31392d3139203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:ca:79:6c:eb:fe:e9:16:09:04:71:9b:49:43:f3:a3:c8:59:
         4a:1b:18:83:76:91:22:da:2d:fe:c5:f1:2d:8a:22:3e:ee:f7:
         dc:7a:8b:89:0a:2d:7a:4e:f0:8a:b1:df:b2:61:ea:a4:de:9a:
         31:9f:75:18:49:54:f6:ae:c7:1f:39:5b:ef:18:f9:cb:b7:b2:
         a1:2e:67:0c:c5:f2:85:5d:66:ed:22:48:11:92:9b:a6:7a:91:
         86:38:eb:45:50:eb:9e:99:c7:3d:45:67:75:82:f4:49:ee:2e:
         ab:eb:1b:c0:05:5e:08:e2:f0:59:f6:9c:d5:ee:7a:91:e4:94:
         34:82:0c:78:e8:c7:28:fc:53:a2:20:8f:49:6b:3d:bb:bd:1c:
         d0:6e:f2:8e:18:db:5b:6d:42:fc:ac:1d:9a:31:bf:40:34:df:
         93:84:a3:47:28:95:a0:34:f0:42:10:13:aa:be:30:55:75:b4:
         4b:e2:87:cd:9d:57:9d:de:7d:fb:09:a4:fa:09:39:71:06:9f:
         ca:e2:33:fa:ed:a7:3e:79:d5:42:b0:60:1e:69:cc:86:86:21:
         50:ba:48:48:c8:e2:26:05:5e:28:81:4e:40:6e:7f:e5:cc:ac:
         50:1e:d0:0f:5d:3a:d9:fe:b3:0f:25:ad:09:2c:d2:d9:68:ab:
         7d:9a:20:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org