Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139332e302f32342d3234203d3e203533303631.roa
File:                     3139312e3234312e3139332e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          MzrRY5rGddn8vNV7z7/PdVv2/5xHVvPzILF0saFKiCs=
Subject key identifier:   86:CF:D9:28:30:18:E8:6A:A9:B0:EC:1D:D9:50:5C:6C:5C:69:66:4E
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       7E0AF866F88E6A0D0B369F93C15A9FAD6B18ABAC
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139332e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:42 +0000
ROA not before:           Thu 06 Apr 2023 19:15:42 +0000
ROA not after:            Thu 04 Apr 2024 19:20:42 +0000
asID:                     53061
IP address blocks:        191.241.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0a:f8:66:f8:8e:6a:0d:0b:36:9f:93:c1:5a:9f:ad:6b:18:ab:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:42 2023 GMT
            Not After : Apr  4 19:20:42 2024 GMT
        Subject: CN=86CFD9283018E86AA9B0EC1DD9505C6C5C69664E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:ce:91:90:a1:9c:ab:17:ed:1a:d6:b5:f9:
                    0d:09:7b:2a:8d:a4:f2:d8:76:dc:84:91:62:a1:af:
                    11:1b:0d:22:11:b4:5d:fe:7e:1b:fe:f1:ba:29:cc:
                    23:b8:f0:85:07:22:e2:7e:56:d2:79:12:2a:44:c4:
                    c0:99:69:29:6f:c3:d1:92:78:ea:fd:38:bb:19:16:
                    32:9c:ee:6a:af:ca:04:3c:2e:4c:95:7a:e8:c4:61:
                    a6:56:97:e6:74:85:22:2f:19:f5:18:c8:e8:d6:4d:
                    b4:e6:e2:ba:7b:89:ef:12:34:bd:45:ef:01:62:be:
                    38:e5:e9:fc:88:e9:55:0e:47:99:a7:9b:cf:37:b7:
                    fb:da:b8:78:3b:35:58:76:72:87:eb:07:63:c0:47:
                    36:2e:46:8c:c7:31:f0:87:db:23:e4:ca:28:d5:44:
                    61:a7:fa:6f:99:a5:95:80:ef:52:85:91:b7:0b:9f:
                    a5:b7:28:f7:aa:71:bf:03:c3:b1:43:b7:9c:34:c6:
                    34:66:d6:09:9c:56:8b:32:58:23:30:3d:4f:3a:e9:
                    1d:08:f4:f9:38:47:03:27:d3:50:8a:e1:d9:f4:4f:
                    af:f7:78:d4:00:aa:d0:8a:24:d0:fd:a0:23:40:89:
                    f5:f9:7a:65:6a:83:fc:ba:39:df:a3:53:56:7e:4b:
                    35:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CF:D9:28:30:18:E8:6A:A9:B0:EC:1D:D9:50:5C:6C:5C:69:66:4E
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139332e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:17:35:1b:fb:5f:98:cd:e6:bf:a5:ed:91:32:ed:fc:3b:08:
         f9:67:2e:d1:40:b4:d6:38:fd:de:7b:38:b1:45:eb:95:9b:7d:
         c8:c1:76:32:bd:e7:c0:c4:2e:4e:54:94:d5:ac:9c:aa:1c:ad:
         c5:7c:5e:35:75:94:7d:70:d1:0a:f0:67:c9:a5:09:21:46:ee:
         18:ab:26:1c:da:00:f7:4a:67:3a:8d:36:26:ea:c4:a4:16:cd:
         16:f0:ac:f1:86:59:14:f0:41:f7:d5:bf:90:f3:dd:a3:3b:d1:
         62:ca:8d:d9:54:b3:84:55:62:13:ed:61:2c:ea:a7:40:4e:0c:
         57:cd:d3:78:43:4f:08:4f:8a:31:8f:37:61:39:5b:a8:70:d8:
         dc:09:b2:83:50:35:5f:69:b8:8a:57:c3:f1:27:62:a4:9f:49:
         74:7f:42:04:3a:7b:ef:a1:f6:45:40:68:f3:40:49:91:0f:d7:
         b9:6f:9c:7e:1f:fa:d9:4f:cb:f9:53:ef:3f:a7:81:28:38:b0:
         a3:36:9c:a6:85:da:3c:fe:79:02:25:b6:be:bd:ac:00:c1:ea:
         52:cc:ad:1d:9f:4a:ef:f7:14:21:76:01:64:54:43:26:49:f0:
         e4:f1:c7:42:7f:b5:e2:4d:77:fd:da:16:9e:a6:4e:c8:a6:27:
         d5:0d:9d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org