Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139342e302f32342d3234203d3e203533303631.roa
File:                     3139312e3234312e3139342e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          HMcKiLgmEmx6yofmx23Ztuev4paf5MYRcmdwFXiHQjs=
Subject key identifier:   3A:DD:30:66:6D:7C:DA:0F:F9:38:0F:62:4D:99:4C:63:58:BE:69:3D
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       3B61DAE2B5B8A5C7743C5625469CAECBE4A45792
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139342e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:46 +0000
ROA not before:           Thu 06 Apr 2023 19:15:46 +0000
ROA not after:            Thu 04 Apr 2024 19:20:46 +0000
asID:                     53061
IP address blocks:        191.241.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:61:da:e2:b5:b8:a5:c7:74:3c:56:25:46:9c:ae:cb:e4:a4:57:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:46 2023 GMT
            Not After : Apr  4 19:20:46 2024 GMT
        Subject: CN=3ADD30666D7CDA0FF9380F624D994C6358BE693D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:eb:25:0e:7f:e1:11:28:64:82:ac:ad:06:a2:
                    3b:e4:fb:ad:32:d7:5e:cd:5c:fe:5c:67:55:bc:43:
                    b7:da:fe:e6:98:a6:b0:e1:65:b1:5c:00:a8:a7:dd:
                    3c:15:ce:d8:71:63:0b:84:3f:3d:f5:5c:16:8f:6a:
                    b9:a1:52:60:0a:1d:5b:d2:95:bc:5a:9d:dc:a4:f1:
                    5b:05:dd:87:4c:7d:af:1f:d9:f5:52:7f:6e:22:19:
                    25:45:63:cd:0e:40:02:9e:02:4c:49:7d:bb:49:21:
                    c3:71:9f:32:d2:30:ad:dc:80:59:ca:69:d1:4f:b0:
                    18:c4:94:10:64:9b:2c:ea:62:22:98:9e:f7:35:5c:
                    47:09:e9:60:c6:09:a2:2c:43:84:e1:d1:36:48:8b:
                    10:68:3d:13:a4:61:4b:37:3f:0c:d3:a5:74:b4:2f:
                    f9:96:a9:26:af:a6:3c:e9:ad:a9:8e:18:2d:e9:8d:
                    e3:1c:a9:58:c6:7d:c8:e3:d6:7e:27:a9:01:3b:95:
                    18:cb:b2:8b:b8:f5:e9:09:55:82:9c:7b:cf:d6:87:
                    db:06:ca:d0:f8:2e:2d:cb:54:fc:b9:ec:57:01:64:
                    4e:d2:8c:b0:87:c6:29:bb:b3:11:47:b5:2c:dd:75:
                    f2:10:56:7d:e4:31:f8:09:3a:8a:c6:c3:bb:71:e1:
                    b3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DD:30:66:6D:7C:DA:0F:F9:38:0F:62:4D:99:4C:63:58:BE:69:3D
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139342e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:0e:f9:cc:c1:2e:c4:2f:14:74:35:e5:ba:96:24:23:65:5d:
         67:82:7c:57:4f:46:56:6b:72:ad:24:92:b7:12:2f:76:b1:0d:
         9b:ab:e1:e0:ca:90:07:bd:f8:35:3a:96:60:0c:ca:31:44:17:
         ad:2b:c1:08:06:10:0a:ed:a6:e9:30:cf:99:eb:34:a0:62:91:
         06:53:6d:15:b3:c9:09:06:5d:6d:9e:9a:d7:c5:17:e2:76:be:
         9d:34:72:d3:a2:9e:87:73:dc:c5:99:84:95:b7:a4:a8:6c:97:
         89:31:7f:a3:0b:46:01:d0:89:06:d9:ef:90:8e:9a:3b:b1:a1:
         a9:5f:59:9d:56:36:19:49:df:5e:7b:e9:75:46:83:29:24:93:
         d0:66:7c:19:c8:02:3f:9c:19:ca:b1:25:64:71:bb:c8:9f:bf:
         15:8a:d2:50:16:b6:4b:93:96:b8:42:d2:05:b8:40:e0:8b:f5:
         15:5e:36:5d:9b:35:e9:7a:25:5d:f5:c4:d3:84:de:0f:bf:c7:
         b0:45:94:f6:76:b9:d7:51:5e:b9:08:e1:25:a5:8b:9e:bf:74:
         2a:cc:db:59:82:63:5c:b5:b7:77:5f:7e:5e:75:46:ac:95:ad:
         84:cc:20:cb:e2:a1:5d:80:1e:89:c1:bf:2f:4d:28:bf:a6:60:
         9b:43:d4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org