Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139352e302f32342d3234203d3e203238323733.roa
File:                     3139312e3234312e3139352e302f32342d3234203d3e203238323733.roa (raw, json)
Hash identifier:          SYB00k31LcjdDS2wE7qzMW7X6UgQgdjT7h82eNGmaPs=
Subject key identifier:   81:31:12:CD:FF:9D:DD:8E:D5:70:94:FC:0C:56:16:88:DB:56:28:B8
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       164B690E65FD5ADF69AF9FE3BE87F976545F301E
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139352e302f32342d3234203d3e203238323733.roa
Signing time:             Thu 06 Apr 2023 19:20:48 +0000
ROA not before:           Thu 06 Apr 2023 19:15:48 +0000
ROA not after:            Thu 04 Apr 2024 19:20:48 +0000
asID:                     28273
IP address blocks:        191.241.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4b:69:0e:65:fd:5a:df:69:af:9f:e3:be:87:f9:76:54:5f:30:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:48 2023 GMT
            Not After : Apr  4 19:20:48 2024 GMT
        Subject: CN=813112CDFF9DDD8ED57094FC0C561688DB5628B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b5:96:55:4b:90:a1:be:ad:d1:98:b2:8c:93:
                    b2:53:10:e1:73:6b:ba:b1:99:fb:09:f4:d0:57:44:
                    08:ab:68:f8:c5:e1:ca:e1:02:91:40:84:4b:9e:cb:
                    39:64:3b:09:5f:a0:61:7e:df:42:64:45:6e:04:a1:
                    0c:eb:50:9b:0d:e1:17:c6:8e:bd:77:d7:c5:c5:a1:
                    65:73:7d:73:37:d4:e5:58:16:b5:76:a7:3f:73:f1:
                    5a:cc:b7:45:43:f1:81:7f:23:07:57:e3:ec:c4:cd:
                    a6:37:2d:dd:a1:eb:09:9f:a6:4d:15:38:fa:7f:42:
                    8b:f3:91:2f:12:7b:98:e8:6d:a2:57:f8:68:58:40:
                    3d:48:ac:34:69:a4:e1:e7:33:d0:ed:26:6b:25:73:
                    50:08:aa:ec:76:5a:f3:09:24:30:f0:9f:26:da:4b:
                    62:1c:2c:39:d3:7f:38:94:50:ed:b5:95:3a:0d:bc:
                    49:a1:13:c5:c0:db:39:18:20:3f:1e:8f:0b:13:c0:
                    63:3b:5c:4a:79:44:fa:5f:61:fc:ac:82:e8:c7:cb:
                    4e:88:49:a1:ce:dd:0e:1a:4b:28:ff:0f:7a:c0:53:
                    7f:1b:df:84:19:6b:b5:6e:9d:8b:96:a2:5c:a7:3b:
                    05:1a:0d:50:2d:b8:32:f8:13:13:94:bc:f4:66:d3:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:31:12:CD:FF:9D:DD:8E:D5:70:94:FC:0C:56:16:88:DB:56:28:B8
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139352e302f32342d3234203d3e203238323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:a0:df:06:68:0f:fb:e2:10:f5:5c:df:67:82:ac:47:c0:ee:
         cb:72:53:e2:05:d7:01:12:40:ce:f3:67:d5:63:dc:ae:bb:0e:
         7c:24:4d:cf:9f:16:e9:60:ab:00:ef:29:68:cf:a0:49:46:60:
         e3:ba:63:5d:0f:23:77:a7:a5:ad:25:a4:b2:42:20:db:c3:a1:
         40:9e:7f:a1:5f:3b:83:7f:4e:b0:d0:51:ac:09:a5:79:b3:5d:
         ba:12:9f:83:f1:cd:4f:4a:0b:27:5e:1a:dd:0e:73:51:e9:dd:
         b4:92:66:38:5b:d0:c7:ab:73:4c:bc:6a:a3:f7:ef:cb:bc:29:
         ba:de:e3:4a:be:9b:98:e7:5f:ca:82:b2:dc:65:c4:fe:8a:ad:
         7b:05:f1:37:38:33:09:58:ea:ff:a8:69:28:46:12:04:71:e6:
         c8:9e:9f:be:82:b0:e8:37:46:96:22:e3:c4:c3:cb:fe:26:05:
         12:37:15:c4:24:56:88:7f:fb:0d:40:2c:e3:21:1c:b5:4e:e9:
         f1:3c:b4:12:b1:56:52:38:1c:8e:83:eb:9f:d5:d4:33:f0:29:
         b8:65:90:79:56:c4:a2:fe:93:ac:5a:0e:05:2b:ab:7e:4c:b4:
         1b:2c:92:8b:6e:0c:58:1d:1e:4f:f6:67:61:0c:76:1b:15:17:
         e3:38:ad:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org