Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139352e302f32342d3234203d3e203533303631.roa
File:                     3139312e3234312e3139352e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          DI8y9GCBi2yJYtK04OZE1EYZ1kevpd5wc1F/XmV5acw=
Subject key identifier:   B9:FF:F9:01:69:75:3E:CE:B9:C1:F3:06:F9:3F:1D:C1:CC:A9:43:57
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       34640367503C5AA9C7ADC796BFCAD44B72DAE8B6
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139352e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:42 +0000
ROA not before:           Thu 06 Apr 2023 19:15:42 +0000
ROA not after:            Thu 04 Apr 2024 19:20:42 +0000
asID:                     53061
IP address blocks:        191.241.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:64:03:67:50:3c:5a:a9:c7:ad:c7:96:bf:ca:d4:4b:72:da:e8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:42 2023 GMT
            Not After : Apr  4 19:20:42 2024 GMT
        Subject: CN=B9FFF90169753ECEB9C1F306F93F1DC1CCA94357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3c:02:9f:17:78:d9:0b:bc:af:fe:48:db:c2:
                    e9:0e:fc:b0:21:fc:af:2f:0a:8c:47:ca:5a:b8:e4:
                    e2:4e:2f:a6:9f:7f:2f:a0:46:af:35:7c:b2:ef:09:
                    82:3f:c8:d6:9e:17:ff:85:3e:76:30:6e:59:c2:8a:
                    9d:33:dd:be:dd:9b:aa:f1:95:1a:37:05:50:8b:47:
                    44:7f:2a:89:a6:05:10:71:88:ee:06:c4:3f:0e:7b:
                    08:57:99:0f:32:e9:0e:45:61:ab:98:b6:cf:23:e4:
                    16:3d:96:6c:2f:ba:1a:fb:7e:c9:5e:1e:29:8c:e9:
                    17:10:5d:66:e2:08:59:c9:34:c9:86:48:04:6b:17:
                    76:a7:a6:ab:0a:66:af:ec:2f:78:b0:1a:5b:40:19:
                    df:39:74:d1:0b:2d:68:33:06:09:87:a6:9f:a1:c5:
                    99:3f:2f:f2:82:21:e0:55:4c:e5:09:78:2b:f6:0b:
                    6e:c7:f7:a8:a2:52:e1:85:72:be:5d:96:9c:a5:39:
                    6a:1f:20:a7:b2:ce:ae:eb:e6:1e:24:7a:c5:2c:66:
                    ee:84:72:3b:b0:c2:36:fb:22:e6:1b:12:14:2b:17:
                    f1:6c:00:4f:c0:21:c0:3f:74:2a:c9:05:f5:15:0c:
                    c3:21:3a:f9:f2:f0:61:21:77:97:56:0c:ef:6b:80:
                    8c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FF:F9:01:69:75:3E:CE:B9:C1:F3:06:F9:3F:1D:C1:CC:A9:43:57
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139352e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:83:59:08:8e:df:7f:18:0d:67:b9:2a:7f:e8:60:8c:56:83:
         9a:99:82:7a:36:db:64:7d:7b:4e:10:69:a7:3c:47:67:1b:93:
         c2:63:d7:02:a9:c9:0c:e2:f9:7d:3d:bc:f6:82:55:23:2d:75:
         e2:0f:ed:3d:4e:31:5f:b5:9d:1d:13:e3:a4:61:a6:ed:9a:e9:
         ff:3a:1b:d9:18:63:0f:3b:c5:2e:9d:e7:db:31:d0:c4:e4:b1:
         27:9c:d6:4a:aa:4e:02:f0:47:06:a6:1b:f0:37:f7:79:6f:5a:
         84:9c:08:73:a2:62:2e:a2:f9:37:89:c6:9f:08:08:e8:62:bd:
         4a:23:52:8b:ba:ad:d2:b9:76:7e:e3:f8:7d:3e:cd:76:a5:98:
         13:19:cc:df:19:98:ef:a4:87:f3:f6:7c:c2:a5:fe:6d:cb:b4:
         ad:c5:8b:35:08:00:cb:6b:23:fc:79:43:e9:39:52:9e:03:1e:
         7a:69:ec:af:db:c9:67:dc:79:7f:61:5c:0b:f4:30:69:12:40:
         63:a7:7b:38:17:31:8e:74:47:2b:f4:c8:e7:b9:c3:50:30:21:
         10:e8:69:da:cd:40:29:62:7c:0f:71:8c:61:44:cc:0a:50:d0:
         de:e9:5c:ff:ed:94:2b:8a:90:37:20:e6:50:3c:86:5d:3d:d3:
         9c:18:76:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org