Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139372e302f32342d3234203d3e203533303631.roa
File:                     3139312e3234312e3139372e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          ZIYdzjfVw/VnMRCsJwrO4SqmaFxL6QA9qk6ZtJzgQlM=
Subject key identifier:   88:A9:45:B7:A2:5F:F6:AC:2C:86:87:7B:5F:C6:31:EE:30:EE:6C:15
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       446CCA26DDA54851E8C5A37823399F23730C6AD6
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139372e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:45 +0000
ROA not before:           Thu 06 Apr 2023 19:15:45 +0000
ROA not after:            Thu 04 Apr 2024 19:20:45 +0000
asID:                     53061
IP address blocks:        191.241.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6c:ca:26:dd:a5:48:51:e8:c5:a3:78:23:39:9f:23:73:0c:6a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:45 2023 GMT
            Not After : Apr  4 19:20:45 2024 GMT
        Subject: CN=88A945B7A25FF6AC2C86877B5FC631EE30EE6C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:94:cf:f9:78:58:93:41:7f:d4:05:b5:70:4d:
                    2b:cf:19:49:a5:44:15:51:30:ae:4c:95:a6:32:06:
                    be:29:43:98:71:2a:a9:16:d2:ee:71:be:67:c0:45:
                    e5:82:df:a3:96:0a:b1:c7:a1:cf:83:22:42:34:ec:
                    ff:0b:f4:e7:d7:46:26:42:5d:8f:18:06:c0:b3:03:
                    3b:64:b3:1d:bb:b2:aa:30:25:63:23:41:a0:7a:ce:
                    d9:65:47:29:6c:a8:11:d7:41:b9:2d:4d:a9:a9:e9:
                    08:3d:22:cd:bf:68:36:44:8a:a8:a1:ed:79:ee:b4:
                    12:c5:23:f0:69:e0:af:c9:0f:e5:f4:0c:13:d7:73:
                    85:dc:61:82:df:e5:a7:7f:88:39:f3:4d:2b:65:7c:
                    cd:73:9d:4c:86:c6:15:a2:2a:26:ea:7a:05:49:13:
                    f6:c3:f0:a2:a4:b6:20:89:80:8f:08:88:d3:a7:63:
                    15:7a:76:52:58:ff:88:72:0d:40:37:80:d0:74:9d:
                    d6:59:31:57:61:e8:4f:51:6c:ea:28:02:77:30:50:
                    c6:48:bc:89:7b:2d:d1:3d:44:87:f6:fa:d1:c0:1f:
                    51:2c:88:2a:13:5d:fb:53:5d:79:0f:9c:48:21:e0:
                    13:ae:d9:a1:02:be:6b:28:cf:31:f1:55:c1:00:a6:
                    23:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A9:45:B7:A2:5F:F6:AC:2C:86:87:7B:5F:C6:31:EE:30:EE:6C:15
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139372e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:80:57:d8:1a:ab:c3:08:40:03:10:49:b7:4e:cf:a7:0e:08:
         c2:a7:4c:d4:ef:d1:16:2b:18:f9:75:8a:8b:51:8c:e1:31:31:
         24:ee:c4:86:8d:9e:76:41:d1:a5:58:09:df:ef:b4:ad:2e:f2:
         f9:fc:5e:99:1a:73:fe:6e:9d:1d:68:72:32:4f:62:e1:f0:74:
         75:b0:78:f8:e5:32:52:1a:23:d5:55:18:e8:79:69:ac:f0:fe:
         5e:b3:cc:b8:e6:8b:78:7f:36:2d:5b:22:41:a5:0e:de:06:f5:
         e8:2b:05:1b:23:31:af:cf:49:8a:3c:72:19:da:bd:16:24:b8:
         69:53:e1:fc:c8:ae:76:cd:51:8e:4b:b0:4e:f3:44:1d:24:62:
         7e:48:c5:2b:67:4c:93:87:c7:5d:85:16:62:67:9c:3f:e8:e8:
         d6:02:ce:4c:74:ea:fd:92:d8:dd:fc:5e:0d:5b:f3:c0:1b:b3:
         66:13:d2:ca:fd:b8:12:fc:59:6b:da:1e:ee:19:96:fa:a4:6a:
         31:03:3a:c4:44:e1:57:7f:ce:83:05:c8:88:ec:8f:d4:7f:a9:
         58:40:2f:4e:6b:ca:f1:1a:ab:bf:59:63:d7:8b:53:78:63:33:
         74:47:fa:f1:3c:d1:7e:e4:a2:26:47:31:0a:16:99:0c:40:df:
         0b:d3:39:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org