Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139382e302f32342d3234203d3e203533303631.roa
File:                     3139312e3234312e3139382e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          Wu3O9Cbi85vhpM1UzN8sJrGUZmuNanyk9myodvnkjvg=
Subject key identifier:   FB:C7:05:76:7D:6E:5C:B9:33:82:0E:92:36:AE:EB:9B:75:7A:A8:C8
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       36CE0F60A2BB1A494EE5F5D6E9D1AABE2ED9DF77
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139382e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:43 +0000
ROA not before:           Thu 06 Apr 2023 19:15:43 +0000
ROA not after:            Thu 04 Apr 2024 19:20:43 +0000
asID:                     53061
IP address blocks:        191.241.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ce:0f:60:a2:bb:1a:49:4e:e5:f5:d6:e9:d1:aa:be:2e:d9:df:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:43 2023 GMT
            Not After : Apr  4 19:20:43 2024 GMT
        Subject: CN=FBC705767D6E5CB933820E9236AEEB9B757AA8C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2d:13:ac:09:99:19:5f:50:3c:63:0c:00:0e:
                    a5:6c:d5:53:39:ad:36:86:5f:f0:de:6b:62:f6:5b:
                    dc:27:30:69:11:8d:4f:4e:16:27:8c:f7:57:7c:b8:
                    5e:85:19:7e:cc:fd:33:3d:60:ee:91:de:dc:e1:8f:
                    7f:a2:bf:27:3e:f4:37:d5:f7:cd:3e:7e:a9:10:fe:
                    f5:b8:aa:9e:fd:08:cc:60:41:f8:bc:92:9c:33:9b:
                    55:74:72:a1:58:47:6f:67:0a:54:b5:ff:f3:b1:9b:
                    11:ec:58:2c:ea:b0:61:e4:f2:d5:e2:44:ea:34:44:
                    35:58:8f:f1:69:17:67:7e:c1:bc:c9:9b:0e:f9:16:
                    9e:f0:8b:0c:6e:de:3c:63:c8:9b:e8:ad:d6:1e:9f:
                    cb:b1:fc:33:24:a7:ca:f3:02:40:02:eb:1e:f4:4d:
                    eb:7f:e6:a2:d6:16:4b:1c:93:cd:f3:16:2a:d2:89:
                    ba:2a:c0:57:c3:d9:f6:cc:12:6e:19:19:80:0c:ae:
                    c4:eb:84:b9:44:da:f2:59:cc:f4:7e:83:49:6f:d6:
                    5e:e6:e1:46:87:31:cc:9e:54:ab:c7:d0:3a:52:7e:
                    b4:ce:95:17:85:90:9a:e5:8c:64:29:f9:f6:f1:76:
                    a7:1c:5c:b3:05:4e:be:bd:6b:81:55:ac:eb:92:a3:
                    29:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C7:05:76:7D:6E:5C:B9:33:82:0E:92:36:AE:EB:9B:75:7A:A8:C8
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139382e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:3c:74:cb:d4:cb:f2:78:82:ac:5a:bb:0e:29:8f:da:48:38:
         42:b0:f1:7c:e6:e4:21:37:6d:0c:1e:50:88:fc:57:5d:11:f0:
         5f:8c:a7:73:0f:dd:47:e2:e9:85:54:e2:b3:9e:d2:c2:c7:d0:
         3a:9c:0d:5b:71:14:d3:03:1b:de:4e:8f:eb:c0:24:8f:08:b5:
         7d:21:c0:a8:28:66:ad:c9:c6:72:f7:31:4a:01:64:e6:da:c2:
         c5:37:da:a0:e4:c1:de:a7:bd:f2:39:e7:2d:43:73:dc:6a:b9:
         8a:30:62:ac:ba:e1:ea:c1:b8:e4:57:10:f8:8e:42:bc:a8:6d:
         d0:e0:00:59:21:9c:f9:b4:c2:25:d1:11:b8:bc:cf:dd:b4:4f:
         e9:c0:f8:49:c8:c8:f8:03:e9:22:4b:d7:ed:33:fb:61:77:78:
         c4:6d:3e:e7:d6:8b:42:4d:a4:d3:6a:e5:67:95:93:d6:8d:43:
         9b:58:87:1b:17:14:d4:1b:3b:23:4c:58:2a:2b:45:2f:f1:08:
         81:8b:cf:55:8f:3b:47:9a:a0:41:3b:05:59:dc:ba:7e:b9:3d:
         3f:03:18:e4:b6:7f:72:50:54:a2:b7:1e:b5:d8:1e:30:8c:a0:
         21:5c:bd:93:a0:e1:15:7b:99:6b:7a:5d:f9:d9:39:a4:55:d5:
         44:2e:0f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org