Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139392e302f32342d3234203d3e203533303631.roa
File:                     3139312e3234312e3139392e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          DOgaDj0RcrOsnfbNgukUvDarwt1dquC+CVg4luCE3OI=
Subject key identifier:   B9:E6:77:F1:83:54:96:34:6C:58:0D:C0:9C:AC:A4:5F:87:3E:A4:33
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       21B1BCD42784B5A9CA995B8E48E7D5B0CA14C4E4
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139392e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:46 +0000
ROA not before:           Thu 06 Apr 2023 19:15:46 +0000
ROA not after:            Thu 04 Apr 2024 19:20:46 +0000
asID:                     53061
IP address blocks:        191.241.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b1:bc:d4:27:84:b5:a9:ca:99:5b:8e:48:e7:d5:b0:ca:14:c4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:46 2023 GMT
            Not After : Apr  4 19:20:46 2024 GMT
        Subject: CN=B9E677F1835496346C580DC09CACA45F873EA433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:77:7d:de:5f:7c:da:cc:b3:c9:02:5c:0c:9e:
                    55:50:6a:e0:b9:75:c5:63:6c:1a:1f:18:20:e2:5d:
                    a7:23:cf:7f:78:16:23:ee:6d:93:a2:a5:40:5a:8b:
                    ef:a1:ef:13:aa:67:6a:20:36:7d:bd:d4:99:01:ce:
                    ec:b9:20:6c:90:cb:87:81:9f:26:c7:cf:0f:2f:ec:
                    d9:2a:6e:52:42:cf:c5:66:8c:89:70:70:d0:ff:87:
                    19:ed:27:3a:2f:da:8b:03:d3:42:45:1f:0b:90:bd:
                    e9:e0:36:92:b4:a1:bc:1b:87:02:f1:4f:0c:f1:30:
                    6a:26:bf:ab:36:85:7b:3b:a3:8e:ad:ce:fb:e4:e8:
                    2d:37:36:4c:66:05:ab:5c:05:4d:ce:6e:6b:6d:4c:
                    04:5c:4f:94:5c:b6:a6:25:64:04:5e:0f:4a:30:9b:
                    2e:89:a0:1c:f6:1b:2b:c0:85:7f:42:2a:16:82:fc:
                    f9:95:f5:d0:75:19:c6:1d:dc:24:f4:1d:4a:f5:b6:
                    40:14:fb:f9:b7:5e:25:4e:64:ec:32:42:4a:e4:9b:
                    ff:e3:3b:ae:6f:2c:47:43:39:fa:9a:f7:e2:bc:77:
                    00:67:64:4f:d3:18:f4:1a:0e:22:8a:24:56:38:35:
                    f4:b2:f5:88:e8:16:f5:c7:bd:8a:29:9f:ee:71:be:
                    62:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E6:77:F1:83:54:96:34:6C:58:0D:C0:9C:AC:A4:5F:87:3E:A4:33
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3139392e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:c7:87:62:37:db:d9:2e:26:34:7a:8b:e7:33:db:ea:51:0c:
         2b:61:60:a1:02:0b:06:a8:7d:0f:d4:d6:86:7a:b5:2a:0d:a3:
         c2:4a:66:5f:7b:98:04:0c:18:6e:d8:1e:e7:6a:0d:1e:0e:1b:
         9d:57:ef:a2:8c:12:5d:70:77:64:25:92:26:77:7e:cf:14:d6:
         d1:43:8b:7c:08:c0:27:af:d9:8a:67:b9:4f:e2:2c:79:35:9c:
         25:fd:4f:62:05:eb:42:18:07:1a:94:8e:52:bb:61:58:36:da:
         71:61:0d:37:62:42:ce:c5:1b:a0:cd:9f:83:c1:9c:ec:c2:f2:
         85:1a:ef:51:de:45:16:1c:cf:eb:66:6f:1b:86:c9:27:03:69:
         5f:2c:0f:bf:8d:ed:13:ba:98:9b:fd:f7:6e:75:46:a1:c5:ee:
         07:68:bc:12:80:2d:e2:d1:fa:23:c7:70:fb:fc:ed:68:e5:6e:
         82:a9:56:53:92:52:4e:ca:23:80:1b:0a:b3:7b:a5:82:3f:86:
         3f:23:a6:21:9f:79:96:35:de:96:ad:c8:f9:a4:b0:c9:a0:4c:
         c2:c8:5e:9e:55:78:1e:66:27:16:a9:8f:2b:f6:fe:78:76:14:
         b3:81:43:ce:59:83:3c:32:a3:75:fb:70:bf:c2:af:00:df:f1:
         4e:e3:1b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org