Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3230302e302f32342d3234203d3e203533303631.roa
File:                     3139312e3234312e3230302e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          AT6Hs5DycqT7VC90yThceHo6ghnKjiYvdnvE6kdE2VE=
Subject key identifier:   B1:AC:49:B1:2E:D6:19:13:92:63:79:28:62:87:95:1A:C0:A9:09:D4
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       585313FC95FE0020088879BFC6CB6564D4EE1584
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3230302e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:43 +0000
ROA not before:           Thu 06 Apr 2023 19:15:43 +0000
ROA not after:            Thu 04 Apr 2024 19:20:43 +0000
asID:                     53061
IP address blocks:        191.241.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:53:13:fc:95:fe:00:20:08:88:79:bf:c6:cb:65:64:d4:ee:15:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:43 2023 GMT
            Not After : Apr  4 19:20:43 2024 GMT
        Subject: CN=B1AC49B12ED61913926379286287951AC0A909D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9f:ee:ef:d5:6a:5d:38:1a:1d:44:28:c9:b2:
                    2c:5f:0e:28:07:3c:b3:d5:22:99:5b:b0:74:bb:5c:
                    d8:8a:6f:ba:80:94:2f:52:aa:f7:b7:52:34:fe:43:
                    6a:d7:65:ab:e4:18:76:e3:ed:7e:16:02:c8:77:05:
                    9b:02:70:84:be:30:ca:03:02:22:5d:a5:6f:7c:df:
                    e7:38:77:da:e9:5c:b2:00:fc:c7:0f:14:51:56:08:
                    89:df:3c:95:8b:2c:cd:be:77:43:50:96:72:e1:7d:
                    09:16:13:44:2d:0c:ae:95:80:b8:b5:e1:68:99:ba:
                    5b:c4:3d:f0:b9:89:e0:7d:96:f2:31:4e:c6:11:82:
                    22:87:14:28:46:c1:35:ca:14:a5:71:a6:be:c5:d5:
                    b0:ac:f4:ff:bd:27:88:44:05:2f:d6:a4:f2:de:0e:
                    2f:e0:c1:cb:37:e8:c4:02:b1:6b:e4:f6:1b:fa:56:
                    ad:36:c4:0c:b0:6e:29:52:36:92:2b:6c:92:8e:9f:
                    74:e5:04:73:29:47:35:81:47:db:aa:a8:b3:65:b7:
                    ed:a3:45:c5:4c:39:0c:c5:2d:96:ab:07:1f:92:db:
                    ea:13:9b:94:ea:76:5e:64:aa:b6:42:a8:8b:9b:b0:
                    83:46:1c:d4:e7:47:5f:c6:68:c0:a7:fa:80:4f:e4:
                    5d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AC:49:B1:2E:D6:19:13:92:63:79:28:62:87:95:1A:C0:A9:09:D4
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3139312e3234312e3230302e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:0d:d2:f1:aa:e9:48:fa:bf:65:b4:25:f0:d5:76:37:a5:e9:
         a3:5f:43:d1:53:0f:80:38:74:28:24:f5:7c:4f:17:80:d7:9f:
         68:3a:96:d8:06:4f:c0:a7:89:10:5d:0a:76:1f:f7:8d:7b:c9:
         fc:d1:4a:2c:5b:27:e7:67:54:c7:c5:26:7b:2b:e4:fb:2c:88:
         a5:0e:54:e1:be:fe:ad:9b:93:1e:89:b3:7d:dd:e1:d5:51:9c:
         24:40:93:1d:8d:b6:bc:50:5d:b8:8a:01:9d:f7:ce:42:24:16:
         78:56:57:99:28:ad:4b:7a:e3:c1:03:27:ea:f8:8b:ef:ab:c1:
         6f:c4:b6:48:08:cf:e9:02:7a:d3:6b:e5:26:9c:93:7c:25:e2:
         6b:67:23:a9:3f:e4:05:d0:67:44:e1:b8:48:95:5e:8a:af:13:
         f3:1c:3d:0c:2a:b4:0a:8e:d2:db:f4:cd:6c:e2:5d:8e:9c:46:
         3e:20:cc:b4:37:b2:2f:2b:09:82:f6:6c:56:ef:75:71:a5:5f:
         46:f6:0f:53:fb:39:26:a4:4b:61:96:62:56:45:c7:0e:d0:e8:
         e3:96:8a:a1:8f:6d:d8:95:0b:86:83:c1:af:e1:06:85:52:c6:
         7e:cc:45:03:6e:c5:b9:3b:3f:90:3c:9f:ab:de:d1:ae:74:13:
         43:b7:13:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org