Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e302e302f32312d3231203d3e20323633363633.roa
File:                     3139312e3234312e302e302f32312d3231203d3e20323633363633.roa (raw, json)
Hash identifier:          hN8k0T3T2iG+se5XCcY4jlHbIqk9XK4fpQky3JFuC7I=
Subject key identifier:   DD:5F:9D:69:BD:16:50:D3:43:34:C9:37:93:9D:DA:CD:42:B9:AF:FA
Certificate issuer:       /CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
Certificate serial:       526D78552A50047EE8136A06010AC50601A0A1A6
Authority key identifier: 2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e302e302f32312d3231203d3e20323633363633.roa
Signing time:             Mon 04 Mar 2024 16:17:52 +0000
ROA not before:           Mon 04 Mar 2024 16:12:52 +0000
ROA not after:            Mon 03 Mar 2025 16:17:52 +0000
asID:                     263663
IP address blocks:        191.241.0.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6d:78:55:2a:50:04:7e:e8:13:6a:06:01:0a:c5:06:01:a0:a1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
        Validity
            Not Before: Mar  4 16:12:52 2024 GMT
            Not After : Mar  3 16:17:52 2025 GMT
        Subject: CN=DD5F9D69BD1650D34334C937939DDACD42B9AFFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:0b:37:72:1f:83:4b:78:42:2b:ae:a1:c6:
                    60:7a:5d:34:a8:d1:ca:20:ac:7e:83:1e:d3:e6:92:
                    06:08:91:60:39:51:20:71:b9:19:07:43:8e:aa:e9:
                    a3:05:22:ca:62:8b:6e:3e:4c:51:76:f0:8d:05:91:
                    a7:bd:88:56:58:b1:fc:ed:06:59:6f:60:3f:51:b7:
                    d8:a8:38:d6:55:d1:d9:f8:bf:de:ba:cf:70:62:7d:
                    08:90:f5:e4:a4:8e:16:de:71:b3:17:f1:ea:79:5e:
                    e5:b6:33:a9:77:a9:47:e8:e7:c8:3c:65:43:d6:48:
                    e6:05:fb:f3:4c:4e:2f:47:5c:65:96:80:cb:f0:46:
                    1a:22:7c:75:24:94:bf:85:79:73:ac:df:d4:52:98:
                    bb:e3:33:30:27:a1:e2:7c:7f:c0:75:1c:a3:30:03:
                    ae:6f:97:27:8c:d8:07:a8:28:d2:a1:f2:4e:15:36:
                    80:fa:36:f7:70:d3:b0:ef:aa:91:07:2c:9f:05:b1:
                    93:f7:2d:c2:1a:cf:a6:f3:52:d4:d0:8f:39:7f:77:
                    45:59:63:21:9f:9d:d8:c1:d8:94:3a:f0:6e:a1:77:
                    c1:e5:10:ea:5f:6c:a2:33:37:93:34:54:f2:80:ac:
                    d8:f2:2c:52:64:1c:1c:0e:cd:7e:86:d7:1d:b0:51:
                    ba:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5F:9D:69:BD:16:50:D3:43:34:C9:37:93:9D:DA:CD:42:B9:AF:FA
            X509v3 Authority Key Identifier:
                keyid:2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e302e302f32312d3231203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:41:ac:9b:3e:80:71:e0:16:4a:1a:05:11:1e:b3:40:85:3a:
         f4:41:d6:df:0e:48:af:84:66:3c:36:6c:e8:2d:d0:05:a9:d5:
         1c:48:7b:9a:6c:d3:3e:70:a6:18:25:90:74:e9:bf:b6:2a:52:
         49:1a:1c:86:fc:23:ff:ba:f7:47:fd:38:39:d1:7b:c8:47:9d:
         58:ed:f4:67:04:4a:cd:a2:b6:75:5d:cd:7c:9e:13:c0:23:3b:
         90:34:5e:20:81:7f:b6:ed:20:07:3d:c5:20:03:26:d4:91:2f:
         fa:4a:b7:ff:aa:65:17:a9:b8:4d:e5:d6:d9:5b:f7:a2:18:e2:
         9a:b4:56:37:5d:0c:a3:24:1d:4f:db:7f:fd:a5:d0:2a:10:b5:
         30:05:fd:ec:84:b3:bf:af:b6:36:e6:7a:4f:09:6c:3d:a6:64:
         89:9d:ff:0f:6a:34:da:3a:81:41:8c:fc:1e:d9:73:b2:48:29:
         ad:1b:7a:d0:e2:38:e9:6d:20:11:53:51:9b:50:e5:6e:7a:01:
         88:b7:27:05:e0:dd:7a:c7:26:64:1c:30:3f:4d:f3:6c:4f:fd:
         69:45:08:78:65:9e:45:8e:49:36:2b:83:3d:e6:76:8e:ce:c6:
         cb:a2:70:00:a5:74:f5:f9:28:64:d5:d4:d7:07:c6:c7:6b:3d:
         c8:6c:23:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org