Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e312e302f32342d3234203d3e20323633363633.roa
File:                     3139312e3234312e312e302f32342d3234203d3e20323633363633.roa (raw, json)
Hash identifier:          WpkZwull/A5R1xK8ar1VhlcC4ttLa7+gmB6owDzLYaI=
Subject key identifier:   D8:89:75:31:30:BC:D1:9B:36:D1:A5:15:39:AE:BE:E3:E5:CF:B6:A9
Certificate issuer:       /CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
Certificate serial:       288D0066AFC2A0BEBD844C402A8E4AF5FB14489B
Authority key identifier: 2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e312e302f32342d3234203d3e20323633363633.roa
Signing time:             Mon 04 Mar 2024 16:18:07 +0000
ROA not before:           Mon 04 Mar 2024 16:13:07 +0000
ROA not after:            Mon 03 Mar 2025 16:18:07 +0000
asID:                     263663
IP address blocks:        191.241.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8d:00:66:af:c2:a0:be:bd:84:4c:40:2a:8e:4a:f5:fb:14:48:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
        Validity
            Not Before: Mar  4 16:13:07 2024 GMT
            Not After : Mar  3 16:18:07 2025 GMT
        Subject: CN=D889753130BCD19B36D1A51539AEBEE3E5CFB6A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8a:42:2f:03:c7:7f:09:16:29:0b:24:da:ad:
                    9e:80:80:ec:9d:d7:66:52:1a:3c:84:ef:13:a5:cf:
                    c7:1e:84:39:c6:ea:37:ba:cc:2a:d7:0f:91:d0:39:
                    a9:e6:d4:a4:55:f6:81:44:45:cb:39:92:97:20:5a:
                    a7:fc:35:5e:a7:52:e6:60:0f:fe:3f:5a:fc:a8:b5:
                    32:b5:e7:97:eb:c0:fe:67:b6:ba:ba:6e:b8:16:ef:
                    9d:65:ea:1e:37:1d:b6:d9:42:c4:1e:20:fc:b9:84:
                    f0:8f:a4:46:c7:b7:7e:e8:75:f7:03:a1:c4:07:e2:
                    a1:40:0b:d2:a2:03:a3:a1:a6:2a:fe:f5:33:bc:cb:
                    94:00:60:04:6f:30:5a:fc:63:ff:59:3d:42:bd:34:
                    8e:b6:9d:35:c3:0a:3b:78:cc:a4:3f:f4:7e:4a:55:
                    d3:2b:3f:23:ee:08:6e:ea:6d:84:5d:2c:21:5a:bd:
                    1e:b0:8d:ba:ed:da:73:88:da:e0:63:25:0c:3b:8a:
                    48:7f:f3:88:84:b2:03:98:f2:76:de:f0:68:4f:8c:
                    4f:3d:93:2f:9d:b5:4f:20:f9:51:ae:4a:b0:a0:d4:
                    92:85:89:25:4d:ff:89:1f:a7:c9:68:62:00:c9:11:
                    42:1b:55:22:8f:5f:c6:ff:e5:26:0b:34:86:7a:bd:
                    11:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:89:75:31:30:BC:D1:9B:36:D1:A5:15:39:AE:BE:E3:E5:CF:B6:A9
            X509v3 Authority Key Identifier:
                keyid:2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e312e302f32342d3234203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:84:37:6a:db:8f:01:12:c2:40:60:57:ab:db:c6:07:9f:7d:
         a2:95:e5:6a:3f:26:de:94:2b:18:3d:ad:eb:c1:a2:6b:e8:e7:
         b9:fa:70:d3:fc:59:eb:af:5b:98:26:e5:14:bb:8f:d3:61:30:
         ee:91:13:60:3f:aa:82:8d:b3:d4:db:7c:f7:88:37:a4:af:c0:
         82:4f:0a:90:b8:5d:1d:d9:58:65:bc:15:91:50:8a:df:ee:40:
         33:69:94:5b:20:fb:0c:2e:33:0b:af:79:40:99:42:d4:7a:6b:
         75:ce:4c:0b:1b:96:cf:1d:4c:56:29:21:29:98:6f:4c:f1:76:
         fb:94:20:8a:5f:d8:ad:27:14:08:c5:e3:94:ab:83:97:7a:a2:
         31:5e:09:c9:6e:f1:29:05:f4:7a:1c:de:2a:36:ce:b5:ae:ec:
         d3:cc:27:4e:9a:8a:1b:c2:2f:ba:74:af:f0:7a:16:d3:ae:43:
         7d:7b:57:a0:4f:f0:7a:a8:61:de:b3:0f:97:66:ad:6d:08:b4:
         b4:e6:51:78:18:65:c4:1d:50:d3:90:c3:d2:75:31:72:fc:9a:
         40:32:9a:ef:ee:e1:54:7d:8a:bd:e7:7d:b7:cf:3e:1f:d0:48:
         f5:8f:2c:23:de:28:af:ea:55:80:bf:d8:e3:2e:01:44:c8:ba:
         97:43:5b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:43 2024 by rpki-client on console-ams.rpki-client.org