Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e332e302f32342d3234203d3e20323633363633.roa
File:                     3139312e3234312e332e302f32342d3234203d3e20323633363633.roa (raw, json)
Hash identifier:          ohNE0jqigboRRq3PK2CL2Tgms+dVdS+crzNVgui9N00=
Subject key identifier:   68:7E:45:A1:59:A9:46:00:29:41:D4:2B:0E:7B:CD:5E:7F:D4:E0:A3
Certificate issuer:       /CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
Certificate serial:       63AE15372C5342849F714BEFB968038C1BEAA30F
Authority key identifier: 2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e332e302f32342d3234203d3e20323633363633.roa
Signing time:             Mon 04 Mar 2024 16:18:18 +0000
ROA not before:           Mon 04 Mar 2024 16:13:18 +0000
ROA not after:            Mon 03 Mar 2025 16:18:18 +0000
asID:                     263663
IP address blocks:        191.241.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ae:15:37:2c:53:42:84:9f:71:4b:ef:b9:68:03:8c:1b:ea:a3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
        Validity
            Not Before: Mar  4 16:13:18 2024 GMT
            Not After : Mar  3 16:18:18 2025 GMT
        Subject: CN=687E45A159A946002941D42B0E7BCD5E7FD4E0A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:38:82:9a:56:db:8b:f7:3a:1a:4f:a1:b2:
                    de:38:88:77:5c:a5:bd:3a:1f:ac:95:19:4d:ae:cc:
                    54:fd:5e:86:e8:28:4f:42:ac:19:09:48:55:77:1d:
                    b1:73:90:68:4d:99:6f:27:3a:ed:16:62:41:97:52:
                    0a:31:10:d0:e3:9c:ab:58:3b:50:5e:0d:32:71:b8:
                    8f:6d:70:81:64:c5:f4:7c:08:0d:43:cb:31:11:39:
                    7b:3d:14:0d:3d:e4:c1:fe:ae:03:2b:d0:f4:5a:19:
                    78:ee:d8:d6:9c:36:d2:97:8c:a5:12:02:7f:ca:6c:
                    18:bc:d5:a8:6a:36:90:4f:f2:11:9a:1f:35:99:57:
                    5c:c6:38:25:6a:72:5a:4e:4e:ff:0c:a4:6f:ef:10:
                    b2:95:44:c1:3e:5f:7f:c4:0d:04:01:a9:0b:ca:0e:
                    a4:5f:6e:83:ff:31:21:fd:55:c0:e5:1c:85:3c:f8:
                    2c:53:f0:0d:e8:47:49:2a:49:00:28:3a:c0:44:8c:
                    f4:68:1d:98:ad:d8:dd:d7:cd:cf:44:05:a0:50:97:
                    10:12:ec:df:1b:4f:a2:be:22:6f:f1:73:3e:7d:59:
                    82:c2:7a:48:eb:ab:14:16:78:2d:4b:6b:12:27:63:
                    1c:75:61:4e:ab:ea:af:31:3b:7d:d8:a9:f3:3d:e9:
                    d3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7E:45:A1:59:A9:46:00:29:41:D4:2B:0E:7B:CD:5E:7F:D4:E0:A3
            X509v3 Authority Key Identifier:
                keyid:2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e332e302f32342d3234203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c1:12:d5:40:47:88:1e:2d:65:90:db:39:0e:f1:3e:44:0a:
         de:4b:df:b9:56:d8:e3:74:08:c2:4a:21:0c:7f:5d:d3:cf:96:
         b4:9e:2b:fd:02:4c:34:b6:4d:40:50:da:6f:f0:91:e9:99:0b:
         af:57:c6:ca:e9:4f:46:10:d7:6c:22:02:41:7c:f5:42:c4:29:
         c0:38:74:01:fb:61:bc:1b:83:bd:0f:d9:ac:90:04:d3:ef:5e:
         41:9a:f8:45:53:b8:22:75:11:06:a6:b7:0f:bb:6e:b7:b7:8e:
         e8:82:b7:4b:fd:df:47:36:a3:43:62:85:7b:bb:f3:e4:0f:2d:
         dc:93:34:80:3a:1b:65:83:e5:4c:63:fd:b9:e5:40:3a:cb:95:
         8b:e5:27:d2:63:2f:53:8f:8d:10:ea:3f:44:23:0c:60:95:bf:
         40:60:13:c7:36:c0:6b:cd:81:ec:40:f1:ae:4d:14:1b:07:e3:
         b4:61:e0:03:08:7b:17:cd:40:75:bb:1f:8e:ba:64:8b:68:8b:
         f2:1f:9b:60:31:15:fa:81:2f:36:1e:03:2a:89:c8:ce:7d:de:
         ba:2a:e2:92:39:a3:f4:f9:48:62:73:25:7b:13:d5:8f:8e:02:
         02:6e:36:4f:5a:cb:e1:10:66:4f:d4:95:1a:0a:29:c3:09:97:
         7d:08:b8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org