Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e342e302f32322d3234203d3e20323633363633.roa
File:                     3139312e3234312e342e302f32322d3234203d3e20323633363633.roa (raw, json)
Hash identifier:          VNJTO/wK/x39+uOXGryLtssMwB2kAN5/qik7YnvxUzM=
Subject key identifier:   13:7D:02:B3:BC:63:7A:37:55:70:17:33:BC:37:0B:37:43:F6:D7:64
Certificate issuer:       /CN=9CC5CFF7E9D168495B51D83F3C355F10409474FF
Certificate serial:       08AD6AD887A91DF5A3284CA9B8BBA40846B00283
Authority key identifier: 9C:C5:CF:F7:E9:D1:68:49:5B:51:D8:3F:3C:35:5F:10:40:94:74:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e342e302f32322d3234203d3e20323633363633.roa
Signing time:             Fri 22 Mar 2024 14:32:01 +0000
ROA not before:           Fri 22 Mar 2024 14:27:01 +0000
ROA not after:            Fri 21 Mar 2025 14:32:01 +0000
asID:                     263663
IP address blocks:        191.241.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ad:6a:d8:87:a9:1d:f5:a3:28:4c:a9:b8:bb:a4:08:46:b0:02:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC5CFF7E9D168495B51D83F3C355F10409474FF
        Validity
            Not Before: Mar 22 14:27:01 2024 GMT
            Not After : Mar 21 14:32:01 2025 GMT
        Subject: CN=137D02B3BC637A3755701733BC370B3743F6D764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:78:69:5b:74:98:ca:dd:72:81:30:86:c9:fe:
                    78:ad:ea:06:1b:a3:28:ac:e7:7b:6d:48:ed:bd:8c:
                    a4:0a:0f:a7:85:bf:90:67:b7:fe:c1:20:cd:44:7f:
                    90:f4:42:dc:58:cc:90:f4:7c:51:25:4f:46:41:53:
                    d0:b1:96:dc:e1:ab:f5:9f:bb:62:3c:b7:bb:12:86:
                    5b:d5:44:38:1a:d9:50:9f:61:6e:d4:60:5b:60:be:
                    87:7e:49:ea:fc:eb:6e:78:0e:25:5d:ea:5e:51:aa:
                    4b:5b:e0:b1:9a:85:c6:17:25:4d:93:9b:1b:45:07:
                    84:36:e6:70:81:6b:9e:92:c1:3c:4d:b8:26:e9:f6:
                    ee:cb:a5:a2:5a:e5:4f:71:82:33:26:04:1c:2a:d3:
                    3f:ca:6a:e8:9a:fd:fd:19:4a:ed:64:ae:0e:06:a5:
                    ed:73:0f:7c:fe:1b:2b:29:10:cc:05:48:8c:6c:a9:
                    e5:2b:99:3a:cb:21:ec:5e:b1:cb:1d:be:65:04:7c:
                    ab:c9:6d:86:18:d2:32:d0:d7:3d:ed:7e:db:fc:14:
                    de:0c:f3:fb:65:a1:11:7c:ee:e4:00:21:96:9f:15:
                    9e:27:92:e2:96:9d:7c:ef:96:fa:f9:0f:c3:ed:98:
                    f8:d4:3e:30:fa:18:63:f4:c7:66:f5:89:c7:26:87:
                    fa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7D:02:B3:BC:63:7A:37:55:70:17:33:BC:37:0B:37:43:F6:D7:64
            X509v3 Authority Key Identifier:
                keyid:9C:C5:CF:F7:E9:D1:68:49:5B:51:D8:3F:3C:35:5F:10:40:94:74:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e342e302f32322d3234203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:7f:87:86:df:e5:12:05:b1:a6:07:55:d8:ae:91:fb:c2:27:
         4e:6f:50:0e:70:68:47:4f:a7:31:64:74:33:45:47:c5:f1:12:
         8b:2a:0a:10:8e:54:96:01:22:07:c0:86:19:bb:ca:f6:a8:0a:
         65:89:53:e0:f5:54:09:6d:ed:92:45:62:35:73:71:bf:d2:17:
         27:f7:a2:1e:69:17:33:80:51:53:25:96:dd:a2:2a:5b:5d:c6:
         b5:b2:28:47:97:86:9d:9b:96:ca:5e:dc:ca:dd:0f:23:39:7c:
         fd:02:1b:c5:d5:57:dc:3b:e5:dd:c3:bd:1e:5b:d9:3c:13:b0:
         ad:c3:1c:d9:9b:0e:71:82:62:df:ba:7a:54:c8:8a:ff:c6:21:
         88:43:23:20:95:a1:3f:93:7f:da:e7:ee:6b:ab:ef:16:74:d7:
         6a:da:1e:d7:c3:71:0a:5a:f2:41:28:86:ab:91:d9:8b:28:e2:
         1a:87:de:0b:bf:08:3e:be:b7:71:0a:d7:1f:29:25:c7:ce:05:
         16:24:81:10:41:68:11:4c:9d:d5:e0:83:7e:28:f0:5a:04:12:
         84:2e:d6:41:fa:90:52:b1:59:7f:97:60:7c:8a:b0:f7:93:42:
         1e:ba:29:6f:c9:b2:67:c8:7e:91:96:bb:01:7d:9d:5e:36:af:
         60:f4:1f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org