Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e392e302f32342d3234203d3e20323633363633.roa
File:                     3139312e3234312e392e302f32342d3234203d3e20323633363633.roa (raw, json)
Hash identifier:          zfsN/K7fTQr8HjvZk+c1b17M4JQ5uqfk4khZTvcJKzE=
Subject key identifier:   D1:AF:86:56:6D:2C:1C:97:0C:E3:A6:D9:22:3A:FE:93:98:70:71:DA
Certificate issuer:       /CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
Certificate serial:       31AB3402167338A7B04FD022297ED320D42B765E
Authority key identifier: 2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e392e302f32342d3234203d3e20323633363633.roa
Signing time:             Mon 04 Mar 2024 16:19:05 +0000
ROA not before:           Mon 04 Mar 2024 16:14:05 +0000
ROA not after:            Mon 03 Mar 2025 16:19:05 +0000
asID:                     263663
IP address blocks:        191.241.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ab:34:02:16:73:38:a7:b0:4f:d0:22:29:7e:d3:20:d4:2b:76:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
        Validity
            Not Before: Mar  4 16:14:05 2024 GMT
            Not After : Mar  3 16:19:05 2025 GMT
        Subject: CN=D1AF86566D2C1C970CE3A6D9223AFE93987071DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:ea:5c:90:09:c1:de:b2:a8:64:e7:ef:dc:
                    ee:5a:6a:06:a5:1a:f3:21:9b:77:a1:fd:89:be:7e:
                    8e:bd:1e:48:24:ab:d5:b4:e2:3d:6f:81:6a:0e:2b:
                    13:0f:e7:66:f4:6c:6a:5c:a8:08:40:a7:36:f4:45:
                    4a:b3:c3:80:ae:61:a1:f3:01:bf:8b:08:d1:f6:c4:
                    7f:c6:c7:01:97:b2:52:0d:32:92:25:00:eb:a2:db:
                    62:49:29:4c:68:8f:c3:fe:7c:f0:86:c5:5f:50:02:
                    72:16:1d:ac:6f:62:3a:13:3f:59:f1:42:15:8e:be:
                    a6:3e:f4:f9:f8:13:0e:b9:65:82:0d:05:5b:48:6f:
                    30:46:a0:23:b7:b1:8a:a1:d4:6f:ee:ce:ce:fc:cb:
                    66:8e:ef:7f:af:06:93:80:d7:ca:db:80:5e:95:e7:
                    e5:4f:4b:6b:2c:9d:0c:3e:90:27:18:93:23:d4:46:
                    2b:07:4c:09:d7:c2:61:25:02:f1:2e:26:16:ca:32:
                    2e:d5:b8:af:34:82:c9:64:dd:d6:6f:20:18:2c:97:
                    fe:55:9e:46:86:d3:fe:c5:eb:c6:69:3d:89:85:29:
                    81:e1:ad:de:e6:e6:40:2a:9c:b2:2a:0b:08:74:53:
                    c0:04:81:86:b9:f7:8a:23:fc:f9:d2:1e:06:49:b5:
                    4b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AF:86:56:6D:2C:1C:97:0C:E3:A6:D9:22:3A:FE:93:98:70:71:DA
            X509v3 Authority Key Identifier:
                keyid:2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e392e302f32342d3234203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:6c:f4:6e:a2:c3:0a:5c:66:9d:81:6b:aa:2c:34:48:fd:50:
         51:4c:7a:b4:fc:08:21:ad:49:e2:c3:65:84:ea:58:e9:76:7d:
         9d:2a:2d:4d:4c:ab:1b:3e:e5:48:30:25:fc:9f:99:52:bd:8f:
         e6:04:0d:37:58:8e:d4:1f:f9:56:07:ee:62:f5:93:05:58:5c:
         fa:e4:4b:25:43:c6:0b:c1:db:12:12:c5:c4:fe:89:2d:2a:ed:
         3a:1d:3c:4f:57:6f:09:72:10:1d:2e:7a:e3:6b:56:92:9c:bf:
         48:cb:6f:3b:d0:9e:bd:ff:e8:3e:4c:2e:eb:db:07:7e:76:fc:
         e2:32:53:d0:90:1c:60:97:36:d3:40:c2:b8:44:82:9b:d0:60:
         21:ba:c2:7d:8e:e2:91:94:5c:f2:15:58:46:6e:26:98:d6:12:
         49:f8:a5:ac:33:31:c8:69:c7:7f:e7:c0:e9:b6:be:c2:01:5c:
         15:c8:16:33:71:2a:30:7b:88:d3:15:08:62:bc:73:ef:7b:8f:
         d0:8e:33:8d:68:0b:3b:8f:ab:20:6d:c0:12:87:e7:21:ec:36:
         36:b3:64:2a:d4:59:aa:bc:ff:e5:99:bb:6b:21:2d:aa:46:57:
         26:37:08:7e:2d:0d:2d:88:c0:64:11:9a:44:f4:e2:f4:b1:d2:
         a1:01:f1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:43 2024 by rpki-client on console-ams.rpki-client.org