Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3139312e3234312e3232342e302f31392d3234203d3e203238363639.roa
File:                     3139312e3234312e3232342e302f31392d3234203d3e203238363639.roa (raw, json)
Hash identifier:          BgKCP3aa5FX9Ds67aHzV3THYBQ4nFqgC48XmQpQEeQU=
Subject key identifier:   3A:5E:2D:C3:58:FE:4E:BA:66:75:67:47:94:84:2F:24:9A:D1:AC:C0
Certificate issuer:       /CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Certificate serial:       7B08AB44FBB751A59AA6054225E3A9999516A42D
Authority key identifier: B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3139312e3234312e3232342e302f31392d3234203d3e203238363639.roa
Signing time:             Fri 03 May 2024 19:44:33 +0000
ROA not before:           Fri 03 May 2024 19:39:33 +0000
ROA not after:            Fri 02 May 2025 19:44:33 +0000
asID:                     28669
IP address blocks:        191.241.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:08:ab:44:fb:b7:51:a5:9a:a6:05:42:25:e3:a9:99:95:16:a4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
        Validity
            Not Before: May  3 19:39:33 2024 GMT
            Not After : May  2 19:44:33 2025 GMT
        Subject: CN=3A5E2DC358FE4EBA6675674794842F249AD1ACC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e6:b6:d8:a0:36:78:04:4d:96:97:b0:92:9c:
                    35:b1:ea:95:9f:b8:0d:c8:81:f6:2d:f5:93:cc:bf:
                    d6:eb:d6:fe:b4:1a:82:35:91:62:c6:fa:36:ae:78:
                    96:71:40:f0:77:6c:d5:fb:3e:f6:1e:79:6a:42:a5:
                    8f:18:fe:8a:d7:b2:79:cb:94:3d:45:0d:58:38:22:
                    9b:2b:50:66:9c:45:ec:8c:0b:80:e6:3c:2c:74:24:
                    9d:4b:28:e5:c8:53:c2:32:48:df:bf:9b:45:5b:26:
                    ad:df:ab:12:1a:42:ac:83:8b:d2:e7:60:bf:8d:fc:
                    b8:17:17:28:f1:16:86:7a:69:1c:60:f5:35:00:89:
                    e3:a5:aa:c9:45:fa:c8:fd:9e:b5:98:b8:c5:3b:a0:
                    b5:c8:1a:a5:54:95:e3:2b:8c:44:29:d7:4f:e9:85:
                    f4:fe:db:6b:3e:4a:5c:15:3c:f6:89:c7:4b:b9:9a:
                    a1:f7:73:d1:ff:e5:49:ae:8d:97:b6:7c:e6:85:5b:
                    f5:63:4d:55:c4:25:26:c9:c7:79:46:ac:68:05:af:
                    fc:0e:74:2e:49:ce:95:04:b0:53:54:61:93:0a:f4:
                    42:a7:66:89:16:b6:69:b3:3e:77:d6:fa:6f:8f:62:
                    27:12:e5:20:03:7a:26:97:15:c1:cc:5f:92:ff:4e:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5E:2D:C3:58:FE:4E:BA:66:75:67:47:94:84:2F:24:9A:D1:AC:C0
            X509v3 Authority Key Identifier:
                keyid:B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3139312e3234312e3232342e302f31392d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:ac:a5:42:a8:8a:50:43:1b:e3:90:c7:b0:b7:6f:5b:9a:ce:
         ec:a8:a7:d6:6b:d3:af:6f:07:96:c8:4d:67:5b:ed:40:17:b5:
         d8:83:19:94:d6:2e:14:66:b3:9a:51:8a:b7:cf:11:87:80:76:
         f1:e7:5d:53:db:3a:64:9c:66:0e:89:b3:31:d1:1e:66:10:7e:
         4a:4b:09:f4:6e:72:7f:04:22:4e:44:b9:6a:15:be:e8:12:34:
         4b:ed:1f:20:bb:0b:f4:a4:63:0b:cc:4e:b4:e4:50:0e:f9:ab:
         68:71:20:34:09:77:22:00:ba:62:77:3f:8e:3b:45:ac:d6:3a:
         e9:f4:29:ff:3f:cb:02:59:dd:02:a7:4d:e8:47:52:db:a3:10:
         68:23:02:68:9b:a3:f3:85:b6:c3:91:a4:50:99:58:0a:23:73:
         96:d8:c3:bf:41:95:b9:6d:0a:02:4d:a7:e4:81:ec:ee:2c:1d:
         6c:04:10:a1:e6:13:13:fa:3d:84:57:3e:de:48:6b:86:ba:f9:
         2a:49:17:3b:17:b6:22:b8:1d:9e:b9:2d:e9:61:29:15:e2:7a:
         e6:76:95:a7:e3:37:d1:96:9a:ca:f3:c1:5d:a4:b2:22:9d:be:
         33:63:c2:ed:14:21:39:8f:fa:71:5b:27:8c:86:19:93:82:a3:
         f9:71:9d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org