Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36342e302f32312d3234203d3e203631393031.roa
File:                     3139312e352e36342e302f32312d3234203d3e203631393031.roa (raw, json)
Hash identifier:          szRjcqaUube3bS9bTor3ISenBquOA+xQ6wZTygM1zso=
Subject key identifier:   8A:51:07:3B:9C:96:75:41:E6:70:67:F9:AD:B1:06:3C:E0:F6:EC:54
Certificate issuer:       /CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
Certificate serial:       47B9293F99D4A8D542EC4B44A9EF6F14FA332948
Authority key identifier: 67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36342e302f32312d3234203d3e203631393031.roa
Signing time:             Tue 12 Mar 2024 18:13:32 +0000
ROA not before:           Tue 12 Mar 2024 18:08:32 +0000
ROA not after:            Tue 11 Mar 2025 18:13:32 +0000
asID:                     61901
IP address blocks:        191.5.64.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b9:29:3f:99:d4:a8:d5:42:ec:4b:44:a9:ef:6f:14:fa:33:29:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
        Validity
            Not Before: Mar 12 18:08:32 2024 GMT
            Not After : Mar 11 18:13:32 2025 GMT
        Subject: CN=8A51073B9C967541E67067F9ADB1063CE0F6EC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:be:f4:d7:61:3c:6c:a4:95:85:ac:8a:c9:07:
                    42:2d:4b:d5:1c:e3:84:7a:f1:29:22:e4:57:62:c0:
                    64:74:62:24:bf:ce:06:cf:47:e1:14:45:f3:7f:df:
                    a9:86:c1:7c:ff:59:58:f7:c3:b5:fe:68:d1:05:b2:
                    2a:63:14:7c:db:7b:3b:ba:78:d1:6c:33:4f:22:f9:
                    7f:06:6e:ea:10:d0:9b:28:55:99:44:b1:72:5b:32:
                    c6:83:17:13:f1:72:e8:d9:b1:29:dd:c0:97:b3:cd:
                    bc:18:90:44:0c:e9:58:8e:4b:37:87:62:c3:67:56:
                    74:73:f4:10:56:e3:aa:6f:66:67:83:13:50:87:8e:
                    fa:dc:f6:a2:d6:f5:8d:1c:5d:6c:20:7d:3b:07:b8:
                    c7:1e:f3:4d:f6:a1:ce:86:39:79:fd:11:41:a7:20:
                    2d:95:ab:8e:6b:cb:f9:14:30:f6:72:18:30:b6:e8:
                    4f:62:1b:12:eb:84:20:06:54:2e:6c:90:db:19:8c:
                    b9:bf:47:78:fb:fa:ee:86:61:f1:73:0d:8b:e0:dd:
                    cd:45:6d:d1:b1:49:10:8c:33:1f:b2:03:aa:06:b9:
                    80:88:10:01:60:02:c0:04:01:4d:91:14:bb:09:8e:
                    82:1d:24:c4:1f:36:07:c7:83:f4:80:6f:f0:b1:c2:
                    78:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:51:07:3B:9C:96:75:41:E6:70:67:F9:AD:B1:06:3C:E0:F6:EC:54
            X509v3 Authority Key Identifier:
                keyid:67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36342e302f32312d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:9a:b1:6d:5e:9b:5f:e4:0f:f1:cb:b1:94:d0:2c:05:e3:6c:
         9d:7c:45:d3:05:e9:5f:f7:bb:2e:f8:54:ff:2d:06:e1:21:1d:
         b7:76:35:e1:ce:61:6a:59:9f:e3:8b:ef:59:b7:94:e2:08:0b:
         27:be:8f:d5:7a:ad:6c:f3:21:6a:69:40:21:aa:6f:ba:76:5c:
         b4:03:87:72:a8:2b:77:a0:5c:f4:fb:0c:25:d5:06:dc:d1:76:
         83:71:a7:ca:8f:13:ea:e4:c9:77:7d:06:be:fc:23:f0:f8:fa:
         aa:17:39:ba:b0:b2:97:29:43:6c:1b:86:fb:49:b0:67:d7:e4:
         f4:26:23:ba:2d:fe:97:8c:4f:58:cd:12:90:e2:b7:8d:74:e8:
         96:78:fe:7e:1a:a2:54:ac:33:40:d4:bb:c4:3a:76:1c:a8:66:
         e6:54:02:21:ca:a8:b6:1a:69:ba:c3:ef:52:c6:32:84:97:b9:
         7e:0f:b6:55:00:f3:8a:46:63:e3:4f:f6:69:d6:62:53:21:cf:
         b0:0f:e1:2f:8a:ef:72:f6:35:0a:c6:cc:ff:72:cb:a4:03:c4:
         18:6e:66:1b:38:9e:3e:70:8e:44:75:cf:0b:77:ff:77:1b:36:
         3a:43:d1:97:b5:97:ce:2d:91:f1:8a:4a:de:9d:48:72:18:25:
         a8:79:09:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org