Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230342e302f32342d3234203d3e20323636323432.roa
File:                     3139322e3134352e3230342e302f32342d3234203d3e20323636323432.roa (raw, json)
Hash identifier:          +tQbn8adQy9IBrmNFFX2M9DWr1HjWH/28s2h59p/ixc=
Subject key identifier:   EF:62:3D:D2:AD:97:C6:AB:50:9F:99:24:81:8D:8A:8E:6C:D8:46:AF
Certificate issuer:       /CN=1547EB99992D867A7DC9C9932309620DED3EB049
Certificate serial:       5F6C02531FBBED35EE182F6389A8E358D029652A
Authority key identifier: 15:47:EB:99:99:2D:86:7A:7D:C9:C9:93:23:09:62:0D:ED:3E:B0:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1547EB99992D867A7DC9C9932309620DED3EB049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230342e302f32342d3234203d3e20323636323432.roa
Signing time:             Fri 22 Mar 2024 13:07:57 +0000
ROA not before:           Fri 22 Mar 2024 13:02:57 +0000
ROA not after:            Fri 21 Mar 2025 13:07:57 +0000
asID:                     266242
IP address blocks:        192.145.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6c:02:53:1f:bb:ed:35:ee:18:2f:63:89:a8:e3:58:d0:29:65:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1547EB99992D867A7DC9C9932309620DED3EB049
        Validity
            Not Before: Mar 22 13:02:57 2024 GMT
            Not After : Mar 21 13:07:57 2025 GMT
        Subject: CN=EF623DD2AD97C6AB509F9924818D8A8E6CD846AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:05:eb:75:75:84:be:be:5c:21:0c:04:f4:d5:
                    62:cf:fb:32:b4:70:88:6b:77:fa:cb:62:70:7a:88:
                    b8:60:2d:8f:88:8a:dc:25:01:8c:df:82:f7:fd:98:
                    14:b2:83:fd:13:23:e5:cc:68:3c:fe:bf:45:9a:83:
                    58:0a:5d:8c:3f:bd:4d:00:bc:ec:9d:7e:1f:1b:da:
                    db:59:a5:9e:26:8c:12:20:6a:bf:95:32:e8:06:b6:
                    a3:9e:4c:22:e3:25:b2:a2:6d:e8:92:a6:11:05:70:
                    0b:cc:77:1c:23:dd:0f:f2:ff:ff:9c:17:a9:89:97:
                    35:ad:8c:3b:54:83:a2:8d:23:a7:de:66:b0:db:fd:
                    3e:9d:e8:29:34:57:13:67:b4:f4:c0:a8:ff:db:a0:
                    30:8c:1d:6b:bb:32:28:7f:ed:77:e3:d7:3d:d1:a6:
                    a0:df:84:5b:a5:de:e6:f0:a4:d5:52:51:a5:a7:b0:
                    10:6c:69:e6:fb:c8:09:02:bb:fe:57:39:1e:3e:3c:
                    df:bd:5f:c1:88:51:e1:67:14:27:e3:67:b2:15:31:
                    39:86:4b:70:c6:ed:c0:03:c3:7a:99:31:d5:f9:23:
                    62:da:e9:95:88:7f:e9:0c:74:92:5d:6c:dd:e0:06:
                    7f:a1:3f:8e:fd:29:c1:50:1b:35:9b:64:57:6a:bd:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:62:3D:D2:AD:97:C6:AB:50:9F:99:24:81:8D:8A:8E:6C:D8:46:AF
            X509v3 Authority Key Identifier:
                keyid:15:47:EB:99:99:2D:86:7A:7D:C9:C9:93:23:09:62:0D:ED:3E:B0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/1547EB99992D867A7DC9C9932309620DED3EB049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1547EB99992D867A7DC9C9932309620DED3EB049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230342e302f32342d3234203d3e20323636323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d4:23:27:da:8e:19:31:32:de:5b:7f:2f:f4:bc:29:9e:0f:
         b9:c4:81:87:e4:fc:e5:5b:25:ab:0c:45:9e:68:99:d0:88:ab:
         e4:18:59:62:22:7b:98:f2:6c:e4:13:a3:ed:f0:b0:e7:c2:11:
         eb:25:99:7c:95:ef:aa:e5:a3:38:9a:1f:e2:3e:47:55:f2:39:
         e9:69:6b:b3:1f:1d:78:11:4a:b5:ab:51:e2:ee:24:97:51:41:
         65:45:d6:27:a1:5d:03:9b:c7:4e:f7:f5:05:1b:c0:9c:4e:92:
         6c:0b:24:26:ab:06:f1:86:a8:19:1f:ba:e8:d8:52:81:b0:1c:
         32:e7:a6:b0:44:35:33:aa:99:8d:87:bf:b2:e6:3e:99:82:66:
         2b:5b:ee:0c:ee:93:b1:9a:72:a9:a0:cf:7c:db:78:9d:be:ef:
         db:d1:e8:eb:39:07:37:05:64:c4:65:db:37:5e:69:1c:a2:32:
         19:d6:c4:83:f7:98:de:92:a2:06:b5:69:78:fc:82:22:94:76:
         83:c0:fe:57:c6:24:90:64:69:1e:03:4b:73:1d:64:4b:2b:69:
         ec:c3:b9:81:bd:cd:66:4f:d0:dd:f3:30:8a:35:b1:99:b4:4b:
         a9:3e:02:94:d3:d2:02:79:8e:86:ad:82:e2:e9:e0:ff:cb:8c:
         b3:4b:fb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org