Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/3139322e3134312e3130372e302f32342d3234203d3e20323637353335.roa
File:                     3139322e3134312e3130372e302f32342d3234203d3e20323637353335.roa (raw, json)
Hash identifier:          2N0cs+R0VMAG5NaFqdsIok3FTSp5ZCpy/AP4Tz2XdV8=
Subject key identifier:   C4:7F:FE:23:CF:A5:C9:68:30:C8:6A:99:BF:19:D0:B3:12:79:61:9B
Certificate issuer:       /CN=6C02C0A7B20F757D7F8FBC02D2841706802CF35B
Certificate serial:       095168BF83B6611DA5C21C5D9105DFEC578478B8
Authority key identifier: 6C:02:C0:A7:B2:0F:75:7D:7F:8F:BC:02:D2:84:17:06:80:2C:F3:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C02C0A7B20F757D7F8FBC02D2841706802CF35B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/3139322e3134312e3130372e302f32342d3234203d3e20323637353335.roa
Signing time:             Thu 05 Oct 2023 18:51:30 +0000
ROA not before:           Thu 05 Oct 2023 18:46:30 +0000
ROA not after:            Thu 03 Oct 2024 18:51:30 +0000
asID:                     267535
IP address blocks:        192.141.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:51:68:bf:83:b6:61:1d:a5:c2:1c:5d:91:05:df:ec:57:84:78:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C02C0A7B20F757D7F8FBC02D2841706802CF35B
        Validity
            Not Before: Oct  5 18:46:30 2023 GMT
            Not After : Oct  3 18:51:30 2024 GMT
        Subject: CN=C47FFE23CFA5C96830C86A99BF19D0B31279619B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e7:6d:dc:3f:e7:43:52:bd:c9:dc:4d:05:2d:
                    e7:37:48:11:35:36:b6:26:78:af:94:10:be:7c:68:
                    1d:be:61:5e:6c:bd:59:a8:ed:82:b3:f2:56:e0:0d:
                    f8:71:f7:93:8b:96:7f:a1:5b:bb:ae:d9:66:e5:b3:
                    65:88:27:d4:5d:61:57:cc:e4:2f:a8:e4:98:c1:8c:
                    fc:96:ad:88:1a:d5:de:cd:56:a9:b6:2d:00:ee:49:
                    7c:84:1c:2a:86:d1:d3:60:b1:d0:14:af:e4:91:54:
                    7e:71:77:f8:e5:e8:dd:5c:76:a9:b7:b8:99:8a:4f:
                    9b:d0:92:ac:57:69:ac:4a:8a:9d:67:78:a7:22:43:
                    a3:47:48:20:e1:22:a3:fa:3c:2f:28:32:d4:36:9e:
                    95:37:a4:76:68:29:98:ad:be:ed:9b:08:9f:0d:33:
                    dd:e8:e6:be:c5:3d:08:68:b3:39:81:f7:c9:41:64:
                    6e:19:50:3a:7c:15:6b:53:c0:24:92:68:d3:f9:f5:
                    87:c0:8d:92:c0:8a:d0:72:9f:33:cd:35:2e:14:44:
                    45:90:c0:da:85:2c:c9:bb:92:9b:f9:e7:22:7e:64:
                    61:f8:7a:90:72:d4:74:57:a7:1e:45:cf:27:74:37:
                    35:99:27:7c:cf:25:a9:a2:c7:57:5e:9e:06:61:ee:
                    d3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7F:FE:23:CF:A5:C9:68:30:C8:6A:99:BF:19:D0:B3:12:79:61:9B
            X509v3 Authority Key Identifier:
                keyid:6C:02:C0:A7:B2:0F:75:7D:7F:8F:BC:02:D2:84:17:06:80:2C:F3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/6C02C0A7B20F757D7F8FBC02D2841706802CF35B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C02C0A7B20F757D7F8FBC02D2841706802CF35B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/3139322e3134312e3130372e302f32342d3234203d3e20323637353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:9d:3d:d6:73:2b:fb:e7:db:6d:79:e0:71:f2:0c:35:73:3c:
         63:da:23:d5:98:7c:25:ee:bb:b3:af:0e:69:ad:1d:46:ac:e7:
         d0:65:bd:81:1d:5d:47:76:63:c6:25:16:20:27:66:3c:24:fa:
         c2:8d:84:fe:8b:25:27:3b:44:a1:6b:91:a2:a1:e3:45:9d:b1:
         2b:bc:01:9b:a6:55:02:cc:b5:28:9c:be:de:b8:be:1a:33:69:
         ee:37:64:c1:a7:3d:c2:54:23:76:3e:fc:28:e8:3e:9b:bf:8c:
         46:76:91:28:4d:8d:d6:8d:62:55:a2:a7:c6:a8:54:cf:82:5d:
         15:79:2c:43:b6:57:c9:e0:49:82:f6:72:e2:ff:e9:33:62:23:
         4d:a0:0e:bf:4b:0f:2d:e8:4f:62:33:79:ed:dc:2c:34:e1:75:
         6a:18:39:79:20:68:15:85:cb:6e:0b:ec:77:4d:06:85:a3:47:
         e0:db:63:fc:a2:3d:22:93:6f:bf:8f:63:0e:44:c1:95:9c:09:
         a3:53:43:bc:5c:73:17:a3:af:4b:f3:e6:db:42:ba:29:2c:ff:
         dd:b0:05:57:6c:66:18:77:bf:af:08:6a:eb:99:2d:f6:13:70:
         a5:f3:7c:b5:6b:cd:22:e6:59:02:eb:90:8b:b9:90:ef:79:27:
         ec:79:89:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org