Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3137362e302f32302d3230203d3e20323633353039.roa
File:                     3139312e3234332e3137362e302f32302d3230203d3e20323633353039.roa (raw, json)
Hash identifier:          vfGcG45tL/dodpdxqj5l0mvsjQUeZXOuB3fvGKtnMXw=
Subject key identifier:   A4:CB:29:F3:B3:21:4B:84:13:15:A8:07:E6:D9:56:E6:FC:D7:B6:03
Certificate issuer:       /CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
Certificate serial:       473B899BA05AA522BC2278FAA59869D9A311825D
Authority key identifier: D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3137362e302f32302d3230203d3e20323633353039.roa
Signing time:             Sun 15 Oct 2023 06:35:00 +0000
ROA not before:           Sun 15 Oct 2023 06:30:00 +0000
ROA not after:            Sun 13 Oct 2024 06:35:00 +0000
asID:                     263509
IP address blocks:        191.243.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3b:89:9b:a0:5a:a5:22:bc:22:78:fa:a5:98:69:d9:a3:11:82:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
        Validity
            Not Before: Oct 15 06:30:00 2023 GMT
            Not After : Oct 13 06:35:00 2024 GMT
        Subject: CN=A4CB29F3B3214B841315A807E6D956E6FCD7B603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:62:dc:a6:dc:69:dc:9e:4e:a1:98:66:82:
                    ac:30:fc:54:60:a9:fc:42:d9:d4:0a:36:18:6f:68:
                    be:fd:91:0c:b6:42:66:c7:1c:04:0f:9d:de:f8:01:
                    65:77:7d:4a:3c:d8:43:8a:d1:a5:8d:6f:15:a2:0b:
                    f6:8b:ca:3e:cf:c2:95:4a:07:69:4c:b4:66:4b:9c:
                    57:48:00:fe:19:eb:35:61:83:7c:b8:e1:05:34:ea:
                    43:0d:dc:dc:d4:d0:1b:c9:82:7a:35:ea:7f:83:84:
                    33:46:4f:c9:a0:e9:31:0c:ba:5c:30:84:fa:5e:1d:
                    54:31:9c:a7:6a:e1:c4:62:e4:97:12:d8:9f:6e:e6:
                    dd:0b:3b:b6:7c:46:2f:0b:6c:ac:b5:2f:ec:95:85:
                    c6:10:bb:7b:f1:f6:25:2b:aa:1b:67:9a:1a:3f:52:
                    92:09:54:12:2b:d0:b9:be:d9:95:4c:da:22:db:89:
                    79:f9:0f:46:9c:bb:ae:8d:75:eb:08:76:fd:c4:6f:
                    17:b9:22:e8:df:4a:f5:8b:9e:c4:80:da:f3:6c:fd:
                    1e:e5:3d:db:b0:7f:7c:ef:19:88:67:85:68:33:b7:
                    c0:45:94:99:93:58:bd:56:2a:9e:bd:c0:d5:bd:8b:
                    4b:79:ba:95:5b:1b:5c:27:09:4e:15:90:2b:2d:43:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CB:29:F3:B3:21:4B:84:13:15:A8:07:E6:D9:56:E6:FC:D7:B6:03
            X509v3 Authority Key Identifier:
                keyid:D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3137362e302f32302d3230203d3e20323633353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         20:15:6b:0e:04:d1:9d:19:e6:dc:2c:8d:19:27:62:ed:7d:1b:
         65:97:1f:e2:8e:91:f4:21:4d:7f:aa:67:ae:01:5a:ec:fc:09:
         cd:01:18:cf:52:2b:20:b3:a8:f3:6a:81:7c:5f:39:83:b4:0f:
         97:f9:30:aa:4e:98:6d:19:e9:4f:b8:a0:5a:e4:11:40:82:f3:
         2b:70:6f:85:f3:b6:ea:cc:77:57:7b:a3:02:89:f1:98:41:1c:
         69:3d:d1:37:ac:e6:71:b8:49:ca:2b:31:23:ac:43:94:08:48:
         5d:1d:29:25:87:40:07:df:df:9a:21:66:9f:02:42:c7:71:e0:
         b7:20:31:44:d1:ed:f2:e7:24:81:54:86:07:58:d6:bb:07:86:
         7c:b4:b4:a2:25:4c:2d:1e:dd:83:b4:e2:e2:be:c6:02:31:2d:
         5d:8e:bd:b8:50:e5:44:4b:a4:4a:61:10:11:0c:89:6b:9f:d7:
         14:e8:7b:90:3d:64:ea:4d:ba:b0:82:2a:41:b5:92:8a:31:d4:
         94:9e:56:b3:f8:b7:cc:83:58:c3:35:93:a2:44:af:ef:7c:83:
         06:c3:3a:13:ae:98:ee:42:e2:2c:e8:17:0b:52:93:2a:27:ca:
         70:ab:f4:58:f4:ed:ff:26:13:e1:40:53:c8:17:c7:47:b7:a5:
         e8:19:36:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org