Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3137362e302f32302d3234203d3e20323633353039.roa
File:                     3139312e3234332e3137362e302f32302d3234203d3e20323633353039.roa (raw, json)
Hash identifier:          pTHj7bOxkA4FQtmZObuJAk4W5jR7MPubdvJWeVdXXPg=
Subject key identifier:   0C:D7:8B:52:0C:35:C9:39:E9:E8:C5:23:99:B0:A5:26:40:94:01:2B
Certificate issuer:       /CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
Certificate serial:       65E66751D8CD4E29E8BA163C2D1B818AC69C1A85
Authority key identifier: D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3137362e302f32302d3234203d3e20323633353039.roa
Signing time:             Fri 06 Oct 2023 21:46:46 +0000
ROA not before:           Fri 06 Oct 2023 21:41:46 +0000
ROA not after:            Fri 04 Oct 2024 21:46:46 +0000
asID:                     263509
IP address blocks:        191.243.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e6:67:51:d8:cd:4e:29:e8:ba:16:3c:2d:1b:81:8a:c6:9c:1a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
        Validity
            Not Before: Oct  6 21:41:46 2023 GMT
            Not After : Oct  4 21:46:46 2024 GMT
        Subject: CN=0CD78B520C35C939E9E8C52399B0A5264094012B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:65:c2:e5:6e:9f:8b:ca:93:94:da:3d:d1:ed:
                    a3:e9:b6:14:e7:54:4b:18:97:20:63:ee:15:95:f7:
                    e3:9b:38:56:3f:bc:eb:a9:6e:4d:70:60:c7:c3:0b:
                    35:14:e3:90:79:97:3f:26:b8:70:a2:c9:4f:3c:8f:
                    cd:5c:bf:76:c9:59:db:51:ac:69:b5:ca:37:16:04:
                    be:1d:58:fc:6b:d0:fe:48:b5:b0:8b:d5:ab:68:b3:
                    c8:ec:b6:24:24:13:90:14:2d:53:15:af:db:1f:26:
                    41:35:ac:2a:a5:72:72:a7:68:08:75:98:fc:8c:70:
                    e9:78:77:2e:55:72:93:66:fa:96:e9:88:fb:4e:bc:
                    8b:45:e7:ca:e0:0d:b3:2c:a9:37:e4:f2:6d:fa:5b:
                    9e:5a:38:58:8c:70:7e:3e:81:54:fa:28:ac:d5:52:
                    fd:d8:84:8d:bf:43:ef:f2:f9:78:d5:34:4f:6a:54:
                    97:d3:6f:28:37:22:45:c7:5f:bf:5e:c9:6c:67:e5:
                    4c:f3:44:52:5a:84:f6:a1:8e:ae:b1:c8:15:1c:ec:
                    4e:b7:32:8a:0d:f0:2a:d2:e7:3b:82:db:1a:65:b0:
                    6c:61:6c:d9:7e:1d:9e:6d:5f:29:7f:1d:fd:ae:80:
                    cf:fc:03:c0:a8:6a:d4:43:2d:90:11:fa:08:a4:34:
                    97:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D7:8B:52:0C:35:C9:39:E9:E8:C5:23:99:B0:A5:26:40:94:01:2B
            X509v3 Authority Key Identifier:
                keyid:D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3137362e302f32302d3234203d3e20323633353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:24:d0:1c:39:cf:ca:ab:15:24:ab:5f:56:d2:19:5b:47:8b:
         f6:57:8a:e1:8d:1b:78:de:99:61:94:60:3e:6f:d0:71:ec:c6:
         87:08:1d:2d:5a:fa:a1:a5:23:fd:56:a7:17:2e:f9:5f:f2:db:
         71:32:68:59:02:a0:27:89:10:4e:f6:6a:7d:62:65:f4:0a:4e:
         94:36:5c:cd:27:a9:3c:7d:56:02:7f:30:cb:fe:e1:54:f3:a4:
         6a:da:23:ca:84:23:7c:b2:40:42:1c:55:38:1b:f6:98:30:72:
         83:92:08:ef:e4:c1:01:eb:69:5d:52:b5:08:44:a5:64:93:a2:
         81:50:0e:d1:a1:e3:58:14:e8:09:7a:ec:59:90:29:1b:13:36:
         90:ba:ed:71:ef:70:f7:07:dc:a0:7d:53:71:d6:f0:11:e5:85:
         80:42:23:f2:0b:49:95:e8:bf:1b:53:11:d9:96:84:a3:af:48:
         39:67:c1:53:1f:33:19:5f:c1:c7:bf:35:73:a8:bb:e6:91:10:
         0f:29:eb:f9:47:75:2a:17:65:c9:81:97:b6:0d:0a:cb:9f:7f:
         2f:1c:37:29:4b:4b:79:54:fd:c3:b9:84:a9:4d:8d:6a:0f:00:
         90:d9:99:b3:f1:c8:3d:a0:c3:36:3a:02:bb:9f:f0:85:e1:61:
         c2:69:22:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org