Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/0/3139312e3234312e32342e302f32312d3234203d3e20323633363634.roa
File:                     3139312e3234312e32342e302f32312d3234203d3e20323633363634.roa (raw, json)
Hash identifier:          tYRwLjoipUBxNPrxudHn78zOJGq88oS/Juw34ZNOw3A=
Subject key identifier:   63:69:2C:DC:CC:17:9D:70:7C:07:74:E2:BE:79:27:D4:36:8A:47:83
Certificate issuer:       /CN=05680EA0254541FC6249862796FD1041B82C3ED8
Certificate serial:       2A3ED31FF75FBCDFBDB52C19FC619BF2D3448A2C
Authority key identifier: 05:68:0E:A0:25:45:41:FC:62:49:86:27:96:FD:10:41:B8:2C:3E:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/05680EA0254541FC6249862796FD1041B82C3ED8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/0/3139312e3234312e32342e302f32312d3234203d3e20323633363634.roa
Signing time:             Fri 12 Jan 2024 12:44:21 +0000
ROA not before:           Fri 12 Jan 2024 12:39:21 +0000
ROA not after:            Fri 10 Jan 2025 12:44:21 +0000
asID:                     263664
IP address blocks:        191.241.24.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3e:d3:1f:f7:5f:bc:df:bd:b5:2c:19:fc:61:9b:f2:d3:44:8a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05680EA0254541FC6249862796FD1041B82C3ED8
        Validity
            Not Before: Jan 12 12:39:21 2024 GMT
            Not After : Jan 10 12:44:21 2025 GMT
        Subject: CN=63692CDCCC179D707C0774E2BE7927D4368A4783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:6b:d2:f0:90:3d:0e:13:74:64:9f:93:92:
                    ed:f8:7f:c9:ab:d2:31:55:a3:e1:a0:a5:5a:92:8d:
                    65:be:60:cf:89:39:02:86:62:13:0d:a8:ec:57:6f:
                    9f:72:41:02:c6:38:1d:3b:fb:8b:50:2a:aa:3a:fe:
                    83:84:93:22:db:52:7c:a5:5d:8a:47:6e:00:2e:41:
                    86:68:1a:ef:fd:12:16:49:a9:6d:b0:9b:55:c8:99:
                    33:bc:9d:5d:b9:54:48:08:9f:cd:f7:dd:40:24:bf:
                    be:13:d4:36:81:4d:c2:e1:ed:33:1c:aa:99:d3:85:
                    a5:28:39:e2:7b:af:44:32:10:af:22:7f:ae:95:ad:
                    fc:81:5c:21:af:2b:63:ac:95:f2:f4:9b:c7:91:13:
                    77:30:ae:6f:5e:be:87:36:22:e7:e1:49:89:25:4c:
                    59:17:45:89:61:78:db:a4:f7:7c:a5:72:9d:db:3a:
                    ec:d7:47:96:7b:41:fc:1b:dc:54:26:9b:d5:a6:8b:
                    07:85:ca:b2:dc:52:6d:67:4d:50:66:e4:b9:dd:1c:
                    65:7d:9a:b8:e3:70:db:83:b4:91:18:91:79:ea:6e:
                    6d:36:0f:e9:6a:2a:66:df:9b:5b:05:c1:60:14:c6:
                    03:c2:c8:4d:1f:40:56:19:32:b5:77:b2:9e:bf:66:
                    49:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:69:2C:DC:CC:17:9D:70:7C:07:74:E2:BE:79:27:D4:36:8A:47:83
            X509v3 Authority Key Identifier:
                keyid:05:68:0E:A0:25:45:41:FC:62:49:86:27:96:FD:10:41:B8:2C:3E:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/0/05680EA0254541FC6249862796FD1041B82C3ED8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/05680EA0254541FC6249862796FD1041B82C3ED8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/0/3139312e3234312e32342e302f32312d3234203d3e20323633363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:b5:b1:bb:fb:3e:e7:64:39:72:67:45:14:72:73:ab:15:55:
         7c:a8:c2:82:30:c6:3a:16:0f:9b:5f:a5:40:53:11:d8:a0:21:
         a7:d8:6a:66:ab:fa:be:99:8d:22:85:90:0b:21:a9:36:4f:63:
         7b:39:e8:c7:9c:74:41:bb:f5:8f:5e:a9:95:86:d7:73:f8:bc:
         95:6f:a9:84:5e:84:35:a4:0b:15:d4:95:2c:9e:01:86:a3:b7:
         fd:5f:d6:f6:ac:26:cc:4c:83:0e:d4:2c:21:24:32:2f:80:b3:
         78:f2:53:e1:f8:2b:48:05:56:49:8c:c3:70:59:b1:50:20:09:
         4a:51:d0:6d:c8:be:1d:34:33:ef:cd:6e:72:a6:60:d3:29:c2:
         ea:94:62:df:ee:b0:a6:6d:6e:f4:61:71:53:7e:bb:d4:ab:7c:
         25:9a:c2:bb:6e:c9:95:72:e2:21:7b:56:b4:89:5e:93:f1:a6:
         c3:e3:23:6e:b1:3a:a4:1d:77:c7:e5:a9:5a:1e:e4:f6:c1:7c:
         03:fa:cd:ee:55:fd:44:8c:90:ef:1c:43:7d:65:6b:b1:e1:92:
         4d:f7:85:f4:e4:aa:e6:f1:fe:b7:3f:7d:43:77:f3:05:7c:1d:
         82:d1:cb:a8:ff:7b:07:4a:d2:1c:f6:95:8d:31:4e:a2:bc:b4:
         62:f7:c4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org