Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38302e302f32342d3234203d3e20323730393732.roa
File:                     3139312e33372e38302e302f32342d3234203d3e20323730393732.roa (raw, json)
Hash identifier:          UlyETMRuXK4TyDKmBCdlnx7xIDuuea92aWVBNc8LLlE=
Subject key identifier:   C0:AA:80:47:B4:1F:E2:D2:6F:A0:F1:78:B2:49:3A:29:E2:54:50:46
Certificate issuer:       /CN=5C4CF16B8DA3EAC53AC14CF5F617C97602F3CC39
Certificate serial:       0B2A5270E25C269272B27118C54D3DB3C07712D7
Authority key identifier: 5C:4C:F1:6B:8D:A3:EA:C5:3A:C1:4C:F5:F6:17:C9:76:02:F3:CC:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C4CF16B8DA3EAC53AC14CF5F617C97602F3CC39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38302e302f32342d3234203d3e20323730393732.roa
Signing time:             Wed 26 Jul 2023 23:11:23 +0000
ROA not before:           Wed 26 Jul 2023 23:06:23 +0000
ROA not after:            Wed 24 Jul 2024 23:11:23 +0000
asID:                     270972
IP address blocks:        191.37.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2a:52:70:e2:5c:26:92:72:b2:71:18:c5:4d:3d:b3:c0:77:12:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C4CF16B8DA3EAC53AC14CF5F617C97602F3CC39
        Validity
            Not Before: Jul 26 23:06:23 2023 GMT
            Not After : Jul 24 23:11:23 2024 GMT
        Subject: CN=C0AA8047B41FE2D26FA0F178B2493A29E2545046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:21:77:9e:67:d1:bb:7d:38:6d:48:28:fc:
                    3a:40:eb:18:26:51:09:ce:88:43:c0:5e:0f:18:ab:
                    4e:03:2b:aa:dd:6c:5a:05:af:22:1d:b5:74:a0:52:
                    fb:d7:dd:f5:a5:b9:ab:1c:f4:f3:24:59:91:0e:01:
                    c5:14:19:cc:a1:72:29:bd:ef:c8:e7:67:7c:e5:99:
                    d7:19:74:f3:65:dc:b7:a6:af:d6:6f:d6:09:60:b8:
                    91:e2:58:e5:80:1b:eb:a4:b6:24:7f:cc:84:9d:60:
                    f5:07:b4:cf:c2:92:65:69:f0:c1:06:41:bf:0d:cd:
                    01:cf:26:2b:b3:28:e5:86:fc:b7:d0:1b:65:c1:9a:
                    e7:26:88:32:3b:4c:7f:20:93:56:fe:da:67:2d:07:
                    de:dc:cb:85:ed:03:91:e7:ba:65:6a:ef:7b:a5:13:
                    87:22:30:95:ec:c0:21:37:ef:f1:c8:8a:37:57:d1:
                    77:a8:01:3b:01:35:f9:88:d0:34:1e:f6:cc:78:03:
                    b9:ee:55:e2:bb:8a:3d:95:03:47:8b:69:4d:dd:7c:
                    d7:0b:cb:6d:d9:5e:8b:19:33:cb:78:70:eb:45:e2:
                    49:b8:9a:d1:b8:9d:2c:ef:55:16:96:b5:59:15:7b:
                    a6:31:46:f0:05:ee:03:6f:a6:13:a0:f4:7b:43:58:
                    38:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AA:80:47:B4:1F:E2:D2:6F:A0:F1:78:B2:49:3A:29:E2:54:50:46
            X509v3 Authority Key Identifier:
                keyid:5C:4C:F1:6B:8D:A3:EA:C5:3A:C1:4C:F5:F6:17:C9:76:02:F3:CC:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/5C4CF16B8DA3EAC53AC14CF5F617C97602F3CC39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C4CF16B8DA3EAC53AC14CF5F617C97602F3CC39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38302e302f32342d3234203d3e20323730393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:ba:a9:bb:3b:08:3b:04:2d:66:1c:6e:a7:4b:20:c9:05:a4:
         02:3a:12:30:f5:75:3d:9d:5d:ee:55:4a:34:73:62:d5:02:b4:
         9c:03:e6:dd:65:f1:1d:db:73:b7:7b:ad:6e:19:51:a1:5c:e3:
         ba:38:43:3e:87:a3:be:92:7d:4f:38:73:58:c9:a5:9c:c1:59:
         a5:99:56:b9:a5:aa:72:51:c5:35:01:74:7c:b2:1c:f6:bd:0d:
         53:aa:6f:e1:01:c4:b8:35:ca:24:d0:39:e8:1f:74:5c:7b:a8:
         70:26:31:ab:0b:f7:a0:d5:37:fd:45:98:38:5b:6a:87:7c:19:
         5b:e3:3d:59:4e:5b:ce:78:fd:d0:d6:d1:5a:14:bd:f9:e3:b2:
         ec:f0:af:b6:c2:21:b7:66:0a:10:df:51:b0:ce:e3:8e:fc:56:
         2c:40:75:20:38:64:6c:a9:41:5b:fb:fc:0f:08:33:11:c0:1e:
         ca:d1:90:eb:fc:bd:f8:e5:5c:db:d5:bc:7f:17:fe:88:d3:e7:
         f9:93:ff:95:b8:31:8a:a2:44:25:db:44:c5:1c:87:a4:48:f3:
         c4:a2:e7:c3:e0:4a:36:3f:28:53:64:39:e3:78:ce:71:54:f5:
         e4:7a:8d:53:ac:95:7d:6a:1c:ce:4e:87:da:e4:28:49:84:a6:
         2a:85:2d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org