Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa
File:                     3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa (raw, json)
Hash identifier:          7PVKNDnbuT1ikyEzPi9e2F8IBEyA9IK3DNAZMUauCik=
Subject key identifier:   82:09:DF:AA:7A:FB:4A:95:66:38:41:2E:16:29:E4:E2:96:92:D0:AB
Certificate issuer:       /CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Certificate serial:       76ED25C810EEF10BE8A99AB6FA2A6F6815995112
Authority key identifier: 9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa
Signing time:             Fri 03 May 2024 20:11:09 +0000
ROA not before:           Fri 03 May 2024 20:06:09 +0000
ROA not after:            Fri 02 May 2025 20:11:09 +0000
asID:                     28667
IP address blocks:        191.242.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ed:25:c8:10:ee:f1:0b:e8:a9:9a:b6:fa:2a:6f:68:15:99:51:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
        Validity
            Not Before: May  3 20:06:09 2024 GMT
            Not After : May  2 20:11:09 2025 GMT
        Subject: CN=8209DFAA7AFB4A956638412E1629E4E29692D0AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:66:96:a6:59:50:58:43:cb:1b:43:8b:19:43:
                    ab:8e:66:f7:ac:24:cf:cc:99:66:cd:25:fa:54:d5:
                    21:e1:e2:e3:93:1a:cc:49:50:b9:ef:12:77:d9:1c:
                    42:ae:32:5b:90:96:dc:d1:47:2b:f0:28:8e:7b:05:
                    ae:00:c1:91:ac:c2:d1:22:08:74:1f:05:28:18:d3:
                    4c:93:21:71:0e:a5:80:7e:0f:b3:f1:f4:37:41:bb:
                    11:57:05:6b:cd:c1:06:2f:7b:ea:f6:7f:4e:61:53:
                    b4:5b:30:68:d4:48:17:9a:57:1f:65:cc:5e:7d:ff:
                    d5:a0:3a:32:cc:6f:03:df:c4:1d:97:35:3c:7b:2c:
                    77:b6:a5:cd:6c:51:a6:b6:24:2d:50:11:35:3c:cd:
                    b8:8e:e8:08:9f:4e:df:7e:ed:ad:ff:20:aa:0f:bf:
                    f8:47:e5:84:49:eb:2e:89:a7:9a:a1:ea:b3:1c:be:
                    1a:52:56:8d:33:38:8e:bc:70:ae:51:44:fc:25:2d:
                    4b:97:4b:c6:9f:f0:73:a0:44:fd:db:42:35:ee:ea:
                    1e:b5:01:f7:93:82:38:fb:f2:71:a9:d7:90:fe:c5:
                    f1:85:69:ac:f2:47:db:09:09:35:16:be:31:c8:99:
                    76:c3:ac:d6:db:21:a6:42:11:6c:e9:da:d2:7f:da:
                    4f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:09:DF:AA:7A:FB:4A:95:66:38:41:2E:16:29:E4:E2:96:92:D0:AB
            X509v3 Authority Key Identifier:
                keyid:9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:f4:0d:7a:bc:83:38:0c:60:4c:89:b0:46:8a:28:cd:b1:c1:
         4b:4f:10:e1:7f:1c:b1:45:e6:07:63:ad:34:d7:ba:fe:7d:fd:
         12:28:16:9c:a5:e7:0a:11:c4:60:ad:0e:9e:50:40:92:c6:79:
         50:f7:21:64:bd:9a:ed:3a:4c:ee:9e:78:ac:cf:b6:f4:7b:a4:
         4d:96:27:0a:9b:71:b0:c6:fd:43:22:1f:93:db:db:40:d2:73:
         05:62:2c:4c:e1:f8:28:7a:55:1b:aa:a8:39:98:76:7b:c8:ea:
         d7:33:f0:c0:0e:d7:23:46:28:f5:8d:53:83:52:b7:44:8f:ee:
         7a:e8:fc:19:d7:3b:63:b4:e7:46:ba:a9:8a:c4:26:43:e6:cb:
         b6:1b:81:03:cf:9c:b6:5f:db:b2:63:71:4e:ad:cd:68:4b:db:
         49:6a:c2:4d:35:70:62:6d:17:2c:89:ab:a9:22:73:b1:64:97:
         fd:f6:6e:0a:a5:65:74:bb:a1:7a:da:9c:0c:c3:ec:af:2e:43:
         91:44:a2:6b:e5:cc:85:03:39:36:d2:6d:f7:95:e5:23:c0:e0:
         5a:0e:d2:31:a3:f1:26:34:e1:8d:2a:6b:d4:63:a5:5f:ef:d1:
         f4:9e:43:25:dd:a2:10:01:93:91:62:09:7a:d5:29:1d:b6:5f:
         8d:84:db:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org