Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa
File:                     3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa (raw, json)
Hash identifier:          EZGvNwaFyYC/pTcZaf5z7BiHBPljfyGdvqnPECX3h6U=
Subject key identifier:   68:C9:88:90:9D:DB:C2:A7:AB:E1:16:07:2C:9E:25:75:89:25:99:76
Certificate issuer:       /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial:       214E08781E2A2321371FEE2272FD6A9F2B48785D
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa
Signing time:             Tue 23 Jul 2024 11:51:14 +0000
ROA not before:           Tue 23 Jul 2024 11:46:14 +0000
ROA not after:            Tue 22 Jul 2025 11:51:14 +0000
asID:                     28667
IP address blocks:        191.242.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4e:08:78:1e:2a:23:21:37:1f:ee:22:72:fd:6a:9f:2b:48:78:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
        Validity
            Not Before: Jul 23 11:46:14 2024 GMT
            Not After : Jul 22 11:51:14 2025 GMT
        Subject: CN=68C988909DDBC2A7ABE116072C9E257589259976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:c5:30:dd:8b:aa:d7:8a:1f:67:28:85:6e:
                    0f:f6:3f:7e:3e:3b:b0:6e:3b:3a:57:f1:d8:b6:4e:
                    9c:43:95:ab:d3:1f:f7:e3:c1:19:7f:44:cc:ff:5c:
                    bf:d8:38:b6:7c:ad:55:27:36:0e:ee:29:7f:a0:61:
                    ba:2a:50:bd:7b:28:3f:31:83:a7:84:62:18:ea:7e:
                    e1:ee:ec:ec:99:05:cd:c3:c0:bd:36:04:8c:26:0a:
                    cc:6c:a9:88:44:11:5d:19:96:44:ed:4e:ce:8b:e3:
                    a5:b2:10:cc:e8:48:af:52:5d:cc:de:f6:7a:ec:77:
                    62:12:a2:13:11:83:da:d5:64:36:a9:0f:d9:19:79:
                    1c:ff:2a:8b:6f:f0:e2:23:ab:37:0f:b1:15:6d:a1:
                    21:12:c7:61:84:dd:90:7e:cb:00:40:5a:e0:6d:b7:
                    2c:5f:b1:2e:e8:d1:da:a5:0c:ec:93:6e:7a:96:aa:
                    05:9a:68:89:f9:81:92:9f:2f:83:9a:3a:2d:d1:28:
                    18:12:79:3a:f8:6e:2e:42:35:e4:06:c6:81:81:9f:
                    6e:ce:eb:7c:c6:89:f5:41:4a:cf:40:9d:44:b0:f1:
                    13:23:30:f4:64:96:a2:00:82:ca:d3:6d:bf:56:87:
                    09:6a:e7:04:4f:13:1f:2a:34:0d:ac:ed:99:5a:d9:
                    ef:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C9:88:90:9D:DB:C2:A7:AB:E1:16:07:2C:9E:25:75:89:25:99:76
            X509v3 Authority Key Identifier:
                keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:c0:81:44:cd:a1:7c:22:95:6b:c9:cb:20:a9:14:89:15:3d:
         33:29:de:f5:82:f2:ee:03:f7:2d:b8:ad:20:97:b0:8c:6b:83:
         71:d6:6d:e5:91:13:e8:99:f9:a7:62:0e:d5:c1:97:dd:9c:58:
         91:e0:1a:ca:fb:eb:64:5b:d1:2c:5b:d2:01:1f:ec:94:11:47:
         fe:1f:a1:28:a8:86:10:b9:f9:6f:8a:99:88:35:77:c7:a0:c9:
         16:cc:5d:1d:22:71:a8:f3:2d:88:55:4b:1d:93:d8:35:f5:21:
         15:37:2a:41:42:61:22:f9:c4:e7:ab:aa:d4:04:0f:11:4b:73:
         ab:c9:cb:44:ad:d8:a8:2e:7e:11:69:44:f8:e9:b9:60:71:d1:
         2a:31:52:27:d9:f7:87:72:88:a1:00:77:ad:90:78:99:44:c1:
         c0:d9:d9:b9:c8:34:5e:35:e6:bf:a1:3f:57:1e:23:72:1a:97:
         5e:be:66:46:3d:1c:e4:fe:42:99:ea:c8:8d:dd:cf:f9:86:45:
         de:57:ea:c6:45:73:0a:ea:4d:a8:c6:20:60:ef:bf:66:6e:78:
         74:70:17:74:22:cb:8a:42:c8:8c:9a:02:56:58:77:0d:43:f0:
         a6:1c:01:a6:63:97:56:f1:75:11:ac:33:60:2b:c8:1f:05:ae:
         45:a6:2b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org