Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3139312e372e382e302f32312d3234203d3e20323632353935.roa
File:                     3139312e372e382e302f32312d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          Se+sW22ll3I02I9JyCYHyxGNktZzFhmhq4J2zilGrEM=
Subject key identifier:   AC:8E:BF:02:F1:2E:B9:43:6D:84:04:49:D2:A8:CD:A1:7D:F2:DB:5C
Certificate issuer:       /CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
Certificate serial:       5DEF687C9696C2ECFC602BF895DED5EFD610314B
Authority key identifier: 42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3139312e372e382e302f32312d3234203d3e20323632353935.roa
Signing time:             Thu 30 Nov 2023 20:00:00 +0000
ROA not before:           Thu 30 Nov 2023 19:55:00 +0000
ROA not after:            Thu 28 Nov 2024 20:00:00 +0000
asID:                     262595
IP address blocks:        191.7.8.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ef:68:7c:96:96:c2:ec:fc:60:2b:f8:95:de:d5:ef:d6:10:31:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
        Validity
            Not Before: Nov 30 19:55:00 2023 GMT
            Not After : Nov 28 20:00:00 2024 GMT
        Subject: CN=AC8EBF02F12EB9436D840449D2A8CDA17DF2DB5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a4:a2:e9:72:ca:dc:0b:5d:ac:69:b5:9d:57:
                    05:e3:84:d5:6a:26:3f:42:b4:9b:d2:be:78:b5:5c:
                    c7:4a:08:f4:99:76:37:91:77:5c:0d:f1:13:9d:47:
                    38:02:d6:37:c2:15:4a:f1:f9:25:23:cf:3d:d5:24:
                    bf:75:b2:13:1a:96:a5:2a:bb:22:39:97:9d:56:67:
                    5e:ec:6a:52:d8:6b:e4:23:33:17:40:98:95:e1:60:
                    3a:14:24:f3:f1:82:36:8a:91:fd:53:d5:25:23:7e:
                    b7:71:ed:d9:ee:97:f7:d9:5d:eb:b6:cf:ed:3d:d0:
                    e0:52:70:a9:65:28:23:7b:bf:6e:c1:db:9e:ad:6c:
                    e0:a4:cb:45:0f:dc:05:32:12:dd:d9:8f:74:7b:27:
                    8f:a5:84:62:e8:c2:05:7c:42:66:cd:25:9a:22:5a:
                    48:9a:c2:36:20:42:49:ed:fb:80:9b:6a:41:c6:e4:
                    8f:f2:2d:c9:25:2c:03:00:d5:27:b5:40:8a:f6:ee:
                    aa:32:36:b2:91:2f:d0:ab:68:67:d4:70:78:f2:74:
                    7e:26:06:01:8c:70:c0:2c:35:ee:7a:26:e4:cc:ed:
                    c8:16:b0:c8:95:4a:a3:49:6f:6e:d1:cf:b4:81:9d:
                    fc:12:a1:d6:ea:60:26:25:24:75:2d:da:dc:a4:71:
                    5c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8E:BF:02:F1:2E:B9:43:6D:84:04:49:D2:A8:CD:A1:7D:F2:DB:5C
            X509v3 Authority Key Identifier:
                keyid:42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3139312e372e382e302f32312d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:7b:d1:0b:99:9f:51:25:37:0f:1a:ae:d0:ef:14:43:cf:53:
         42:79:cc:71:21:ea:1d:e8:39:97:2a:de:d3:3b:13:86:9f:fa:
         fa:32:50:36:d1:fa:1b:d6:69:72:8a:23:90:cd:75:36:a0:72:
         f2:e3:b2:31:be:33:11:dd:20:45:10:18:aa:7d:3c:2d:73:d2:
         38:7f:03:b9:b2:97:e5:7a:40:8c:ad:35:e8:ec:9d:6a:d5:1b:
         9e:86:6d:4a:67:37:1b:3b:a4:1e:d1:d1:d1:ad:73:b9:90:4c:
         47:1f:60:5c:c8:68:5e:52:16:91:1d:5b:be:46:99:cb:5b:5b:
         21:1d:05:f8:37:eb:49:37:fe:52:90:ae:87:b9:cb:76:e1:75:
         dc:b3:30:81:42:59:0f:c2:ec:ba:76:46:0c:2b:97:ee:f7:0e:
         7e:ed:06:83:7c:6e:fb:2c:af:0b:60:73:0f:ce:5a:13:2c:81:
         56:94:bf:10:07:cd:92:36:aa:09:14:fd:ac:1f:dc:a1:24:3d:
         2b:57:61:2a:1b:66:8e:63:a0:c1:6d:9a:1a:97:95:af:f8:5b:
         cc:96:b6:7a:bd:89:0c:5c:6f:33:cb:4b:e2:28:e5:af:0c:da:
         4a:4c:e6:da:68:8f:ef:4c:06:50:8a:28:91:a9:7d:05:34:16:
         c3:32:bb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org