Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/0/3139312e372e3138382e302f32322d3234203d3e20323633333239.roa
File:                     3139312e372e3138382e302f32322d3234203d3e20323633333239.roa (raw, json)
Hash identifier:          mKqOfZf8fmStcjD1DVe0ahWY2OGsOPfB1pjyBC+WE5w=
Subject key identifier:   12:F7:EA:45:0A:01:FE:45:8C:4F:58:8C:3D:2E:8F:02:14:A9:94:6F
Certificate issuer:       /CN=EF704839B02B4F968478259FBC3FC05A3893883A
Certificate serial:       1CEDD90ED946A38D0A7431A56B9ED38514FBD975
Authority key identifier: EF:70:48:39:B0:2B:4F:96:84:78:25:9F:BC:3F:C0:5A:38:93:88:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF704839B02B4F968478259FBC3FC05A3893883A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/0/3139312e372e3138382e302f32322d3234203d3e20323633333239.roa
Signing time:             Thu 13 Jul 2023 14:32:07 +0000
ROA not before:           Thu 13 Jul 2023 14:27:07 +0000
ROA not after:            Thu 11 Jul 2024 14:32:07 +0000
asID:                     263329
IP address blocks:        191.7.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ed:d9:0e:d9:46:a3:8d:0a:74:31:a5:6b:9e:d3:85:14:fb:d9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF704839B02B4F968478259FBC3FC05A3893883A
        Validity
            Not Before: Jul 13 14:27:07 2023 GMT
            Not After : Jul 11 14:32:07 2024 GMT
        Subject: CN=12F7EA450A01FE458C4F588C3D2E8F0214A9946F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:cb:7c:b7:10:e3:1c:11:ab:18:06:b7:91:
                    6b:db:ca:c6:bd:35:ed:b0:50:1f:6b:3b:b4:03:c9:
                    0d:45:db:48:cd:ac:32:b8:81:b6:a1:43:b7:e6:61:
                    f8:94:fe:1e:94:7f:09:82:85:92:a6:e6:a6:f5:8e:
                    a0:e6:92:2d:66:8d:24:89:4a:eb:ae:2a:b9:9d:ee:
                    1b:27:48:75:ed:ba:d3:59:1b:be:d6:38:c3:27:18:
                    e7:e3:4a:6c:26:37:59:d8:00:bf:50:8c:63:e0:3a:
                    e6:21:34:b7:36:45:80:49:51:aa:04:82:2e:be:35:
                    48:8b:7d:66:86:2d:d6:12:99:78:0f:d6:48:46:cd:
                    be:d6:88:f8:dd:45:dc:78:5b:22:26:89:8e:38:71:
                    d1:98:fe:16:8b:a6:44:92:40:23:2c:6f:f7:8b:90:
                    ff:8c:a7:df:f1:d3:93:8f:38:f6:5c:ac:8c:c0:71:
                    4c:d6:d4:00:16:e2:2a:aa:7e:05:06:fc:c5:25:80:
                    6d:4c:0a:5e:10:54:64:ce:08:2a:6a:51:6a:4d:f7:
                    be:0f:d8:53:21:65:3a:18:b6:eb:e7:63:d2:53:97:
                    27:8c:9c:f3:67:b0:e6:23:15:ed:9e:13:07:54:42:
                    eb:6a:3f:6e:8a:89:76:54:b2:20:9f:77:03:58:6b:
                    39:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F7:EA:45:0A:01:FE:45:8C:4F:58:8C:3D:2E:8F:02:14:A9:94:6F
            X509v3 Authority Key Identifier:
                keyid:EF:70:48:39:B0:2B:4F:96:84:78:25:9F:BC:3F:C0:5A:38:93:88:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/0/EF704839B02B4F968478259FBC3FC05A3893883A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF704839B02B4F968478259FBC3FC05A3893883A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/0/3139312e372e3138382e302f32322d3234203d3e20323633333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:a6:68:1d:5d:ac:a5:26:18:79:6d:e3:92:c8:96:2f:07:00:
         51:6d:54:8e:f5:b1:74:da:11:d1:c4:d2:c9:53:77:ad:9b:3b:
         07:68:d2:8c:07:50:db:03:9c:27:eb:48:68:52:fc:08:8f:38:
         52:e1:c1:67:d7:65:64:fd:73:53:03:f2:73:7c:5c:fb:4a:29:
         8b:71:92:04:e3:20:1e:b8:c9:bc:fe:d0:5f:13:dd:04:26:0f:
         06:b7:63:18:a4:fe:cb:95:f1:b3:2d:a6:81:80:55:e8:94:00:
         56:d1:be:de:aa:dc:38:7d:59:57:7b:bc:77:43:e7:ea:56:f9:
         52:3f:ed:c6:ff:e4:62:04:81:e8:8e:4f:76:59:9b:5b:cb:06:
         b2:76:48:8a:89:b0:1a:ba:20:8d:05:76:dc:53:4c:23:d0:17:
         ca:ba:31:0c:af:20:e3:11:e5:da:ab:99:c0:26:1e:36:87:d7:
         a7:f7:65:d6:fc:c9:4f:12:06:5b:18:d9:dd:b2:ac:5e:19:73:
         58:e1:63:ea:e0:65:4a:ab:bb:8e:bf:72:0f:45:83:8e:54:fa:
         af:87:19:4e:14:3b:39:1a:52:59:26:21:b3:f5:c4:f3:a2:f6:
         91:53:7f:d3:17:7d:a5:6b:d1:25:8a:03:61:d2:f7:f1:48:ac:
         be:c2:e9:a1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHO3ZDtlGo40KdDGla57ThRT72XUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY3MDQ4MzlCMDJCNEY5Njg0NzgyNTlGQkMzRkMwNUEz
ODkzODgzQTAeFw0yMzA3MTMxNDI3MDdaFw0yNDA3MTExNDMyMDdaMDMxMTAvBgNV
BAMTKDEyRjdFQTQ1MEEwMUZFNDU4QzRGNTg4QzNEMkU4RjAyMTRBOTk0NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzvst8txDjHBGrGAa3kWvbysa9
Ne2wUB9rO7QDyQ1F20jNrDK4gbahQ7fmYfiU/h6UfwmChZKm5qb1jqDmki1mjSSJ
SuuuKrmd7hsnSHXtutNZG77WOMMnGOfjSmwmN1nYAL9QjGPgOuYhNLc2RYBJUaoE
gi6+NUiLfWaGLdYSmXgP1khGzb7WiPjdRdx4WyImiY44cdGY/haLpkSSQCMsb/eL
kP+Mp9/x05OPOPZcrIzAcUzW1AAW4iqqfgUG/MUlgG1MCl4QVGTOCCpqUWpN974P
2FMhZToYtuvnY9JTlyeMnPNnsOYjFe2eEwdUQutqP26KiXZUsiCfdwNYaznvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEvfqRQoB/kWMT1iMPS6PAhSplG8wHwYDVR0j
BBgwFoAU73BIObArT5aEeCWfvD/AWjiTiDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGo0eFA0Skc3UzVxVHRYRzVnR2VTSkc0WHg1NnFaanJtdU05U29BVHhq
QVAvMC9FRjcwNDgzOUIwMkI0Rjk2ODQ3ODI1OUZCQzNGQzA1QTM4OTM4ODNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VGNzA0ODM5QjAyQjRGOTY4
NDc4MjU5RkJDM0ZDMDVBMzg5Mzg4M0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RqNHhQNEpHN1M1cVR0WEc1Z0dlU0pHNFh4NTZxWmpybXVNOVNvQVR4akFQLzAv
MzEzOTMxMmUzNzJlMzEzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzMzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvwe8MA0GCSqGSIb3DQEBCwUAA4IBAQB2pmgdXayl
Jhh5beOSyJYvBwBRbVSO9bF02hHRxNLJU3etmzsHaNKMB1DbA5wn60hoUvwIjzhS
4cFn12Vk/XNTA/JzfFz7SimLcZIE4yAeuMm8/tBfE90EJg8Gt2MYpP7LlfGzLaaB
gFXolABW0b7eqtw4fVlXe7x3Q+fqVvlSP+3G/+RiBIHojk92WZtbywaydkiKibAa
uiCNBXbcU0wj0BfKujEMryDjEeXaq5nAJh42h9en92XW/MlPEgZbGNndsqxeGXNY
4WPq4GVKq7uOv3IPRYOOVPqvhxlOFDs5GlJZJiGz9cTzovaRU3/TF32la9EligNh
0vfxSKy+wumh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org