Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/3139312e372e3130342e302f32332d3233203d3e20323731303134.roa
File:                     3139312e372e3130342e302f32332d3233203d3e20323731303134.roa (raw, json)
Hash identifier:          3Rb0BGvaUcTe0Q5xUTgZsZX/KBfNJ816O5ojzBXXVPE=
Subject key identifier:   5F:B1:E1:EE:90:76:7F:E3:F7:84:75:52:98:51:8C:3A:A7:B7:D6:C0
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       7C91DE00EB395C37F2B2023C64331F43DAC4009A
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/3139312e372e3130342e302f32332d3233203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:05:59 +0000
ROA not before:           Thu 08 Feb 2024 14:00:59 +0000
ROA not after:            Thu 06 Feb 2025 14:05:59 +0000
asID:                     271014
IP address blocks:        191.7.104.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:91:de:00:eb:39:5c:37:f2:b2:02:3c:64:33:1f:43:da:c4:00:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:00:59 2024 GMT
            Not After : Feb  6 14:05:59 2025 GMT
        Subject: CN=5FB1E1EE90767FE3F784755298518C3AA7B7D6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fa:35:1f:27:28:94:fb:4c:ec:4b:35:73:93:
                    ad:66:aa:46:0c:d2:ba:dc:ea:35:5c:94:c8:c8:a0:
                    1e:c4:7b:f8:a4:45:2f:91:72:93:52:65:ae:73:d9:
                    f3:37:82:26:b3:7e:7a:f9:20:fe:1f:4b:95:36:bc:
                    b8:b5:b3:8b:88:38:b6:de:a8:0a:9f:99:5a:05:e5:
                    93:e1:ee:49:fe:3c:e7:d6:63:77:d6:bb:2b:81:67:
                    1c:32:1c:5e:3b:b6:78:38:ff:e6:00:f0:24:69:00:
                    89:71:e0:3a:7a:ad:07:b4:fb:bf:ea:82:4f:5b:aa:
                    85:cd:a3:d4:a0:3b:13:dd:10:32:b5:b8:e3:eb:2f:
                    6c:cc:cc:6e:ae:e2:0c:4f:f6:cf:92:58:19:b0:b4:
                    68:bb:e7:4d:0d:2b:ba:8a:e5:7c:79:f5:3e:30:19:
                    f9:fc:58:22:d7:b1:cb:ad:8d:3a:c5:c6:80:fa:ea:
                    5b:4e:74:6e:a4:5a:86:66:4d:0b:c4:45:4b:2d:57:
                    c1:49:bc:e4:f3:e2:55:21:b7:11:44:96:0b:dc:f3:
                    fe:8e:8c:f9:30:94:58:9e:ad:90:49:08:ab:73:15:
                    23:0a:d4:73:b7:db:85:a0:c0:ab:f6:ec:82:ce:3d:
                    c4:71:7f:04:7a:fd:d8:fb:71:21:aa:98:8a:db:2d:
                    87:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B1:E1:EE:90:76:7F:E3:F7:84:75:52:98:51:8C:3A:A7:B7:D6:C0
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/3139312e372e3130342e302f32332d3233203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:12:02:45:2d:7d:cf:ad:30:ea:d1:54:88:8c:62:0e:a5:a4:
         ae:c6:2e:f2:da:5f:8b:3a:25:73:2d:23:a8:91:2a:f5:c8:73:
         1a:7d:8f:40:15:79:be:dc:90:7d:e6:5d:95:69:50:8a:ed:a6:
         2a:bb:4d:68:78:7e:9e:99:f5:1c:0d:fc:4e:1b:1e:33:6f:ae:
         78:99:71:6c:b8:ba:f2:c1:2e:4a:e2:a1:ad:95:eb:28:e8:74:
         2a:54:ad:8f:dc:61:cd:10:33:74:9b:7c:bf:63:cc:27:95:df:
         2a:7c:ea:e2:96:ce:75:0e:90:aa:fb:39:e1:12:a3:27:8b:64:
         44:09:12:1d:c8:91:dc:b7:89:be:99:30:b6:20:b1:75:d5:c5:
         4c:71:70:97:6c:be:35:03:63:f6:07:7b:99:9a:ee:6f:88:89:
         c9:63:79:79:a2:51:7f:eb:f0:76:64:14:38:e8:17:4c:1d:87:
         02:8f:da:0b:bf:7c:e1:e7:09:9c:ec:01:d9:ca:fa:23:b0:e3:
         b2:7f:eb:31:af:13:5b:05:4e:3c:75:0d:5f:ea:ee:9e:5f:9e:
         cc:4a:ab:93:ef:f7:50:42:1d:10:24:28:be:57:62:71:1d:63:
         4c:c0:f7:3b:34:57:52:9f:18:1e:00:6b:02:15:16:08:91:40:
         33:bf:ff:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org