Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/3139312e372e3130342e302f32342d3234203d3e20323731303134.roa
File:                     3139312e372e3130342e302f32342d3234203d3e20323731303134.roa (raw, json)
Hash identifier:          Gls/HGNsTnLHvujQTRmDyhhglZCGBIin3/B53bJPtMw=
Subject key identifier:   39:EC:55:74:A8:BE:D3:27:23:3B:E2:A9:C7:63:5A:A4:D7:11:37:16
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       5E2F826C22D849C21D438D15092F95C878502563
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/3139312e372e3130342e302f32342d3234203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:05:57 +0000
ROA not before:           Thu 08 Feb 2024 14:00:57 +0000
ROA not after:            Thu 06 Feb 2025 14:05:57 +0000
asID:                     271014
IP address blocks:        191.7.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2f:82:6c:22:d8:49:c2:1d:43:8d:15:09:2f:95:c8:78:50:25:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:00:57 2024 GMT
            Not After : Feb  6 14:05:57 2025 GMT
        Subject: CN=39EC5574A8BED327233BE2A9C7635AA4D7113716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:dc:25:3b:66:4e:10:52:d9:c7:b9:1e:8b:
                    4d:1b:dd:9b:05:10:cf:52:f9:f2:d2:72:1c:59:62:
                    b7:cd:8c:5d:69:8c:c2:71:10:7a:1d:3c:f1:b2:ec:
                    cf:b6:9a:11:aa:73:d0:34:d8:b1:58:0a:6b:0f:4f:
                    8e:a7:a2:6a:a8:d4:49:42:24:44:bd:bd:ca:df:19:
                    27:3a:67:eb:90:4a:02:60:14:b5:16:b3:8f:3b:ed:
                    0a:59:af:02:ac:b9:74:0c:34:4d:4a:61:4e:1c:0b:
                    3e:11:34:03:78:e2:50:8d:ce:d9:69:97:33:09:f3:
                    84:64:2f:7f:2e:4c:e8:dc:c5:08:ec:52:3c:c0:c4:
                    98:e8:f4:f3:db:86:2d:d2:28:40:68:20:42:6e:9b:
                    dd:36:12:a3:49:82:3f:9e:88:dd:90:71:0b:7f:52:
                    c0:9a:df:b2:8a:bb:11:3f:2d:50:c4:06:f4:50:9c:
                    e6:5b:d4:d7:ef:c6:f0:f9:a7:91:b2:b6:71:03:6b:
                    2d:7b:1a:54:e4:bd:23:55:e0:9a:7a:c7:34:a9:5d:
                    9c:81:a6:ea:51:39:67:70:46:9e:f2:94:63:c0:35:
                    de:77:05:2b:40:99:cd:af:55:9c:90:bf:d0:b0:a1:
                    5b:7a:48:a2:cd:f4:72:e5:21:b4:1d:68:27:7b:d7:
                    ea:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EC:55:74:A8:BE:D3:27:23:3B:E2:A9:C7:63:5A:A4:D7:11:37:16
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/3139312e372e3130342e302f32342d3234203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:8e:d3:61:f7:5b:3e:85:88:0a:f3:79:e5:4e:50:cb:41:c0:
         3b:c0:c5:77:aa:13:62:9a:78:63:3b:43:9e:2f:33:9a:f6:80:
         7f:0f:5a:94:79:7f:a9:92:e3:45:fa:9c:58:d5:3b:2e:ab:b5:
         13:7b:0d:c7:14:34:b2:bb:1b:d8:41:e1:c7:3d:f4:e7:70:a3:
         d8:b0:41:83:16:de:6a:7d:24:c8:6d:42:42:17:cb:fc:82:71:
         f0:85:ee:d0:82:f1:a4:34:c8:d2:b4:e0:9e:35:a6:9a:e6:50:
         f8:85:0e:86:3a:f5:ed:ef:f2:06:12:0f:ed:54:12:5b:8a:be:
         3e:67:9b:5d:0c:52:13:05:63:c8:6a:c2:8b:ae:9d:57:d4:e8:
         48:d8:5f:e4:f1:80:00:b8:e9:79:cf:59:76:19:d9:d0:4b:c4:
         d2:55:5c:2c:39:7b:ca:cf:20:17:da:61:35:68:6a:ad:3d:02:
         53:03:81:b1:66:13:18:69:aa:73:85:f1:50:ba:04:6e:6b:8e:
         3e:f4:03:3a:71:63:34:e7:8d:06:55:da:8e:be:06:24:ff:36:
         68:fe:59:96:fc:32:00:b3:9a:48:7e:9b:33:d4:ca:90:ff:50:
         6e:d6:87:a4:e8:60:8f:87:70:ed:ff:e3:7f:3f:cc:37:f0:d0:
         2e:4f:f3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org