Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/3139312e372e3130362e302f32342d3234203d3e20323731303134.roa
File:                     3139312e372e3130362e302f32342d3234203d3e20323731303134.roa (raw, json)
Hash identifier:          MaSdocB5zvuVbwDZIre5O093IE6zg4hUj+g9wmsGCHM=
Subject key identifier:   8B:A2:E3:7F:25:C7:D4:D8:D7:93:3B:35:1B:4F:54:16:82:75:19:D7
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       21242554B58CD5E27CA1532686FB575FCC5087C2
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/3139312e372e3130362e302f32342d3234203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:06:00 +0000
ROA not before:           Thu 08 Feb 2024 14:01:00 +0000
ROA not after:            Thu 06 Feb 2025 14:06:00 +0000
asID:                     271014
IP address blocks:        191.7.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:24:25:54:b5:8c:d5:e2:7c:a1:53:26:86:fb:57:5f:cc:50:87:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:01:00 2024 GMT
            Not After : Feb  6 14:06:00 2025 GMT
        Subject: CN=8BA2E37F25C7D4D8D7933B351B4F5416827519D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e3:7a:b6:1a:9e:42:41:83:3e:50:15:af:78:
                    8d:85:f6:4e:43:aa:0c:77:ab:22:07:9b:5c:48:2d:
                    2d:59:e5:bc:96:08:16:e4:06:3b:8c:b9:e5:de:d4:
                    98:8b:1f:dd:8a:e5:61:02:26:c5:61:23:81:43:6e:
                    ab:ef:ad:0d:3b:3d:b6:2e:27:7f:bc:ba:e6:b7:90:
                    f9:e5:73:a1:f6:55:ba:56:2a:df:8f:fe:8f:27:67:
                    cf:d0:b4:45:3f:c4:28:03:85:64:07:f2:55:8f:ae:
                    25:03:4d:b2:d8:a9:61:aa:c6:2b:ee:7c:1c:41:c9:
                    8b:c6:a9:1b:b9:d3:0e:32:61:6c:d0:02:d4:44:7b:
                    23:06:e5:5c:63:74:d3:38:23:26:fc:82:3e:41:9b:
                    af:5a:51:70:1e:96:0c:bb:2a:0a:b4:87:fa:0f:bd:
                    a0:64:7d:05:9c:49:bc:6b:af:e8:55:a3:52:5c:e2:
                    e3:aa:b6:9b:47:65:bd:4f:e4:30:88:7f:55:63:95:
                    f4:7e:2c:d5:83:95:e9:19:93:41:35:4d:c5:9d:30:
                    61:6d:d5:97:fd:ab:4e:f6:76:8d:50:2f:41:57:d2:
                    37:de:5e:c8:4c:d9:7e:4b:85:aa:f9:e1:cb:f2:93:
                    4a:e8:ac:22:21:91:40:36:91:88:6a:39:54:a4:06:
                    6c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A2:E3:7F:25:C7:D4:D8:D7:93:3B:35:1B:4F:54:16:82:75:19:D7
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/3139312e372e3130362e302f32342d3234203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:96:fb:95:63:f9:33:25:5b:88:ce:2c:2f:a2:c6:e6:73:7b:
         c7:f4:96:1f:e8:69:64:77:12:1d:7d:b8:46:b8:9d:29:f0:d3:
         9b:74:c5:1c:98:33:a1:28:00:d4:08:05:f7:76:81:17:0d:88:
         59:20:64:46:8b:3f:be:45:56:ab:68:bc:86:2c:73:c7:bd:b3:
         b7:8d:b7:ab:ac:1e:f0:ae:50:b7:11:c3:7f:08:33:b7:0a:df:
         e4:55:c7:72:07:7f:32:7c:a7:da:b3:51:9c:b5:e9:c8:e6:ca:
         77:8b:5d:f0:99:f7:36:e3:a5:bc:ea:d4:fb:0a:86:71:99:f6:
         a5:3f:b5:6c:51:c7:06:82:5f:d6:b4:89:59:26:bb:47:85:86:
         84:a4:6a:95:4d:19:80:8c:9f:25:33:5a:82:ac:86:02:cd:18:
         9b:23:7a:47:f9:3e:05:ba:e3:70:06:5f:1b:ca:5f:b7:0f:b8:
         3e:0a:e7:62:60:d5:17:78:38:02:b5:e0:48:e4:45:60:5d:d2:
         82:f1:3a:11:2c:1d:7d:97:6e:8d:f3:a7:c5:76:9b:92:08:62:
         c1:cd:3b:76:b4:1a:31:a3:66:81:86:18:ad:3f:5f:06:3d:1e:
         0a:31:30:97:d9:fd:07:d4:74:d9:ae:4d:0d:e8:c6:fe:03:f8:
         70:da:d6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:42 2024 by rpki-client on console-ams.rpki-client.org