Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3139312e3234312e36342e302f32302d3332203d3e2033333536.roa
File:                     3139312e3234312e36342e302f32302d3332203d3e2033333536.roa (raw, json)
Hash identifier:          vWd7gcUrildFhrskGZ2aoIpm0tFP3RZ9OdQpLh8lwx4=
Subject key identifier:   B2:E5:4B:7F:9A:AE:8F:A6:BB:DA:C3:93:EA:56:C3:8E:CC:63:A5:C6
Certificate issuer:       /CN=95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA
Certificate serial:       7ED7884048C16593B193E03569FD62B120F024A9
Authority key identifier: 95:B5:A9:6C:77:43:93:9C:30:3E:DD:7F:2D:3C:C4:AB:9C:5D:B9:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3139312e3234312e36342e302f32302d3332203d3e2033333536.roa
Signing time:             Sat 21 Jan 2023 22:22:35 +0000
ROA not before:           Sat 21 Jan 2023 22:17:35 +0000
ROA not after:            Sat 20 Jan 2024 22:22:35 +0000
asID:                     3356
IP address blocks:        191.241.64.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d7:88:40:48:c1:65:93:b1:93:e0:35:69:fd:62:b1:20:f0:24:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA
        Validity
            Not Before: Jan 21 22:17:35 2023 GMT
            Not After : Jan 20 22:22:35 2024 GMT
        Subject: CN=B2E54B7F9AAE8FA6BBDAC393EA56C38ECC63A5C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:40:b2:33:f8:5a:eb:54:e0:22:e4:73:56:
                    2b:3d:5e:9a:c8:d7:5f:28:51:8e:5b:73:2b:9c:05:
                    fd:5b:78:fc:c2:43:37:e0:fc:10:67:45:b7:cb:09:
                    74:e9:30:aa:62:25:b7:d8:29:59:aa:db:dd:3f:fd:
                    3e:47:e5:c4:3b:bc:1c:a5:83:30:e3:20:15:6a:80:
                    8d:dd:f1:ed:d7:a2:a6:99:be:a1:2a:5c:96:22:7e:
                    1c:ef:c5:ad:78:81:a7:e8:6e:05:b7:a2:14:5e:f2:
                    25:34:0e:ce:c8:28:cf:35:81:7f:7a:8a:e7:d6:ec:
                    54:56:c2:79:e6:f1:41:8b:ee:53:a7:ee:2a:9e:5b:
                    56:67:d6:62:06:df:75:54:51:07:6a:70:8b:7e:19:
                    20:52:ef:73:90:57:2f:ef:42:01:06:df:00:88:bb:
                    7d:2b:46:ef:6f:21:59:44:0f:a7:12:da:9a:d2:70:
                    26:1a:b9:cc:49:6c:d1:0d:80:b3:82:f3:10:be:56:
                    b1:c0:c7:eb:8b:38:2d:a7:2c:cf:36:8f:92:dc:77:
                    48:6b:2c:2c:98:cb:0a:1d:5c:4b:1f:b9:fd:0f:02:
                    5b:6f:f0:11:06:36:25:be:41:df:a4:cd:44:4d:75:
                    41:67:c7:3c:ae:cd:47:85:7b:b2:74:7e:96:f3:8d:
                    ca:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E5:4B:7F:9A:AE:8F:A6:BB:DA:C3:93:EA:56:C3:8E:CC:63:A5:C6
            X509v3 Authority Key Identifier:
                keyid:95:B5:A9:6C:77:43:93:9C:30:3E:DD:7F:2D:3C:C4:AB:9C:5D:B9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3139312e3234312e36342e302f32302d3332203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:52:3b:3b:54:c1:75:dc:18:ca:1f:92:d0:a5:3b:cc:a2:96:
         5b:8d:bc:cb:fd:a0:f0:86:7c:a0:83:3b:92:1a:f3:30:d8:a5:
         9d:13:91:1a:0c:03:b1:f3:4d:fd:1e:05:f8:98:77:20:72:62:
         99:b6:aa:94:93:1b:de:8a:8b:ef:c2:0b:be:e4:b6:31:c2:9c:
         48:e2:33:62:8b:c8:46:b6:b6:af:83:82:8e:65:46:d6:af:e6:
         0c:63:28:05:6e:1b:02:76:f3:af:64:0a:45:13:aa:92:83:63:
         6b:4c:32:df:ae:5c:f9:dc:cf:a8:d3:52:be:5d:6a:18:10:c4:
         34:0b:df:73:03:42:4d:d6:e3:9a:78:9e:ec:3c:94:0f:55:54:
         57:43:8b:40:41:6f:9d:36:df:66:d6:15:db:39:89:90:70:cc:
         10:b8:aa:fa:15:4a:59:2d:9f:54:4e:e5:00:9c:3d:16:5d:c8:
         2d:c2:a6:88:63:97:de:96:02:e8:d2:78:9c:d9:62:84:37:16:
         e9:02:4e:ff:d1:eb:0d:57:fe:27:38:83:76:8c:07:71:87:ab:
         0e:88:95:4c:4f:ab:a1:9d:5e:af:c7:c4:28:f0:d9:84:a8:d7:
         c8:93:06:1b:39:9f:de:d8:b3:66:81:e8:6c:db:05:e6:1b:7e:
         0b:83:07:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org