Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e36302e302f32322d3232203d3e20323633343936.roa
File:                     3139312e3234332e36302e302f32322d3232203d3e20323633343936.roa (raw, json)
Hash identifier:          ks4jAnI/jg5CFjMPNxyEsfpqwy2F9KkstA93osdgKQk=
Subject key identifier:   1A:A4:C5:D0:ED:B8:05:2D:AB:3F:86:5D:3B:39:0C:70:E2:8A:BC:A9
Certificate issuer:       /CN=7B013DB812A088B5F605EA84BA700530A5872843
Certificate serial:       15833219798390D068FAF1A8E8A0BB6655F7C0E6
Authority key identifier: 7B:01:3D:B8:12:A0:88:B5:F6:05:EA:84:BA:70:05:30:A5:87:28:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B013DB812A088B5F605EA84BA700530A5872843.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e36302e302f32322d3232203d3e20323633343936.roa
Signing time:             Mon 07 Feb 2022 12:09:23 +0000
ROA not before:           Mon 07 Feb 2022 12:04:23 +0000
ROA not after:            Mon 06 Feb 2023 12:09:23 +0000
asID:                     263496
IP address blocks:        191.243.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:83:32:19:79:83:90:d0:68:fa:f1:a8:e8:a0:bb:66:55:f7:c0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B013DB812A088B5F605EA84BA700530A5872843
        Validity
            Not Before: Feb  7 12:04:23 2022 GMT
            Not After : Feb  6 12:09:23 2023 GMT
        Subject: CN=1AA4C5D0EDB8052DAB3F865D3B390C70E28ABCA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:a6:32:5f:b5:9c:1c:70:20:1a:75:d9:ac:
                    a9:e0:d1:28:f2:4a:62:6e:2b:4e:e6:a7:49:a0:ae:
                    2e:e6:65:73:17:4c:8a:9c:37:56:dd:46:ba:1d:de:
                    06:12:f7:13:34:97:99:d0:8a:ab:41:dd:fa:92:f0:
                    19:be:4c:af:88:f5:a3:13:27:86:7a:55:f8:01:d6:
                    09:e7:76:2f:06:e6:6a:4a:42:73:51:81:c0:54:6f:
                    98:e2:46:f8:9f:9c:2c:2e:fc:f3:05:79:25:f4:6c:
                    41:da:1f:d6:45:e1:74:cd:f3:7c:82:91:1c:d8:be:
                    ca:e6:6e:37:c9:cb:88:69:52:18:a1:7d:f0:6a:6e:
                    9a:ab:ea:a1:00:b8:ff:de:0e:e4:40:4c:7f:69:05:
                    70:e8:44:0e:55:9b:ae:a3:aa:9e:f8:1a:15:c7:85:
                    cc:bc:d2:57:fd:86:85:2e:b5:ab:87:27:8e:36:0d:
                    8e:c8:79:32:d5:19:fa:ae:6f:37:e8:62:09:3f:37:
                    95:61:a8:56:ad:7a:5d:99:82:a8:01:73:86:29:9a:
                    e1:4a:d9:16:11:3b:bd:a3:27:4d:33:39:2e:6d:55:
                    3e:a8:0f:17:a2:33:f5:06:a5:92:9b:0b:76:91:58:
                    3b:8a:ce:17:f3:04:35:c2:66:a9:0c:f1:9a:f7:a5:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A4:C5:D0:ED:B8:05:2D:AB:3F:86:5D:3B:39:0C:70:E2:8A:BC:A9
            X509v3 Authority Key Identifier:
                keyid:7B:01:3D:B8:12:A0:88:B5:F6:05:EA:84:BA:70:05:30:A5:87:28:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/7B013DB812A088B5F605EA84BA700530A5872843.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B013DB812A088B5F605EA84BA700530A5872843.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e36302e302f32322d3232203d3e20323633343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:92:c4:0b:43:ee:f6:e6:d5:59:47:b7:fb:67:d5:7c:cc:f6:
         82:a0:06:d6:c1:1a:33:77:11:b1:1d:ad:11:db:54:8a:f9:26:
         20:9b:7f:6e:18:90:37:a4:8c:6a:43:8d:37:98:45:81:b9:b1:
         bb:cd:24:da:7c:f1:13:87:40:2d:64:06:aa:38:66:10:60:c3:
         17:a3:34:fc:1e:f6:6d:15:d1:4d:f6:08:4e:9d:02:b5:fe:43:
         f9:82:de:e2:a4:6e:59:49:3f:04:79:0c:24:cf:e1:b0:c9:2b:
         c9:03:6b:68:ea:d7:62:61:59:5c:fd:86:f1:f9:6c:2c:c5:e1:
         59:f9:64:1b:ec:fe:e3:d3:a2:ee:80:4c:3b:62:a5:81:bb:f0:
         ad:d9:3d:bb:bb:67:98:d1:90:28:85:d1:78:11:95:97:85:64:
         36:83:6f:f8:23:4d:9c:76:2c:e7:8a:6b:ec:1e:52:ec:0f:70:
         43:2a:f3:4e:30:5f:49:a2:98:fc:a3:f5:7c:9b:b2:b9:25:d4:
         93:8b:17:6c:82:31:56:50:d5:d1:20:93:ed:a6:d8:7b:fc:dd:
         3e:19:4a:ee:2a:ea:fc:40:73:29:6d:d4:fe:03:b9:8d:8d:0d:
         63:e2:8d:12:0a:9e:e6:b6:ff:90:27:6c:1a:85:ef:cc:d8:4c:
         67:55:d7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org