Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/3139312e3234322e3232302e302f32322d3234203d3e20323633313434.roa
File:                     3139312e3234322e3232302e302f32322d3234203d3e20323633313434.roa (raw, json)
Hash identifier:          SqCgv3Y2zr908RZam93fNKyUMvpGiMBfW8Kk/QUQpqE=
Subject key identifier:   04:24:F9:1F:A6:A1:AB:B4:9B:26:43:31:97:4D:F6:F2:E6:27:C0:39
Certificate issuer:       /CN=72A77C89E0A81B284CF0D90E0AFCAEAF52CB4799
Certificate serial:       42A6E6921388B832145C47FE06B6784B79CD3B32
Authority key identifier: 72:A7:7C:89:E0:A8:1B:28:4C:F0:D9:0E:0A:FC:AE:AF:52:CB:47:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72A77C89E0A81B284CF0D90E0AFCAEAF52CB4799.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/3139312e3234322e3232302e302f32322d3234203d3e20323633313434.roa
Signing time:             Tue 30 May 2023 14:21:46 +0000
ROA not before:           Tue 30 May 2023 14:16:46 +0000
ROA not after:            Tue 28 May 2024 14:21:46 +0000
asID:                     263144
IP address blocks:        191.242.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a6:e6:92:13:88:b8:32:14:5c:47:fe:06:b6:78:4b:79:cd:3b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72A77C89E0A81B284CF0D90E0AFCAEAF52CB4799
        Validity
            Not Before: May 30 14:16:46 2023 GMT
            Not After : May 28 14:21:46 2024 GMT
        Subject: CN=0424F91FA6A1ABB49B264331974DF6F2E627C039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f1:ff:e5:c8:f4:73:bc:87:b7:90:a2:ac:22:
                    16:3d:8a:28:dc:c0:20:f0:99:95:88:c2:16:d7:03:
                    f5:02:47:9d:02:cb:6e:28:01:a0:43:7f:8d:c6:11:
                    89:60:56:4d:1a:be:fe:2c:9b:31:25:f9:4c:c3:e5:
                    e5:33:29:a4:c5:5d:55:c7:7f:16:cb:9b:04:f9:05:
                    01:d9:15:82:02:c1:0a:72:a2:a3:4a:ed:bc:a8:bb:
                    05:e8:cb:d4:59:71:7c:a6:bc:7e:80:b2:0d:4f:6b:
                    37:a9:b8:cb:ab:03:a1:dd:e6:f7:8c:96:27:8f:a6:
                    4e:34:60:92:8f:63:27:a7:7f:eb:87:9e:d6:85:19:
                    2a:14:f7:21:9a:2d:81:f7:df:a4:44:72:a8:f4:b9:
                    94:7c:24:54:ae:d2:f5:6a:0e:68:4b:65:2e:7d:d6:
                    27:72:67:d3:2c:fd:3b:17:05:e8:fa:1d:e3:2e:98:
                    c6:11:c3:78:06:ce:ba:b0:55:86:ac:a0:16:59:1c:
                    1b:40:1b:29:4c:d8:f3:c4:78:9f:92:41:2d:1f:77:
                    f5:1e:c4:91:8b:ce:03:38:29:8b:4b:71:94:01:01:
                    c2:fa:15:8b:81:d1:9c:a5:c3:0b:65:38:f6:9f:bc:
                    a7:7e:e3:5f:4f:53:af:54:af:ce:85:4c:e4:b7:bb:
                    6d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:24:F9:1F:A6:A1:AB:B4:9B:26:43:31:97:4D:F6:F2:E6:27:C0:39
            X509v3 Authority Key Identifier:
                keyid:72:A7:7C:89:E0:A8:1B:28:4C:F0:D9:0E:0A:FC:AE:AF:52:CB:47:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/72A77C89E0A81B284CF0D90E0AFCAEAF52CB4799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72A77C89E0A81B284CF0D90E0AFCAEAF52CB4799.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/3139312e3234322e3232302e302f32322d3234203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:91:fe:07:e7:01:16:f0:71:2e:76:c5:25:5c:f3:80:1c:f5:
         a1:72:d5:8a:91:b7:df:13:3a:fa:85:77:fb:2e:5a:ef:23:d3:
         a9:a4:07:0b:cc:b3:1f:30:9e:9e:50:8b:ad:23:2d:bc:3d:d3:
         96:52:20:9e:5b:68:b0:54:98:0d:e7:ed:4f:47:24:a0:26:38:
         26:30:b3:d0:2f:95:68:96:85:0e:1f:28:e2:37:e6:49:95:e8:
         53:64:88:df:4f:59:3a:0a:72:2e:37:0e:25:1f:86:50:b7:04:
         7f:d8:cb:93:80:fb:3c:5f:ad:32:56:c1:51:cc:cb:7d:7c:87:
         e4:45:70:f1:1e:72:29:04:81:48:83:5d:e8:5b:3f:9d:8b:e5:
         bd:0c:13:2e:9c:e4:56:02:1b:24:9b:9a:e7:39:fe:c7:f2:84:
         9a:6d:be:58:c4:96:6c:3f:53:65:2d:d4:13:33:c8:a4:0d:16:
         71:86:71:9f:6c:f0:b9:f3:f4:2a:6b:38:87:c2:fb:8e:e0:3f:
         21:ed:64:4b:cd:78:a2:43:92:39:e5:ef:8d:48:0f:2b:ae:c2:
         76:61:39:d0:02:e6:05:26:f8:2b:e4:6d:52:8e:c5:bc:11:47:
         61:05:35:26:80:a4:c1:78:d2:dd:03:0a:55:d5:3b:d2:2b:ef:
         7e:2b:65:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org