Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/3139312e372e3137362e302f32312d3234203d3e20323633333236.roa
File:                     3139312e372e3137362e302f32312d3234203d3e20323633333236.roa (raw, json)
Hash identifier:          iWEu+nDZB+364ozFdmm3jrus8ttS02qwyGe60wjjMeY=
Subject key identifier:   2F:04:4A:17:33:1B:1E:20:4E:27:8E:1A:B5:70:A2:E7:1B:58:27:4D
Certificate issuer:       /CN=11ACCE96940DE0E26CC79CC9DE02FF434F33C267
Certificate serial:       0C11DD3BE7CD56E4E484B9B744CFD9DBDF3E22E2
Authority key identifier: 11:AC:CE:96:94:0D:E0:E2:6C:C7:9C:C9:DE:02:FF:43:4F:33:C2:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/3139312e372e3137362e302f32312d3234203d3e20323633333236.roa
Signing time:             Tue 19 Dec 2023 12:31:54 +0000
ROA not before:           Tue 19 Dec 2023 12:26:54 +0000
ROA not after:            Tue 17 Dec 2024 12:31:54 +0000
asID:                     263326
IP address blocks:        191.7.176.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:11:dd:3b:e7:cd:56:e4:e4:84:b9:b7:44:cf:d9:db:df:3e:22:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ACCE96940DE0E26CC79CC9DE02FF434F33C267
        Validity
            Not Before: Dec 19 12:26:54 2023 GMT
            Not After : Dec 17 12:31:54 2024 GMT
        Subject: CN=2F044A17331B1E204E278E1AB570A2E71B58274D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:4a:2f:0a:07:a2:95:b1:06:9c:e4:1b:cd:
                    6a:29:5e:66:04:b6:e4:13:f2:38:8e:6e:25:85:f3:
                    30:f7:77:dc:ce:11:51:10:ce:71:c6:43:d5:ef:87:
                    0d:00:ed:5c:7a:d7:a3:8a:3d:67:f5:c4:33:74:29:
                    33:af:52:a4:e3:5e:49:bb:b6:f8:c6:0b:5d:86:19:
                    b5:37:f6:58:4b:06:89:8c:94:b0:7a:93:d2:71:f1:
                    2c:52:6d:c3:08:5f:8d:eb:89:ba:ad:e8:b2:05:3d:
                    1d:3d:51:da:1c:27:a4:ba:04:e0:3b:6d:70:55:20:
                    f9:ce:db:66:16:5a:7e:d5:50:35:0f:dc:68:5d:4f:
                    0d:c3:0b:e1:46:6d:06:c1:a2:8b:1e:a9:6b:eb:f5:
                    9e:a7:61:6d:60:fb:01:84:7c:88:f8:b0:96:d2:6f:
                    40:5d:fe:c6:3a:0b:f0:ed:26:fc:60:ba:39:1f:3f:
                    5d:7b:9d:97:ed:c0:fc:6c:42:c0:bf:dd:b7:92:bf:
                    17:1d:9a:7a:2e:ad:03:8c:ae:33:a3:a5:1a:81:76:
                    0a:37:6a:76:ed:a6:5c:a4:52:af:04:18:67:af:28:
                    a1:83:92:d5:c3:cb:34:c7:3e:fa:6a:c1:af:2f:83:
                    76:c9:b2:fb:90:1c:8a:1c:4c:d0:28:cd:2f:3f:a1:
                    cb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:04:4A:17:33:1B:1E:20:4E:27:8E:1A:B5:70:A2:E7:1B:58:27:4D
            X509v3 Authority Key Identifier:
                keyid:11:AC:CE:96:94:0D:E0:E2:6C:C7:9C:C9:DE:02:FF:43:4F:33:C2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/3139312e372e3137362e302f32312d3234203d3e20323633333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:e4:94:96:58:40:d6:d4:f7:69:96:ab:49:f8:7f:24:1d:71:
         25:42:d5:df:66:a9:29:0a:79:17:f8:86:de:b6:6e:62:b8:33:
         b4:37:33:7b:0d:f2:ff:24:97:7c:a0:6b:8d:6d:dc:e4:e4:c9:
         c3:58:ca:25:5f:4c:03:71:84:ec:7f:8a:f8:83:d2:9d:41:c4:
         9f:d4:a7:7d:a8:6a:8a:9a:15:9a:3b:40:80:31:10:02:d8:22:
         6e:eb:37:89:d5:86:76:b2:51:df:fb:97:1e:db:11:5f:cd:e0:
         e8:db:45:fb:fc:eb:66:6a:f8:6a:ec:6c:55:bb:3e:7c:9e:31:
         17:ed:38:cf:af:b7:5c:0d:1d:75:34:3e:aa:39:6e:5b:8d:37:
         f6:6a:5e:a4:a9:20:af:bb:85:1b:66:60:50:6d:d6:e8:50:f3:
         27:bd:88:b2:e4:c4:e1:b5:d2:5d:53:b6:49:69:03:97:90:34:
         5e:c7:2d:67:69:32:b0:ea:af:7f:43:d9:dc:74:6e:79:dd:14:
         16:1a:9d:d7:12:94:01:84:80:36:d7:4e:2f:e8:6a:85:05:ba:
         eb:31:2f:72:20:bf:19:a2:44:a0:d1:b3:1d:a8:b6:94:2c:1e:
         70:dc:b4:6b:eb:c5:19:b1:bf:bb:5f:cb:5b:32:b8:65:4a:67:
         68:cb:82:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org