Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/3139312e372e3137362e302f32332d3233203d3e20323633333236.roa
File:                     3139312e372e3137362e302f32332d3233203d3e20323633333236.roa (raw, json)
Hash identifier:          uRVL0+8umtfboFrIohgaeLwUwQYVL1Z8v0wuhR6PLv8=
Subject key identifier:   A4:31:92:D6:7E:0E:58:0A:89:9F:C9:2F:6B:FD:19:7C:AE:DE:89:78
Certificate issuer:       /CN=11ACCE96940DE0E26CC79CC9DE02FF434F33C267
Certificate serial:       5295096FD927C94E76D0354DE3968718F3B64FFC
Authority key identifier: 11:AC:CE:96:94:0D:E0:E2:6C:C7:9C:C9:DE:02:FF:43:4F:33:C2:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/3139312e372e3137362e302f32332d3233203d3e20323633333236.roa
Signing time:             Wed 18 Oct 2023 12:18:22 +0000
ROA not before:           Wed 18 Oct 2023 12:13:22 +0000
ROA not after:            Wed 16 Oct 2024 12:18:22 +0000
asID:                     263326
IP address blocks:        191.7.176.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:95:09:6f:d9:27:c9:4e:76:d0:35:4d:e3:96:87:18:f3:b6:4f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ACCE96940DE0E26CC79CC9DE02FF434F33C267
        Validity
            Not Before: Oct 18 12:13:22 2023 GMT
            Not After : Oct 16 12:18:22 2024 GMT
        Subject: CN=A43192D67E0E580A899FC92F6BFD197CAEDE8978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2c:24:fb:66:e2:64:96:fc:a1:9d:e0:65:ef:
                    39:29:9d:67:85:c4:94:11:75:07:7d:79:0c:e1:0a:
                    c9:7d:3c:51:80:da:c4:bf:bc:69:33:7b:21:34:60:
                    8d:2d:2b:fa:40:a0:8d:6a:78:a0:a0:26:3e:03:c1:
                    89:26:b9:d5:8c:38:24:7b:19:09:75:84:ac:50:93:
                    ac:5f:c2:36:f1:2d:1f:eb:3a:ca:8e:e5:c1:fa:01:
                    a4:31:7c:77:8b:27:f5:c9:71:34:10:63:e2:d6:cd:
                    b3:f8:85:2b:8e:a0:0c:c8:5c:44:3c:38:06:61:f1:
                    1f:62:fb:d1:9d:90:2a:d2:74:d7:77:34:84:ab:73:
                    cb:15:1f:5e:76:ac:3b:16:88:56:fa:03:aa:ae:35:
                    46:90:dc:44:ca:5e:b8:97:cc:17:c6:06:4b:85:b9:
                    0b:4e:4e:6f:a5:a9:6f:e1:0f:7a:59:22:b2:3b:c3:
                    96:95:b7:1c:a3:35:d7:bb:68:ad:6f:25:44:dd:fc:
                    94:52:97:ba:94:7c:16:c4:7c:64:1e:09:45:c0:f0:
                    12:52:56:77:d1:17:7b:0b:fc:7d:ca:56:04:2d:c0:
                    00:de:e6:44:c7:36:b7:68:44:d4:dc:6a:65:77:00:
                    50:41:b5:e1:34:1f:c5:a7:2a:8b:10:9b:0e:65:45:
                    9c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:31:92:D6:7E:0E:58:0A:89:9F:C9:2F:6B:FD:19:7C:AE:DE:89:78
            X509v3 Authority Key Identifier:
                keyid:11:AC:CE:96:94:0D:E0:E2:6C:C7:9C:C9:DE:02:FF:43:4F:33:C2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/3139312e372e3137362e302f32332d3233203d3e20323633333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:74:a2:40:99:20:4e:f9:cc:8e:d6:e5:78:3f:f0:5c:94:53:
         19:fd:89:76:1d:0a:cf:87:6e:6b:7b:da:6d:16:0b:ff:d2:36:
         88:e7:cb:6f:14:3b:93:fe:c9:f4:58:bf:5b:28:6b:2a:6b:f5:
         27:a5:57:0e:c9:a0:be:4d:38:2e:28:2e:7a:32:94:01:26:dc:
         33:f7:12:bb:5f:7e:6e:20:9a:5d:be:c7:19:d6:fa:61:55:a4:
         19:25:93:a3:76:73:8b:88:cc:d5:b0:86:62:05:55:3f:38:2c:
         6b:6d:07:e9:43:27:77:df:bb:7b:48:56:fe:e6:a9:5e:ba:06:
         97:1e:db:6a:8b:34:a6:9f:4f:69:cc:b9:2a:97:11:22:ab:53:
         ec:66:4f:30:e4:63:50:0c:bb:01:44:d8:0a:fa:cc:26:25:12:
         af:47:27:6f:74:da:10:7f:53:ef:82:20:70:3c:ed:bd:6c:a1:
         f6:3c:b6:7e:21:31:19:2e:01:28:45:34:ed:00:9f:7f:be:0a:
         cb:e8:4a:2f:2f:fb:01:50:2f:7d:80:18:96:e9:2c:92:63:f1:
         88:62:ec:b2:09:d0:b1:77:89:6a:dc:3a:22:d1:31:5e:8f:ab:
         5e:a9:03:80:48:3f:df:a0:ec:d6:bf:74:c9:78:4a:50:fe:79:
         94:f3:ef:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org