Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa
File:                     3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa (raw, json)
Hash identifier:          iNo5kddqtN3J+L847M29QyUyk9OMAP8RuiWzxlk9t+E=
Subject key identifier:   7A:E5:6B:DB:52:83:D2:97:47:5E:2B:D9:C9:8D:10:C5:FE:FF:DC:77
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       1FFA54F4EAAA8418185B17A9201720639BF94288
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:27:20 +0000
ROA not before:           Fri 08 Mar 2024 18:22:20 +0000
ROA not after:            Fri 07 Mar 2025 18:27:20 +0000
asID:                     267458
IP address blocks:        192.141.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fa:54:f4:ea:aa:84:18:18:5b:17:a9:20:17:20:63:9b:f9:42:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:22:20 2024 GMT
            Not After : Mar  7 18:27:20 2025 GMT
        Subject: CN=7AE56BDB5283D297475E2BD9C98D10C5FEFFDC77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e3:e4:f4:69:e3:64:4c:b3:7d:5a:b6:3b:8f:
                    7d:72:bc:00:21:e8:fa:40:f1:b1:de:f3:f4:24:cd:
                    53:52:1b:02:79:ec:ba:5b:50:f7:91:90:44:f6:06:
                    0e:ca:f6:7a:01:bd:4b:2b:05:9a:a4:03:fd:cd:3c:
                    26:94:1a:7b:f0:8a:43:98:2e:b9:42:9d:5d:20:6b:
                    1c:c8:a9:21:43:ea:60:a9:df:3c:fd:e2:8b:45:a9:
                    ea:25:3f:62:df:96:7f:3e:cd:c2:d9:9a:90:f9:cd:
                    23:23:c0:92:56:b3:e7:44:53:d2:f4:9d:59:e5:a3:
                    7b:3a:d3:b6:94:0b:c8:4b:05:7e:86:88:ad:ec:61:
                    fd:64:30:59:9c:fa:54:1c:3c:12:e2:de:aa:71:d5:
                    e1:dc:24:1b:a1:9b:36:b0:37:51:68:a0:85:7a:0e:
                    c5:8b:96:4a:52:dc:50:fa:97:6b:db:55:96:e8:67:
                    ed:23:1a:de:25:05:2d:f3:c7:8e:56:a3:71:cc:f0:
                    4b:98:4d:28:6a:0c:0c:85:99:c9:92:ba:2b:32:ea:
                    60:c6:bc:d3:5a:6f:0c:43:6f:bb:7e:f2:15:f1:cb:
                    f0:55:aa:d5:9b:4d:7d:b2:31:a6:d3:f1:dd:f3:c1:
                    7d:80:cf:15:1f:45:57:2f:e8:7f:95:8d:8b:75:a0:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E5:6B:DB:52:83:D2:97:47:5E:2B:D9:C9:8D:10:C5:FE:FF:DC:77
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:06:d0:a4:ef:ac:b5:b2:14:63:78:f6:25:41:14:fd:0f:c9:
         35:a1:5b:5e:9b:8a:61:cf:d0:58:2b:ea:02:8d:7a:f2:83:80:
         e7:4b:c7:45:45:65:c9:04:ff:13:34:40:70:3d:55:23:db:c9:
         a9:02:41:c5:18:a5:16:eb:c3:de:5e:fc:7a:05:9e:35:c6:c3:
         71:a1:06:13:6f:64:13:29:b5:48:12:75:cc:07:e3:22:67:0d:
         b7:01:d3:af:15:5e:87:18:3b:8d:c1:97:75:c7:67:cc:86:0f:
         83:72:91:ac:dd:d3:ed:a0:da:47:48:14:d6:75:a0:7b:ca:7e:
         80:3f:f5:87:ef:51:b3:35:45:14:99:27:36:c9:4c:6e:6e:67:
         c4:91:91:88:60:1d:1b:1e:17:b5:db:f2:d3:50:d0:3d:ea:29:
         57:b9:c7:d3:da:c1:3d:94:0b:73:49:b6:8e:e8:f3:a0:3b:3c:
         11:38:ac:b7:4d:b4:f5:c5:e0:5d:8b:89:f2:dc:51:dd:9a:78:
         4b:5c:bd:c8:f1:55:46:f7:bb:6d:48:ed:ad:9f:7b:43:9a:f5:
         58:3e:0f:c2:12:37:60:8d:90:f4:d5:14:8e:1b:5e:09:95:b5:
         eb:de:ad:28:5e:c4:05:74:da:b8:80:eb:7b:9f:48:8d:35:82:
         7d:42:c5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org