Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/3139312e362e3137362e302f32302d3234203d3e20323632343238.roa
File:                     3139312e362e3137362e302f32302d3234203d3e20323632343238.roa (raw, json)
Hash identifier:          hf85B1WEZhtLdHkuw1S/dtJCa+1DWpx1Zdpg/ZiXd30=
Subject key identifier:   7B:27:D2:12:4A:32:03:EC:18:E6:B9:57:50:BA:3B:4C:9C:23:D0:19
Certificate issuer:       /CN=2FF2F84183D096398A51FA6F044F57FCC8A45BB7
Certificate serial:       1200F626B10F355C4547C7B77A02E7E4934C955C
Authority key identifier: 2F:F2:F8:41:83:D0:96:39:8A:51:FA:6F:04:4F:57:FC:C8:A4:5B:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/3139312e362e3137362e302f32302d3234203d3e20323632343238.roa
Signing time:             Mon 10 Jul 2023 20:00:28 +0000
ROA not before:           Mon 10 Jul 2023 19:55:28 +0000
ROA not after:            Mon 08 Jul 2024 20:00:28 +0000
asID:                     262428
IP address blocks:        191.6.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:00:f6:26:b1:0f:35:5c:45:47:c7:b7:7a:02:e7:e4:93:4c:95:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF2F84183D096398A51FA6F044F57FCC8A45BB7
        Validity
            Not Before: Jul 10 19:55:28 2023 GMT
            Not After : Jul  8 20:00:28 2024 GMT
        Subject: CN=7B27D2124A3203EC18E6B95750BA3B4C9C23D019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:be:e2:99:eb:88:aa:73:b7:01:13:0a:6c:
                    0e:70:85:02:21:54:1f:32:f4:f7:43:45:59:ba:2a:
                    2f:1f:e5:77:4b:ad:54:58:4c:c3:8b:a4:bb:ed:28:
                    aa:c3:19:1a:f1:56:3f:01:36:2d:12:71:f4:b4:61:
                    37:3c:a8:2e:06:92:61:e6:03:73:d3:39:fc:51:3c:
                    08:73:a1:46:e1:57:d6:79:84:6e:db:3e:84:9d:f2:
                    7d:95:cc:61:9e:0c:bd:72:dd:95:20:71:cd:30:fd:
                    c4:9f:dd:97:00:2a:11:8b:91:37:34:e9:03:70:bc:
                    6a:65:f1:36:e3:ee:eb:06:b9:e4:2a:20:fb:e9:6c:
                    fd:38:7f:21:31:20:83:57:be:0c:6c:15:6e:82:58:
                    b3:f0:79:fc:aa:18:f7:5b:09:30:e2:d4:44:3e:06:
                    d3:6f:a4:a2:0b:7f:65:1f:ab:3d:05:53:b1:4c:2c:
                    43:8b:f8:99:f8:a0:f0:34:4a:c9:e7:44:94:f4:46:
                    41:4b:6e:eb:c4:16:bd:83:87:e9:ff:3a:d3:14:4d:
                    52:8c:61:1e:85:98:73:22:23:39:3e:4b:4d:29:b9:
                    7f:c5:14:c6:4b:2f:da:c7:f7:8e:9a:5b:b4:75:b7:
                    61:74:6f:f3:ad:90:39:b2:a0:26:6d:9a:69:fb:56:
                    95:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:27:D2:12:4A:32:03:EC:18:E6:B9:57:50:BA:3B:4C:9C:23:D0:19
            X509v3 Authority Key Identifier:
                keyid:2F:F2:F8:41:83:D0:96:39:8A:51:FA:6F:04:4F:57:FC:C8:A4:5B:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/3139312e362e3137362e302f32302d3234203d3e20323632343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:3c:a6:60:5a:4e:10:71:e5:ca:a5:fc:92:9a:64:31:d5:65:
         a9:99:12:1c:29:49:25:20:fd:b5:14:34:3a:f8:e4:9e:ef:2d:
         e4:43:57:2f:3c:ff:ef:d4:8b:d8:63:d1:5d:ba:70:2d:96:6b:
         82:cf:b1:60:3e:a7:5d:7b:df:fb:a2:bd:fd:93:fd:15:7d:30:
         7f:b5:9d:94:d3:2c:2f:da:89:dd:71:21:3c:59:27:33:13:45:
         31:49:72:66:dd:fd:97:69:cd:37:a5:e4:64:5c:9a:cf:81:04:
         6a:fd:15:88:5b:dc:6b:0a:30:ab:b5:f1:a0:18:e8:50:e0:43:
         61:fb:b2:28:2a:00:ba:58:32:6b:66:c5:e1:4c:35:98:3f:4d:
         a8:c9:e6:3b:bd:0c:6f:c1:14:43:ca:da:dc:50:0a:3a:38:fa:
         6b:ef:af:28:e4:0c:96:be:3f:8b:04:fe:b0:02:71:0f:87:f5:
         bc:46:3f:a5:70:c3:20:c4:74:44:ad:2f:3b:0b:f1:20:66:d7:
         6d:32:72:9f:98:ba:39:98:aa:1f:b2:92:c9:c4:38:df:f5:bc:
         05:b7:96:28:c0:7d:9f:7b:8b:4a:bb:3b:40:0e:68:38:58:8b:
         15:26:f3:3a:46:4d:c5:84:fe:0d:1a:c6:a1:78:61:f4:2b:7f:
         55:9e:e2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org