Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137342e302f32342d3234203d3e20323731333030.roa
File:                     3138392e39312e3137342e302f32342d3234203d3e20323731333030.roa (raw, json)
Hash identifier:          xUflGYJV+XeUZBmLcsv+Wg/K/iVBugTrcuLLLbOpoco=
Subject key identifier:   D5:8A:CF:66:2A:9A:B6:F8:44:E5:B2:AB:AD:D5:6E:11:3A:BD:57:9B
Certificate issuer:       /CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
Certificate serial:       7C4FD6C90EC25F29B407A58A6FD5B9D733071FD7
Authority key identifier: 1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137342e302f32342d3234203d3e20323731333030.roa
Signing time:             Wed 09 Nov 2022 20:12:49 +0000
ROA not before:           Wed 09 Nov 2022 20:07:49 +0000
ROA not after:            Wed 08 Nov 2023 20:12:49 +0000
asID:                     271300
IP address blocks:        189.91.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4f:d6:c9:0e:c2:5f:29:b4:07:a5:8a:6f:d5:b9:d7:33:07:1f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
        Validity
            Not Before: Nov  9 20:07:49 2022 GMT
            Not After : Nov  8 20:12:49 2023 GMT
        Subject: CN=D58ACF662A9AB6F844E5B2ABADD56E113ABD579B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:79:43:97:6c:31:97:06:83:e3:5d:67:fb:
                    03:4f:08:23:9d:44:a2:4b:61:59:cb:cd:c0:38:a6:
                    c7:c0:e3:86:72:18:73:9b:bd:1d:5e:fa:bd:70:50:
                    bf:55:50:2e:5f:51:d7:3d:10:3f:09:d8:1d:1e:a9:
                    4a:76:03:e0:20:c8:20:9a:dc:7f:a1:38:a8:d5:a8:
                    5a:18:92:93:56:3c:9d:fd:87:ed:78:f5:d3:e6:d1:
                    1b:fd:dd:d8:1f:8c:a0:31:40:d8:ff:27:b0:ca:54:
                    a2:d9:4c:66:7d:4f:cb:7c:54:0f:17:f7:25:40:4e:
                    46:fe:07:9f:bc:57:8a:fc:9c:26:89:24:e5:ab:57:
                    e8:2a:f4:0e:14:6c:bc:bf:fd:6b:50:68:9a:d3:52:
                    4f:d7:69:bc:90:36:47:0d:84:4e:3b:e4:ac:96:05:
                    00:8d:ab:67:1b:2c:43:c2:e7:ec:bd:27:d9:14:af:
                    5c:0c:54:6d:54:f1:55:85:b3:4d:77:0e:04:e5:6c:
                    1f:6e:52:69:46:ab:22:7b:3d:89:78:6a:a3:d4:9b:
                    19:72:cc:fd:02:24:f2:cd:bd:2a:95:01:99:61:4b:
                    24:36:f3:69:c7:a6:84:f5:95:f7:8b:e6:1e:49:69:
                    bd:bc:bc:80:00:86:30:0b:56:fc:50:d8:c7:30:b9:
                    75:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8A:CF:66:2A:9A:B6:F8:44:E5:B2:AB:AD:D5:6E:11:3A:BD:57:9B
            X509v3 Authority Key Identifier:
                keyid:1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137342e302f32342d3234203d3e20323731333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:48:7b:71:cf:74:a0:b4:59:25:be:e3:d4:23:29:bd:39:51:
         cf:99:40:38:a0:cd:52:d6:3d:4b:2c:9b:f3:12:10:ef:83:3b:
         76:1c:97:8d:07:24:68:18:30:31:91:0e:41:5d:c1:e5:ff:24:
         dc:ad:08:00:62:37:df:2a:3f:99:25:86:25:cb:a7:b7:b2:5f:
         40:6b:f4:f1:42:f8:f9:9b:ff:ae:25:26:10:a9:6b:5f:dc:b5:
         f1:4c:93:99:55:fa:1a:fa:b3:c3:78:00:2e:44:ba:84:a6:c5:
         7a:d4:dc:8e:37:e8:49:eb:af:ec:76:36:08:51:75:aa:a5:e2:
         32:d6:50:39:fc:c7:7a:ef:68:5b:e4:d9:c8:ae:4f:09:ed:f5:
         d4:bd:fc:1c:0c:27:3e:9c:ed:9b:4d:be:c1:30:76:71:b8:db:
         7f:3f:bf:83:ee:2d:8e:ef:0e:dd:6a:1c:ba:dc:d6:c3:36:59:
         26:1c:c7:7f:37:30:43:a4:5f:b0:7a:d4:ce:1d:b4:37:0d:29:
         fc:88:88:cd:9b:b1:3d:5a:0c:ea:b3:4d:41:4b:b4:ca:9c:6d:
         c2:c8:3c:a7:8f:d0:f7:65:4c:70:36:9c:7a:d2:97:02:9b:09:
         24:c5:4f:62:ea:11:68:b0:76:c9:24:ec:5b:9b:92:ad:7c:ed:
         d4:7b:50:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org