Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139362e302f32322d3234203d3e20323633313433.roa
File:                     3139312e3234322e3139362e302f32322d3234203d3e20323633313433.roa (raw, json)
Hash identifier:          PV9TtPZt6RKUqVUt1Y4nldc+//3bd+OD7nru5qRjUmc=
Subject key identifier:   59:CE:C0:B2:98:D4:56:8A:14:20:53:43:43:CD:DF:FA:E5:C0:CB:DE
Certificate issuer:       /CN=F7911F6B04656B731BC0B74D5BD51D45A31C674E
Certificate serial:       1E06845F89B42EE848871EC76FE1F18CA5781C96
Authority key identifier: F7:91:1F:6B:04:65:6B:73:1B:C0:B7:4D:5B:D5:1D:45:A3:1C:67:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7911F6B04656B731BC0B74D5BD51D45A31C674E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139362e302f32322d3234203d3e20323633313433.roa
Signing time:             Thu 19 Jan 2023 00:35:26 +0000
ROA not before:           Thu 19 Jan 2023 00:30:26 +0000
ROA not after:            Thu 18 Jan 2024 00:35:26 +0000
asID:                     263143
IP address blocks:        191.242.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:06:84:5f:89:b4:2e:e8:48:87:1e:c7:6f:e1:f1:8c:a5:78:1c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7911F6B04656B731BC0B74D5BD51D45A31C674E
        Validity
            Not Before: Jan 19 00:30:26 2023 GMT
            Not After : Jan 18 00:35:26 2024 GMT
        Subject: CN=59CEC0B298D4568A1420534343CDDFFAE5C0CBDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f1:4e:2c:b3:d0:2c:ea:a6:bb:2c:1d:31:30:
                    8c:d1:0e:73:e1:52:da:a9:9b:11:74:9c:04:5a:59:
                    af:21:80:d5:7f:3e:f9:8c:77:be:12:35:ba:9e:21:
                    c0:61:eb:45:aa:b8:7e:cf:f9:bc:63:96:a8:44:79:
                    f6:0b:78:79:19:b5:1a:51:22:d3:ce:d5:f8:a2:5b:
                    a4:4f:6a:b7:5f:31:3c:0f:0b:1c:69:0c:9f:ab:40:
                    df:39:03:7a:0e:5b:64:5d:ab:34:bf:bf:9f:9d:8b:
                    ab:d4:63:77:c3:11:ea:3c:1b:c3:98:94:0a:b9:d9:
                    58:1f:e8:3b:13:de:23:8c:0e:fb:e2:9e:fb:31:ed:
                    0b:6b:e7:ea:8e:54:7c:e1:18:b5:51:da:2e:ce:f6:
                    a7:e5:07:88:e6:be:2d:6c:45:6e:7a:a4:72:62:92:
                    cd:e1:24:d1:68:1b:6c:49:74:29:55:02:cb:2c:a8:
                    a2:bb:bc:92:fd:85:68:54:a7:fe:79:c2:b5:e5:26:
                    b8:8e:7e:d0:d2:f8:4f:72:a1:ff:f2:c6:a9:74:56:
                    c8:bb:ea:d3:e2:b4:77:a8:82:55:6f:d5:61:9c:1f:
                    e9:e6:b0:56:ad:4e:64:1b:55:b2:5c:92:d8:09:3d:
                    3b:a4:5d:c3:04:da:e8:7d:bc:8d:bf:03:ed:f1:71:
                    8f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CE:C0:B2:98:D4:56:8A:14:20:53:43:43:CD:DF:FA:E5:C0:CB:DE
            X509v3 Authority Key Identifier:
                keyid:F7:91:1F:6B:04:65:6B:73:1B:C0:B7:4D:5B:D5:1D:45:A3:1C:67:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/F7911F6B04656B731BC0B74D5BD51D45A31C674E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7911F6B04656B731BC0B74D5BD51D45A31C674E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139362e302f32322d3234203d3e20323633313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:60:5b:c7:09:87:30:d8:05:29:cd:5e:f9:96:e5:54:6b:af:
         4f:02:04:76:d3:46:a6:06:30:a1:5c:c5:42:c3:64:b1:dd:c7:
         1b:74:dd:61:4e:67:be:26:de:57:3b:fa:07:3e:71:c8:2c:5d:
         4f:f5:89:da:d9:e1:80:03:20:37:38:f8:94:76:3e:56:d5:15:
         b5:a3:72:7c:6a:21:57:99:a5:93:53:c9:39:51:ea:6b:93:38:
         a1:83:c3:ea:78:9d:37:2a:c9:32:25:17:b7:b1:b2:8c:e2:87:
         1c:c6:3a:bc:e7:57:17:6b:2d:d0:e0:06:db:83:c8:66:0f:2b:
         53:02:53:24:3f:6d:75:1d:e0:18:b5:96:13:e1:be:1a:28:ea:
         25:a2:1e:ef:4a:28:a8:a4:66:a7:a5:eb:85:e9:da:3b:1f:3b:
         0b:08:ae:24:49:a2:48:33:90:1f:17:11:cf:4f:f0:8c:d7:cf:
         b8:cb:4e:08:29:32:85:66:6b:e1:60:95:73:79:59:0e:72:fa:
         d5:d4:43:51:57:54:0e:93:63:1d:5a:48:f5:d0:e5:ee:ea:01:
         53:a6:3b:4f:5e:fe:66:1f:67:41:1e:f2:07:f0:db:e0:85:4b:
         1c:3d:96:59:40:f1:44:e7:e6:93:98:e3:58:23:47:dc:81:b3:
         36:a7:16:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org