Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3235302e302f32342d3234203d3e20323633343231.roa
File:                     3137392e3139312e3235302e302f32342d3234203d3e20323633343231.roa (raw, json)
Hash identifier:          B8mO++Rl+G8h37wvN9SX9y1ZnsunxYMVqzrYhh/OEHs=
Subject key identifier:   27:66:45:DA:F0:D0:2B:8E:8A:A3:F8:2B:E6:EA:68:55:28:B8:D1:2B
Certificate issuer:       /CN=411194BD84722FD252C79F3307A7C3ACFDC84782
Certificate serial:       207B0068FBBC361FA0255FECF1C2F2F87A5EF0E2
Authority key identifier: 41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3235302e302f32342d3234203d3e20323633343231.roa
Signing time:             Thu 13 Apr 2023 20:21:48 +0000
ROA not before:           Thu 13 Apr 2023 20:16:48 +0000
ROA not after:            Thu 11 Apr 2024 20:21:48 +0000
asID:                     263421
IP address blocks:        179.191.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7b:00:68:fb:bc:36:1f:a0:25:5f:ec:f1:c2:f2:f8:7a:5e:f0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411194BD84722FD252C79F3307A7C3ACFDC84782
        Validity
            Not Before: Apr 13 20:16:48 2023 GMT
            Not After : Apr 11 20:21:48 2024 GMT
        Subject: CN=276645DAF0D02B8E8AA3F82BE6EA685528B8D12B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:78:49:34:5c:f1:d8:cb:1c:d5:93:35:69:c4:
                    e8:fc:6d:e4:d2:df:58:8d:39:fb:28:6c:a5:15:a2:
                    e7:c7:f8:57:a8:9a:bf:5a:69:8b:19:67:16:a2:8e:
                    b8:3d:7f:19:7e:11:5f:e1:30:fd:57:fc:39:08:50:
                    1c:79:c0:1d:61:e5:94:7d:f1:ba:c1:6d:13:b4:30:
                    54:be:56:e0:8f:2e:b5:24:c1:e1:c0:25:28:18:a1:
                    17:d8:42:17:8a:b0:e3:30:aa:8c:e9:aa:47:34:d6:
                    d1:64:ec:66:57:33:b8:f5:68:6b:66:5b:05:51:93:
                    c7:cf:04:ff:15:8a:c3:e8:93:eb:8d:7d:f3:6a:90:
                    0f:c0:c2:8a:41:da:63:07:3f:c4:cb:a8:bb:ba:f2:
                    f4:b3:27:c7:0c:9d:57:76:b3:9f:96:06:28:8c:f3:
                    e1:d5:1f:99:4a:0e:c7:bc:e0:43:bf:4b:6c:6f:74:
                    20:a8:02:0e:35:2a:9c:61:c4:02:2c:94:97:34:57:
                    30:7b:8e:a3:91:09:e7:95:6a:24:bf:65:ba:25:4f:
                    7d:10:ee:f1:c9:6c:eb:02:e7:33:9e:01:66:33:0b:
                    5d:57:e6:1f:99:bc:03:d7:d0:8e:ea:e2:3d:0f:a6:
                    95:91:13:ea:db:63:b3:9c:6d:5b:be:9e:d6:d9:96:
                    3a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:66:45:DA:F0:D0:2B:8E:8A:A3:F8:2B:E6:EA:68:55:28:B8:D1:2B
            X509v3 Authority Key Identifier:
                keyid:41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/411194BD84722FD252C79F3307A7C3ACFDC84782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3235302e302f32342d3234203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:c7:41:81:cd:a0:9d:4e:58:59:54:9a:67:03:11:33:f6:29:
         72:40:1e:aa:35:ef:69:5f:e3:12:35:c0:8d:02:84:ea:b6:c0:
         c2:75:f3:81:9d:4f:5e:8a:e0:2b:83:cb:a5:9c:d3:f6:43:5d:
         18:d0:03:c1:bd:c8:eb:89:66:e6:4e:ac:18:bc:46:ab:2b:e0:
         e3:62:9f:ea:7b:4f:75:aa:01:60:92:b2:fa:fb:f1:b6:93:1b:
         39:84:b1:0a:ed:fb:89:13:f2:66:40:87:65:b0:2b:52:1d:12:
         22:33:e6:6b:f6:15:aa:7a:02:7c:8a:8d:ab:83:97:d5:61:ca:
         4f:1a:bc:ed:16:24:f4:74:d4:45:0e:90:4e:dc:a0:90:81:2b:
         3d:6f:6a:3f:9d:0e:10:59:af:6d:67:2d:41:38:d4:8b:3c:9c:
         b9:9f:6c:c4:4f:b3:7c:1a:ae:ac:16:7e:a0:f3:e7:94:ed:61:
         dc:78:76:c7:54:8e:a7:42:a1:79:2d:47:90:3a:cd:96:51:37:
         88:05:c2:e8:e7:d4:2d:3a:7e:3d:6f:a4:f7:43:cf:23:38:fc:
         8e:ef:03:4b:03:85:3a:49:68:bd:5b:a6:71:6b:fb:06:a7:ef:
         8f:6c:ad:1d:21:57:92:de:e6:5a:00:79:24:ec:17:5e:d7:25:
         38:aa:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:30 2023 by rpki-client on console.sobornost.net