Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/1/3139322e3233312e3131382e302f32332d3332203d3e20323731323436.roa
File:                     3139322e3233312e3131382e302f32332d3332203d3e20323731323436.roa (raw, json)
Hash identifier:          kvj2Z5Oemn1yJ7kbLlv9NY60+XEPGtZ9O7uiJrMjugc=
Subject key identifier:   91:B1:47:4E:89:1F:DE:27:0E:D5:95:8C:F8:7E:09:DA:B0:18:C7:9F
Certificate issuer:       /CN=2A49F61A38C4E4F1DB9BF93B13E13C548874FD4F
Certificate serial:       5679C879753A3B918E0813E6A104E8CC787FC814
Authority key identifier: 2A:49:F6:1A:38:C4:E4:F1:DB:9B:F9:3B:13:E1:3C:54:88:74:FD:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A49F61A38C4E4F1DB9BF93B13E13C548874FD4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/1/3139322e3233312e3131382e302f32332d3332203d3e20323731323436.roa
Signing time:             Sat 06 Apr 2024 15:27:00 +0000
ROA not before:           Sat 06 Apr 2024 15:22:00 +0000
ROA not after:            Sat 05 Apr 2025 15:27:00 +0000
asID:                     271246
IP address blocks:        192.231.118.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:79:c8:79:75:3a:3b:91:8e:08:13:e6:a1:04:e8:cc:78:7f:c8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A49F61A38C4E4F1DB9BF93B13E13C548874FD4F
        Validity
            Not Before: Apr  6 15:22:00 2024 GMT
            Not After : Apr  5 15:27:00 2025 GMT
        Subject: CN=91B1474E891FDE270ED5958CF87E09DAB018C79F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:27:ff:7e:41:85:dc:ca:59:14:46:59:33:fd:
                    88:1d:1e:d0:a3:58:f7:d8:8e:77:11:ec:59:aa:a9:
                    0f:df:17:0f:67:57:73:91:7b:d4:25:86:12:a5:fa:
                    56:8e:35:7d:30:68:0a:4d:8a:d6:48:ba:f5:77:c5:
                    fb:58:dd:36:43:20:7d:5b:7d:29:ec:75:a8:18:b9:
                    ab:9e:1c:28:2b:38:a6:37:64:25:09:67:69:1d:9c:
                    25:a0:11:47:df:e3:37:9e:33:d2:4e:9d:24:0e:62:
                    79:aa:56:e5:23:87:4e:fd:9c:58:04:08:c5:69:2e:
                    6e:1c:cf:ec:23:ce:cd:15:d7:dd:f3:c2:a6:eb:18:
                    eb:c5:5e:77:61:aa:2d:5c:1f:3e:0f:49:92:72:51:
                    2d:1f:6b:ee:8f:e0:0b:f5:7d:81:6c:16:34:34:d9:
                    6c:3a:86:f4:47:f9:a1:74:c0:62:a9:20:fd:81:b4:
                    75:51:24:e9:4e:8c:f3:95:4a:dc:64:df:04:22:f3:
                    9e:c8:51:74:9b:e9:5c:f8:a2:ce:45:a3:42:08:19:
                    79:20:65:ab:ff:97:24:d0:62:d9:b4:8d:11:b0:b5:
                    cb:67:f4:71:cb:da:3f:35:67:6f:0c:90:38:35:a2:
                    13:48:02:63:a6:be:d2:98:3e:7c:04:fa:58:af:dc:
                    ef:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B1:47:4E:89:1F:DE:27:0E:D5:95:8C:F8:7E:09:DA:B0:18:C7:9F
            X509v3 Authority Key Identifier:
                keyid:2A:49:F6:1A:38:C4:E4:F1:DB:9B:F9:3B:13:E1:3C:54:88:74:FD:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/1/2A49F61A38C4E4F1DB9BF93B13E13C548874FD4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A49F61A38C4E4F1DB9BF93B13E13C548874FD4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/1/3139322e3233312e3131382e302f32332d3332203d3e20323731323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:92:bf:2e:da:b7:52:ca:9c:81:41:d9:b4:fe:c6:9f:98:46:
         e4:d7:43:14:08:83:f5:f8:dd:8d:00:5c:73:9c:5f:ca:19:54:
         b8:cc:76:cf:a5:7f:b0:bf:6c:af:33:38:81:5a:39:60:21:5e:
         cd:17:7d:a0:88:04:91:db:15:8c:fc:24:e6:92:8d:5f:50:76:
         05:22:d6:6f:0d:dd:5c:91:3a:b2:40:80:d5:64:a2:bc:4b:58:
         c5:ed:cd:6f:81:83:8b:34:40:87:c0:5c:cc:47:23:78:c1:ff:
         9e:d4:b3:6e:e6:84:07:e6:53:6a:71:c1:93:8d:b6:6f:83:55:
         21:dd:39:e4:6f:66:37:f9:f7:95:09:56:6e:66:e3:13:a7:b7:
         96:7f:93:8e:2f:8d:6a:a0:ad:56:a3:9a:f6:66:86:9d:5d:30:
         a6:c7:c6:e3:30:60:10:40:be:4e:ea:16:16:e0:c9:6b:fc:04:
         8e:32:42:1d:3f:22:14:c6:72:a3:d4:e6:64:db:57:a6:78:9b:
         f0:07:e6:45:8e:33:2a:4a:8d:a3:e5:85:b9:c0:f7:31:50:8a:
         53:b8:89:9a:d5:ba:7b:a5:20:a5:4b:3b:fd:1b:10:35:ad:de:
         6c:2c:d2:d4:e3:1c:fd:e0:1e:ca:21:fd:f8:ec:ab:8d:5f:55:
         ba:7e:42:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org