Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3132382e302f32312d3231203d3e20323633333539.roa
File:                     3139312e33372e3132382e302f32312d3231203d3e20323633333539.roa (raw, json)
Hash identifier:          WbiTo2+3HctTq85/+lbsQaVvaG8G0T4yDgwtRm5Im6c=
Subject key identifier:   EE:9F:7A:FA:0F:F8:F9:D9:FB:EF:F0:62:47:D1:D6:07:AB:70:98:58
Certificate issuer:       /CN=2C4B5D91DF80C594C7B1DF25F4C057357AD160EF
Certificate serial:       106CCAAE0134FE4C99DB8BEF467140199BB8E96A
Authority key identifier: 2C:4B:5D:91:DF:80:C5:94:C7:B1:DF:25:F4:C0:57:35:7A:D1:60:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3132382e302f32312d3231203d3e20323633333539.roa
Signing time:             Mon 22 May 2023 21:00:00 +0000
ROA not before:           Mon 22 May 2023 20:55:00 +0000
ROA not after:            Mon 20 May 2024 21:00:00 +0000
asID:                     263359
IP address blocks:        191.37.128.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6c:ca:ae:01:34:fe:4c:99:db:8b:ef:46:71:40:19:9b:b8:e9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C4B5D91DF80C594C7B1DF25F4C057357AD160EF
        Validity
            Not Before: May 22 20:55:00 2023 GMT
            Not After : May 20 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:f2:35:58:08:f2:e9:b7:5c:7f:43:41:ee:
                    97:6a:92:bc:9e:57:af:67:83:53:ab:2a:b8:00:56:
                    ae:0d:86:94:ab:7c:af:a2:4b:3c:1d:00:55:5b:96:
                    90:23:cd:5e:3a:75:bb:5f:e3:3f:d8:c0:3f:7c:a3:
                    d7:99:65:c5:c8:96:f3:af:41:b0:e0:bb:ee:14:9c:
                    1e:17:f8:88:5e:41:3e:2f:10:87:32:4d:ab:7c:b6:
                    78:a4:33:63:86:85:0c:7b:76:bb:4e:3c:fd:2d:f1:
                    ee:10:59:eb:c7:53:03:3e:d3:5e:00:8f:85:ee:02:
                    b5:6b:36:b4:72:4b:84:d3:f4:b2:30:eb:39:8e:12:
                    6d:e1:25:c8:0f:25:d5:bf:f5:2f:09:13:c1:0d:a7:
                    25:a5:3a:8b:6f:41:db:7a:a5:46:28:95:fb:23:a0:
                    07:ab:9a:56:f6:95:72:08:b3:26:d6:33:78:1e:85:
                    f9:bf:f9:23:1a:fc:7e:83:12:4b:74:25:65:ed:86:
                    da:2f:bc:6a:9a:e4:ee:97:9f:c8:00:5f:6d:66:e7:
                    fa:7f:03:1b:33:8d:66:ce:44:94:1e:08:90:09:96:
                    3e:b6:8d:64:4b:07:19:67:f6:b1:bd:43:3c:f7:33:
                    14:fa:fd:9f:70:5c:de:fb:46:ae:f1:50:c7:6d:d6:
                    20:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9F:7A:FA:0F:F8:F9:D9:FB:EF:F0:62:47:D1:D6:07:AB:70:98:58
            X509v3 Authority Key Identifier:
                keyid:2C:4B:5D:91:DF:80:C5:94:C7:B1:DF:25:F4:C0:57:35:7A:D1:60:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3132382e302f32312d3231203d3e20323633333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:12:63:5b:8e:a0:8d:27:ed:a6:b2:6e:a0:1d:b8:b9:2b:5f:
         38:51:15:ca:62:97:18:31:a3:50:c5:56:98:ca:64:1d:78:44:
         53:0c:b1:4f:a9:5a:2a:cf:08:e2:1f:ed:5c:0e:97:0c:2a:2e:
         35:46:00:62:de:0d:87:f5:e9:e7:cb:41:57:82:46:de:aa:67:
         80:2b:9f:d3:1a:09:77:3f:00:88:77:90:ac:e2:11:08:60:73:
         b3:0c:9a:ea:cb:5a:56:0a:21:27:2f:a6:3f:32:37:22:f5:e2:
         94:40:0a:e3:fc:3d:55:b6:97:28:3d:b5:0c:05:0e:e2:9b:8a:
         5a:8d:6c:46:5f:ea:e2:8b:a0:f9:ef:60:b0:47:d4:98:a2:24:
         36:71:d0:04:5b:47:e2:1c:e1:87:8c:40:87:65:dd:09:ab:3e:
         13:9b:be:b8:cf:a1:5e:8f:5d:a4:95:c7:a8:f8:29:d0:9a:4e:
         6c:5c:60:70:59:71:fa:7b:29:7e:e6:c2:39:bf:89:1c:9e:6b:
         88:46:34:2d:2a:ec:36:11:3d:ad:57:82:37:da:90:27:cb:bc:
         74:91:8d:9d:3e:02:69:a7:fa:2f:73:1b:9c:b2:d3:dc:e1:80:
         2d:2f:55:50:17:f8:55:4f:7d:b7:92:bb:fc:94:ef:bd:d5:b6:
         f0:0a:0e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org