Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa
File:                     3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa (raw, json)
Hash identifier:          32vkG8uD3lJZMexYSWjFPB8xGToqHxckfUNJLcHZdis=
Subject key identifier:   FE:68:70:52:41:F3:9A:AB:2E:59:CF:18:7E:C5:01:45:5F:64:87:E6
Certificate issuer:       /CN=2C4B5D91DF80C594C7B1DF25F4C057357AD160EF
Certificate serial:       04DE78EB590088AC3208CE66321099AD02042A60
Authority key identifier: 2C:4B:5D:91:DF:80:C5:94:C7:B1:DF:25:F4:C0:57:35:7A:D1:60:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa
Signing time:             Wed 08 Nov 2023 11:56:30 +0000
ROA not before:           Wed 08 Nov 2023 11:51:30 +0000
ROA not after:            Wed 06 Nov 2024 11:56:30 +0000
asID:                     263359
IP address blocks:        191.37.128.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:de:78:eb:59:00:88:ac:32:08:ce:66:32:10:99:ad:02:04:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C4B5D91DF80C594C7B1DF25F4C057357AD160EF
        Validity
            Not Before: Nov  8 11:51:30 2023 GMT
            Not After : Nov  6 11:56:30 2024 GMT
        Subject: CN=3082010A0282010100BF4924557C376A4C33B9121EDB3E80CBEAF2F0627477DD611CFF9A16621E8CCDBDDE37B1DD76F7007CAD66B30854CCCA8CD9DF214E39388CB81732840ED7F1DA0FFEAAD3C1037C5CEE6C2304165CFE17FBCA8F9180BC7B1673F781F8A1036CCE78508E1556CBC005817D2111F3E15CEC0B30A8018FD0F3D49A65D7EC48C102A7264DDAFB9C96E16D4BBC2F6A0094B67BD1CFB4BEA8795933213A4F567444DFF93B517E7DFC25682A1E8F17FB837CD1985B59C624971F2F2858D97AA78A6DD0E72B04A76C8D4B43E457BB2A668A54A662635A1B258A594F9241E4CE3C425D9A5C16977CAE08F1357D870464ACE6BA94282F5BE4CF37453A3954723948F290A2C70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:24:55:7c:37:6a:4c:33:b9:12:1e:db:3e:
                    80:cb:ea:f2:f0:62:74:77:dd:61:1c:ff:9a:16:62:
                    1e:8c:cd:bd:de:37:b1:dd:76:f7:00:7c:ad:66:b3:
                    08:54:cc:ca:8c:d9:df:21:4e:39:38:8c:b8:17:32:
                    84:0e:d7:f1:da:0f:fe:aa:d3:c1:03:7c:5c:ee:6c:
                    23:04:16:5c:fe:17:fb:ca:8f:91:80:bc:7b:16:73:
                    f7:81:f8:a1:03:6c:ce:78:50:8e:15:56:cb:c0:05:
                    81:7d:21:11:f3:e1:5c:ec:0b:30:a8:01:8f:d0:f3:
                    d4:9a:65:d7:ec:48:c1:02:a7:26:4d:da:fb:9c:96:
                    e1:6d:4b:bc:2f:6a:00:94:b6:7b:d1:cf:b4:be:a8:
                    79:59:33:21:3a:4f:56:74:44:df:f9:3b:51:7e:7d:
                    fc:25:68:2a:1e:8f:17:fb:83:7c:d1:98:5b:59:c6:
                    24:97:1f:2f:28:58:d9:7a:a7:8a:6d:d0:e7:2b:04:
                    a7:6c:8d:4b:43:e4:57:bb:2a:66:8a:54:a6:62:63:
                    5a:1b:25:8a:59:4f:92:41:e4:ce:3c:42:5d:9a:5c:
                    16:97:7c:ae:08:f1:35:7d:87:04:64:ac:e6:ba:94:
                    28:2f:5b:e4:cf:37:45:3a:39:54:72:39:48:f2:90:
                    a2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:68:70:52:41:F3:9A:AB:2E:59:CF:18:7E:C5:01:45:5F:64:87:E6
            X509v3 Authority Key Identifier:
                keyid:2C:4B:5D:91:DF:80:C5:94:C7:B1:DF:25:F4:C0:57:35:7A:D1:60:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:09:f9:57:06:43:b1:64:e6:2e:f1:26:b7:bb:a6:4e:70:45:
         6c:07:31:94:99:09:79:63:c5:68:e4:d2:39:1f:8c:1e:29:09:
         8e:27:ab:e2:80:f5:0f:37:94:7f:7e:df:24:7d:40:0d:b3:2b:
         d3:4e:8a:17:42:48:48:76:7f:4c:eb:5e:91:a3:de:86:bc:03:
         2c:29:68:65:f9:d3:05:53:42:dc:1b:03:a6:e3:49:33:4b:a4:
         e5:97:19:42:96:20:bf:f7:d7:14:b8:e8:99:9b:55:af:6c:be:
         a5:55:6b:c8:51:3a:92:60:13:7c:25:f3:dd:22:85:1e:32:e0:
         8a:e7:4e:12:d3:9c:3f:2f:41:50:be:f7:ff:6f:23:c5:27:a7:
         69:73:0d:86:44:a9:5b:25:a1:17:85:20:dd:88:be:ce:8f:cf:
         29:b2:3b:85:78:54:c7:ec:81:eb:42:64:f4:a4:77:bc:0c:44:
         e0:29:3a:6b:ee:b1:be:9e:0a:f1:ca:5a:a3:7c:50:01:74:6d:
         3c:49:0f:9f:03:27:89:38:25:fa:c6:ca:2e:ec:ca:43:87:5d:
         c7:e5:e9:02:8a:96:23:39:e3:27:27:5c:a5:66:1b:f7:0a:8b:
         ce:2e:21:64:b8:77:3b:39:dc:c8:8f:e5:d6:1d:82:19:ef:1a:
         70:7f:cc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org