Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3132382e302f32322d3232203d3e20323633333539.roa
File:                     3139312e33372e3132382e302f32322d3232203d3e20323633333539.roa (raw, json)
Hash identifier:          GS2aCesUraivdBdKRYq2mF0QRU8/I0Kqx1gFK49i3gU=
Subject key identifier:   1C:2E:E1:CC:00:27:22:B2:69:78:C3:17:E9:32:E5:53:E6:E0:3A:D5
Certificate issuer:       /CN=2C4B5D91DF80C594C7B1DF25F4C057357AD160EF
Certificate serial:       397A8D5042F0C77094D9CE5C8E9526D4912BF923
Authority key identifier: 2C:4B:5D:91:DF:80:C5:94:C7:B1:DF:25:F4:C0:57:35:7A:D1:60:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3132382e302f32322d3232203d3e20323633333539.roa
Signing time:             Tue 23 May 2023 16:00:01 +0000
ROA not before:           Tue 23 May 2023 15:55:01 +0000
ROA not after:            Tue 21 May 2024 16:00:01 +0000
asID:                     263359
IP address blocks:        191.37.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7a:8d:50:42:f0:c7:70:94:d9:ce:5c:8e:95:26:d4:91:2b:f9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C4B5D91DF80C594C7B1DF25F4C057357AD160EF
        Validity
            Not Before: May 23 15:55:01 2023 GMT
            Not After : May 21 16:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f7:a5:29:de:ad:46:ac:d0:09:28:bd:67:48:
                    63:36:25:57:a5:55:ab:ad:57:d6:ac:ec:ea:f8:1e:
                    b2:2d:53:58:39:8c:fc:73:c7:c2:0f:44:b0:63:d2:
                    e0:98:d1:30:1a:b6:b0:de:da:23:57:be:10:79:13:
                    7b:0b:60:2c:df:dd:e8:b7:e5:fd:77:bf:74:00:48:
                    03:39:06:14:69:eb:2f:a0:b8:ab:c9:64:79:6b:f6:
                    b6:87:e5:c9:4e:a8:e2:d3:e3:59:24:f3:d8:d3:a7:
                    b8:b4:a9:ad:ee:08:cf:0c:25:5e:a6:82:cb:e5:e2:
                    be:4d:22:ee:22:f6:43:68:0c:cb:5c:7e:2a:7f:b4:
                    c3:3f:d5:e0:b0:a4:c0:10:db:27:d8:e5:4b:3b:86:
                    96:49:9f:2e:91:58:3e:88:62:2f:2d:5c:55:e3:d3:
                    ed:f2:5c:2c:d2:df:16:5d:f5:d5:a4:50:1d:81:c4:
                    85:39:9d:6b:33:47:bf:61:bb:93:c2:60:94:9e:d8:
                    73:2b:a9:cf:dd:c0:e5:81:f8:99:85:4a:ba:57:2a:
                    71:dd:01:e7:c6:ea:81:3c:17:ec:de:0c:f3:52:3b:
                    5f:7e:02:2a:bb:7b:c2:bc:bb:73:e0:da:36:0b:6e:
                    49:e9:9c:ae:8c:22:c1:1b:a9:c5:e4:23:39:67:12:
                    e4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2E:E1:CC:00:27:22:B2:69:78:C3:17:E9:32:E5:53:E6:E0:3A:D5
            X509v3 Authority Key Identifier:
                keyid:2C:4B:5D:91:DF:80:C5:94:C7:B1:DF:25:F4:C0:57:35:7A:D1:60:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3132382e302f32322d3232203d3e20323633333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:e7:a2:4a:f4:de:b8:67:7c:41:63:80:12:6d:cc:13:1c:b2:
         79:83:2a:07:5a:f2:ac:30:b7:fa:3c:54:1b:61:ac:d7:15:71:
         85:99:87:ec:86:f2:c8:cd:48:fc:67:36:8b:3e:b1:1d:ec:b1:
         bc:a4:46:f5:4d:61:9e:35:28:f4:5f:69:c8:0b:9d:b2:4f:05:
         c3:6e:49:78:79:85:2a:02:e2:c6:e3:d4:be:37:95:d2:86:df:
         75:19:f1:28:1c:ba:a1:d6:37:e9:92:5e:c5:ae:67:0f:c2:ac:
         c5:ab:a9:41:3a:66:1a:1c:b8:d6:bf:1c:df:98:ba:6e:12:1f:
         74:ae:be:f7:87:0f:58:42:ab:90:1e:0d:0a:d8:d9:41:2f:c9:
         d8:ec:ac:e6:87:40:2c:d6:d9:2a:7e:29:48:ba:9c:c4:e0:9f:
         49:2e:d3:8f:77:90:d2:0d:aa:bd:97:fe:c0:c4:f2:5d:7f:30:
         d4:cd:bd:4c:4d:e1:8c:2b:49:3b:c6:93:bd:a7:a3:0a:8e:a5:
         20:c6:fa:d3:14:98:19:74:fd:63:ec:4b:cc:09:3e:a2:f0:7b:
         f8:ed:3b:c3:c4:61:39:ae:d0:e3:12:a5:ec:f2:e2:3c:1a:f1:
         87:63:4a:cd:f4:d3:a1:f6:ba:47:07:4c:fd:bf:e2:37:67:77:
         62:5a:28:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org