Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3133302e302f32342d3234203d3e20323633333539.roa
File:                     3139312e33372e3133302e302f32342d3234203d3e20323633333539.roa (raw, json)
Hash identifier:          YAohfJcuqBBuPLvAE11mWwjJWHlpUyg2bpgbqIrfhIU=
Subject key identifier:   2D:1E:2D:74:22:58:D9:7D:8D:0D:A2:C9:E4:11:AA:9A:A3:4D:49:EC
Certificate issuer:       /CN=2C4B5D91DF80C594C7B1DF25F4C057357AD160EF
Certificate serial:       0FEE4D5E846A438341AEEFEB9B006B6E42C8A1BD
Authority key identifier: 2C:4B:5D:91:DF:80:C5:94:C7:B1:DF:25:F4:C0:57:35:7A:D1:60:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3133302e302f32342d3234203d3e20323633333539.roa
Signing time:             Tue 23 May 2023 16:00:01 +0000
ROA not before:           Tue 23 May 2023 15:55:01 +0000
ROA not after:            Tue 21 May 2024 16:00:01 +0000
asID:                     263359
IP address blocks:        191.37.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ee:4d:5e:84:6a:43:83:41:ae:ef:eb:9b:00:6b:6e:42:c8:a1:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C4B5D91DF80C594C7B1DF25F4C057357AD160EF
        Validity
            Not Before: May 23 15:55:01 2023 GMT
            Not After : May 21 16:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5d:1e:03:08:3c:45:cc:04:7c:d6:5b:89:b7:
                    8a:53:c4:ab:7e:eb:79:8f:07:b3:7e:b7:2f:81:b5:
                    07:4a:14:19:10:71:ad:6d:d8:d1:da:aa:a7:24:8b:
                    28:c6:64:1d:2b:0b:e8:5f:dd:a7:c0:c6:18:3d:02:
                    72:62:c7:49:f5:de:e5:df:37:af:e1:52:8f:2e:d8:
                    d8:1f:7f:15:d4:28:fe:76:07:4e:1e:03:6f:db:72:
                    16:48:43:4d:f9:97:6b:15:14:f1:86:5e:06:08:5f:
                    d5:92:59:03:bf:40:1b:6c:fa:9e:ce:ea:00:b5:8b:
                    b0:2e:d6:3a:b0:4e:3f:50:f1:58:be:8c:ea:56:f3:
                    1a:9c:3a:ac:18:36:ba:2d:5e:0a:f3:05:13:58:97:
                    11:1a:9f:d7:62:39:ad:3d:a6:a4:44:d6:f3:eb:3f:
                    5f:a9:7b:9b:52:6f:98:af:f0:db:00:9c:c1:10:e1:
                    b6:5c:76:11:73:0d:3a:d0:30:9d:dd:05:79:3f:76:
                    dc:92:86:ba:b3:dd:7d:61:25:3e:cd:74:b5:2a:72:
                    c7:0b:7b:34:8f:92:61:6a:cb:e6:e7:c9:0b:53:45:
                    27:35:c9:86:02:8d:db:13:f4:d6:36:c9:5c:29:37:
                    37:2f:bb:88:67:4b:22:39:5b:d9:1a:48:97:75:65:
                    9d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1E:2D:74:22:58:D9:7D:8D:0D:A2:C9:E4:11:AA:9A:A3:4D:49:EC
            X509v3 Authority Key Identifier:
                keyid:2C:4B:5D:91:DF:80:C5:94:C7:B1:DF:25:F4:C0:57:35:7A:D1:60:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3133302e302f32342d3234203d3e20323633333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:ee:df:fe:bd:4e:c8:47:f9:60:d1:dd:70:73:20:af:30:42:
         e0:62:6b:d4:14:06:42:ff:b5:a1:c7:cc:78:4f:bf:59:42:40:
         bf:e0:a5:d3:69:f3:8c:f3:64:44:ad:f1:bf:25:af:31:1f:59:
         40:17:be:39:4a:04:4a:75:f5:a1:ba:4a:c3:f2:a6:0b:66:77:
         54:be:39:b7:f6:21:b2:cc:c4:b3:00:e8:e7:2f:cb:f2:29:d9:
         7e:bd:15:9c:a5:28:33:64:63:70:33:6c:1f:a9:4e:51:ec:70:
         70:7e:17:ba:15:34:24:72:0c:bc:d1:ee:a1:15:05:f0:71:76:
         e7:57:a0:55:c6:7f:e1:bb:b4:11:55:61:f2:ac:ce:31:81:1f:
         24:aa:9c:ea:c5:57:8a:9a:38:cb:f7:96:5d:81:33:db:38:cc:
         77:7f:a9:15:59:f3:ad:ab:aa:1c:e2:2e:d7:63:a2:7c:66:86:
         92:b2:fe:c0:c4:08:f8:a8:b3:19:55:35:58:49:17:47:21:2a:
         75:a5:50:90:cf:43:f3:b3:a0:62:9c:7e:8c:9d:71:27:19:7f:
         34:83:ad:52:da:0d:ff:c9:1c:e2:cc:77:da:66:e9:40:45:dc:
         69:65:95:5b:6d:6c:5a:2b:1b:7c:b3:a3:60:38:92:09:4f:76:
         1a:46:70:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org