Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3133312e302f32342d3234203d3e20323633333539.roa
File:                     3139312e33372e3133312e302f32342d3234203d3e20323633333539.roa (raw, json)
Hash identifier:          c1tSfQYiXDPL9ZiJJLyQArg8IB3FQdzFUUyYqQUOSzc=
Subject key identifier:   AB:AB:F9:30:2E:E6:AC:37:3F:F0:79:93:6A:99:DB:C4:97:27:37:35
Certificate issuer:       /CN=2C4B5D91DF80C594C7B1DF25F4C057357AD160EF
Certificate serial:       74D9FF8012757A0C6DE3CB58FA15E5AA2DF923E0
Authority key identifier: 2C:4B:5D:91:DF:80:C5:94:C7:B1:DF:25:F4:C0:57:35:7A:D1:60:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3133312e302f32342d3234203d3e20323633333539.roa
Signing time:             Tue 23 May 2023 16:00:00 +0000
ROA not before:           Tue 23 May 2023 15:55:00 +0000
ROA not after:            Tue 21 May 2024 16:00:00 +0000
asID:                     263359
IP address blocks:        191.37.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d9:ff:80:12:75:7a:0c:6d:e3:cb:58:fa:15:e5:aa:2d:f9:23:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C4B5D91DF80C594C7B1DF25F4C057357AD160EF
        Validity
            Not Before: May 23 15:55:00 2023 GMT
            Not After : May 21 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a1:d6:13:26:79:35:bb:35:23:ca:a7:e5:a3:
                    90:5a:14:bf:eb:dd:aa:eb:bc:ae:35:03:bc:26:d7:
                    ac:cf:da:6b:de:13:b3:dd:08:b8:1c:12:89:91:37:
                    7f:f3:51:7b:4c:c6:69:fa:0e:a1:df:0d:b2:bd:cc:
                    f1:6a:a8:15:e2:dd:93:8e:99:22:d2:5e:fa:65:19:
                    c9:d0:04:ba:a3:c9:d2:d4:c9:8a:e3:89:7e:5f:5d:
                    97:26:a5:16:5d:43:6c:6d:a3:d7:2b:46:1c:96:f6:
                    a0:9e:a8:e7:3b:fa:99:52:9b:bf:98:79:fe:35:e3:
                    04:0a:b2:11:6b:51:eb:c4:45:aa:a3:28:35:59:dc:
                    8b:12:10:6c:0a:27:e6:da:47:ff:ca:ce:d6:89:2a:
                    ac:54:68:ce:62:c2:3d:9e:15:95:cc:59:59:ba:21:
                    58:c6:b6:cb:6a:c8:2d:4e:8c:ec:4e:da:04:fb:3f:
                    23:31:34:49:36:8d:c8:9a:a9:ac:fb:67:ed:c8:93:
                    2a:9a:e1:54:b6:1d:60:a4:2a:cf:c0:73:4f:65:21:
                    7e:bc:93:11:63:c5:a9:db:bc:34:92:84:7b:e4:ff:
                    75:a3:b3:cd:79:5b:e8:f3:26:a1:f3:74:d4:ed:a1:
                    0b:b5:39:c9:23:d6:ec:57:26:d5:43:fb:9c:e8:46:
                    22:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AB:F9:30:2E:E6:AC:37:3F:F0:79:93:6A:99:DB:C4:97:27:37:35
            X509v3 Authority Key Identifier:
                keyid:2C:4B:5D:91:DF:80:C5:94:C7:B1:DF:25:F4:C0:57:35:7A:D1:60:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3133312e302f32342d3234203d3e20323633333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:0b:6b:b2:66:bc:03:dc:c3:53:6a:4c:55:e3:52:65:3c:2d:
         d0:04:fd:e9:1c:2e:6a:7c:35:87:2d:6d:dd:b0:26:31:a7:19:
         ab:f9:24:77:45:9f:2b:47:d8:cc:2e:c0:a6:df:87:12:5e:9c:
         26:60:c5:50:c0:bb:3b:34:44:0f:1a:86:4b:64:a6:b7:e8:bf:
         40:c4:cf:64:8e:25:d5:75:57:a1:73:f6:c0:39:fb:0b:d4:72:
         0a:e6:7d:33:c5:a5:00:ca:46:ce:ac:66:8e:54:96:cd:b3:c8:
         62:fc:91:b6:8b:88:78:03:5b:d6:f1:05:15:e6:c0:80:ba:79:
         7a:ef:70:02:c1:e5:d7:f7:f9:b5:c3:5c:53:d2:e9:d9:c1:88:
         43:14:cb:f2:8b:99:e3:39:5c:75:d7:b3:ea:31:18:80:cc:17:
         7c:94:67:8a:0e:3b:bb:95:b1:f5:79:c7:85:61:09:11:a7:2b:
         55:5b:b2:1f:16:47:bf:89:19:9b:bb:f6:dd:21:ce:66:df:82:
         d2:4d:54:9c:8a:32:37:6f:e1:60:f9:2d:4c:2e:2b:a5:9f:c2:
         a7:28:d1:9f:f8:96:34:24:b1:2f:4f:0b:70:74:4c:ef:53:e2:
         e6:70:57:b6:04:d5:d2:52:90:8a:ef:4e:78:75:74:fa:da:92:
         46:e7:5a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org