Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/3139312e3234322e3136302e302f32302d3234203d3e203533323436.roa
File:                     3139312e3234322e3136302e302f32302d3234203d3e203533323436.roa (raw, json)
Hash identifier:          Wq9BWFxBgullLDwSLu8x9g0jDax7qExxVV5sjcuIWbg=
Subject key identifier:   05:5E:5E:E8:97:C0:FD:E3:64:9C:8E:1A:09:F3:71:0F:BC:BE:07:D9
Certificate issuer:       /CN=48D3C8BE2C029255BE6D6F2956AF74681B8370F9
Certificate serial:       295B526CF515377651D1F9527C122272CC247E9A
Authority key identifier: 48:D3:C8:BE:2C:02:92:55:BE:6D:6F:29:56:AF:74:68:1B:83:70:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48D3C8BE2C029255BE6D6F2956AF74681B8370F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/3139312e3234322e3136302e302f32302d3234203d3e203533323436.roa
Signing time:             Thu 05 Oct 2023 14:25:19 +0000
ROA not before:           Thu 05 Oct 2023 14:20:19 +0000
ROA not after:            Thu 03 Oct 2024 14:25:19 +0000
asID:                     53246
IP address blocks:        191.242.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5b:52:6c:f5:15:37:76:51:d1:f9:52:7c:12:22:72:cc:24:7e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48D3C8BE2C029255BE6D6F2956AF74681B8370F9
        Validity
            Not Before: Oct  5 14:20:19 2023 GMT
            Not After : Oct  3 14:25:19 2024 GMT
        Subject: CN=055E5EE897C0FDE3649C8E1A09F3710FBCBE07D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8b:d1:43:82:f0:b3:36:79:af:ea:87:de:c8:
                    c8:61:15:93:c0:a0:aa:7d:04:9d:fe:bb:7d:ed:f0:
                    65:24:09:9c:02:c4:7b:f8:09:ce:62:d6:a0:ed:8d:
                    44:da:13:ea:d0:53:4a:2e:d2:41:8a:38:02:5e:f7:
                    72:fe:b4:bc:dc:3e:98:bb:9d:d1:d4:53:11:a8:34:
                    a2:85:68:54:cc:ec:c5:f6:45:cd:42:b7:cd:14:c4:
                    94:b8:da:51:eb:ce:a6:2e:c2:f6:97:10:08:93:bd:
                    4e:51:24:6e:14:7c:e3:a4:b5:48:d5:8e:f6:7d:00:
                    d3:2a:5e:e0:5c:59:a0:6f:0c:48:9b:33:b9:d9:2d:
                    de:7e:55:96:16:e5:b1:1d:33:99:e3:de:5a:cb:14:
                    33:11:93:7b:7e:e2:49:ce:df:09:7a:5a:82:52:c3:
                    49:c8:7a:a9:fc:fd:db:ec:65:03:bd:16:da:fd:43:
                    41:4d:a0:c9:d9:51:fc:ed:dd:3b:92:51:50:96:b4:
                    15:10:a5:5a:7b:17:d9:a1:6e:b1:99:7e:08:29:f0:
                    d8:1d:b0:b4:9e:cc:35:a4:02:1d:8b:d0:4f:03:7e:
                    c5:bf:c0:59:72:a8:c4:fc:3e:0b:b2:6a:a8:31:e9:
                    26:b2:6a:74:85:d0:1e:68:c9:af:e3:8b:3a:b7:f1:
                    69:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5E:5E:E8:97:C0:FD:E3:64:9C:8E:1A:09:F3:71:0F:BC:BE:07:D9
            X509v3 Authority Key Identifier:
                keyid:48:D3:C8:BE:2C:02:92:55:BE:6D:6F:29:56:AF:74:68:1B:83:70:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/48D3C8BE2C029255BE6D6F2956AF74681B8370F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48D3C8BE2C029255BE6D6F2956AF74681B8370F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/3139312e3234322e3136302e302f32302d3234203d3e203533323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:06:33:a8:40:6f:31:3a:0b:33:9d:be:e4:cc:d5:bd:a6:df:
         5a:d4:0f:bf:c4:2d:8e:80:37:6b:9f:56:58:20:5c:a0:b8:c7:
         5c:c2:2c:ad:05:f3:15:1b:02:12:f9:d2:5c:18:f8:0b:39:58:
         09:c0:1d:5e:e7:18:de:41:8b:9e:a7:36:c5:48:4c:73:df:ef:
         e4:f6:27:d9:07:15:bf:53:37:34:ee:93:b0:cf:23:41:cd:cf:
         5f:91:45:54:41:01:28:10:29:32:1f:e0:0f:5a:93:19:b0:d2:
         bf:d3:42:59:5a:a1:ff:3b:8b:e2:94:2d:74:a1:50:a6:90:da:
         9d:bd:6a:03:8c:fe:ff:5c:32:11:bc:87:dc:b4:90:11:b9:11:
         ee:9a:bf:a1:e9:25:49:c4:69:40:9c:05:30:d3:5e:f5:f5:cd:
         d3:1c:5a:a2:9e:10:c7:48:93:01:df:7d:ff:d8:43:e9:8e:cd:
         6b:cf:c0:48:d4:85:bc:0b:65:fc:dd:7d:b4:18:00:6f:36:58:
         7c:8e:ad:83:15:6f:b0:bd:a1:95:9e:f8:15:a6:4e:da:80:6f:
         db:72:d5:d3:a7:69:05:ed:c9:a7:17:96:81:e1:aa:9d:b9:e7:
         06:40:5d:c2:ce:b6:98:b1:2a:06:f3:02:8c:03:0e:d4:2d:54:
         a5:35:3d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org