Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3139312e352e3134342e302f32302d3234203d3e203533303835.roa
File:                     3139312e352e3134342e302f32302d3234203d3e203533303835.roa (raw, json)
Hash identifier:          On0oW3dQtuYLI8sjGZln4NGL3flsjoIHZv5QvDpjZNk=
Subject key identifier:   8D:03:4B:CF:B6:C1:B8:60:73:0F:0D:D4:3F:56:FB:34:FF:37:D2:83
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       7DA8961A1B5838947EC95C3F978CF3053D7BE893
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3139312e352e3134342e302f32302d3234203d3e203533303835.roa
Signing time:             Fri 03 May 2024 21:22:41 +0000
ROA not before:           Fri 03 May 2024 21:17:41 +0000
ROA not after:            Fri 02 May 2025 21:22:41 +0000
asID:                     53085
IP address blocks:        191.5.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a8:96:1a:1b:58:38:94:7e:c9:5c:3f:97:8c:f3:05:3d:7b:e8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:17:41 2024 GMT
            Not After : May  2 21:22:41 2025 GMT
        Subject: CN=8D034BCFB6C1B860730F0DD43F56FB34FF37D283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:42:68:59:88:99:7d:d8:62:28:2a:21:7c:bc:
                    88:24:79:c7:ba:ef:06:1a:57:b7:f5:cb:d5:dd:e8:
                    17:50:4a:8f:3a:85:ef:b1:05:b3:6e:e2:66:ef:83:
                    ee:f3:d5:be:bb:e8:63:ec:5c:6c:85:fd:c5:0e:1c:
                    f5:46:e4:18:92:88:a7:d7:ea:e3:79:12:9c:c4:1a:
                    29:4c:a1:26:2a:45:c7:a8:58:84:ca:20:79:8e:b1:
                    0f:8e:cd:65:ce:82:e4:f7:73:65:ee:f5:0a:15:04:
                    55:cf:a3:24:5f:63:6e:cd:48:2d:7e:ab:10:c6:f1:
                    0f:ac:ae:4f:93:bc:6a:74:13:d1:00:71:61:38:18:
                    fe:ac:91:14:b3:d5:f9:c3:1c:ae:2f:5e:fd:92:66:
                    bf:c7:f7:43:6a:02:9e:d7:bf:13:c8:f2:78:99:77:
                    77:ac:c0:e1:98:31:57:cb:8f:52:7a:9a:e8:c6:d2:
                    2c:08:b6:9e:d7:b7:5f:0a:21:85:cc:d0:6e:b5:01:
                    d8:a7:e7:f6:07:12:ab:a5:78:0c:90:e4:f0:7f:7f:
                    ba:f4:bf:91:18:db:99:15:87:3b:a3:90:42:d5:b1:
                    1d:d6:f1:81:d5:01:0e:80:cc:b1:0d:de:60:20:b0:
                    ee:9e:ea:73:f6:bb:52:cf:60:53:3a:69:87:e7:b8:
                    90:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:03:4B:CF:B6:C1:B8:60:73:0F:0D:D4:3F:56:FB:34:FF:37:D2:83
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3139312e352e3134342e302f32302d3234203d3e203533303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:11:63:37:0c:6e:c2:01:57:ee:4e:27:17:3a:c7:74:2c:23:
         a5:5a:a7:ba:6c:1e:e1:d9:71:3c:bc:9a:47:b3:76:e3:87:3a:
         de:13:95:83:f8:02:23:35:45:76:3f:d4:7d:3f:57:c2:23:ec:
         fd:80:d1:29:73:e3:89:b5:54:1e:e3:85:ea:cd:9f:d9:70:b9:
         ac:bc:88:87:d3:1a:b1:98:41:b9:fd:0e:7b:a4:7a:2f:ad:d3:
         40:ca:19:fe:af:c6:95:e3:bd:7e:74:6a:8d:6f:54:12:aa:43:
         da:75:8d:7f:d4:ba:b4:f5:ec:0a:fb:9f:f9:c6:02:b9:e7:54:
         0b:9b:ef:60:90:d0:45:53:4c:80:3b:76:3a:fd:ed:5a:8c:67:
         cf:d4:8e:ff:bb:c9:16:34:1c:4b:de:0f:25:c7:27:ba:ec:89:
         f6:82:25:64:e0:ac:00:2d:4c:26:b3:e2:ad:e2:42:cf:9f:0f:
         14:f6:84:ea:b7:81:13:db:ac:c1:24:37:06:bc:e2:e1:f6:79:
         dd:cd:8e:03:56:06:a7:51:9e:67:42:35:1e:e8:f0:0f:a4:4f:
         d7:3a:2b:f9:05:1d:86:9f:29:e5:bb:e6:7b:2c:d1:47:51:5d:
         9e:ef:26:0c:fd:ab:66:8b:70:65:91:18:e6:d1:9a:6b:70:f3:
         22:2e:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org