Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32312d3234203d3e20323633353234.roa
File:                     3139312e3235332e32342e302f32312d3234203d3e20323633353234.roa (raw, json)
Hash identifier:          33gPHVWwMCWFLpJSIytXhzthdOnQ9K1e0G05doiJAkY=
Subject key identifier:   04:F5:26:3F:C3:F4:04:3E:1E:B5:FB:06:F7:3E:AB:B0:CE:0D:C5:CA
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       11F5220C250D4D4AA3BA652933BC8F2F64A0DC5A
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32312d3234203d3e20323633353234.roa
Signing time:             Wed 14 Feb 2024 18:37:43 +0000
ROA not before:           Wed 14 Feb 2024 18:32:43 +0000
ROA not after:            Wed 12 Feb 2025 18:37:43 +0000
asID:                     263524
IP address blocks:        191.253.24.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f5:22:0c:25:0d:4d:4a:a3:ba:65:29:33:bc:8f:2f:64:a0:dc:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Feb 14 18:32:43 2024 GMT
            Not After : Feb 12 18:37:43 2025 GMT
        Subject: CN=04F5263FC3F4043E1EB5FB06F73EABB0CE0DC5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:59:0e:11:39:27:04:9f:3b:e9:d2:49:f5:f0:
                    aa:2f:b7:ca:a5:bf:7d:97:09:86:07:ca:6c:39:9f:
                    52:3b:48:1a:9f:ea:67:ee:11:a6:23:3d:60:70:ca:
                    62:09:27:d7:a3:f6:a7:83:e9:90:88:de:fd:7c:9c:
                    78:8f:ce:e7:7b:c5:2a:5a:74:ef:64:c0:ed:a9:b7:
                    0b:96:14:97:17:b6:2d:9d:d0:b8:af:26:f5:76:76:
                    1b:40:5d:a3:dd:cd:97:f9:0c:b9:68:5b:72:c9:b1:
                    0c:58:17:4a:a8:48:72:6e:ad:fb:63:58:a2:42:a1:
                    13:0b:d9:92:9c:01:3d:2d:ca:f3:1b:fc:7c:88:dd:
                    19:df:61:18:2d:ba:e6:fa:10:fc:b7:d0:cc:b3:43:
                    03:ea:54:b1:ef:af:aa:6a:fc:fb:75:4b:da:ca:ab:
                    4e:1c:f8:aa:bf:7e:76:05:27:48:14:2b:6d:9c:b9:
                    2b:16:7a:a9:24:36:33:bf:7d:90:99:47:8a:c8:53:
                    d2:d6:a6:37:e8:65:d8:62:10:b6:34:54:f3:25:26:
                    71:36:93:6d:27:3e:e4:25:2a:7f:14:72:76:5b:be:
                    aa:33:bf:84:44:39:5a:1d:24:98:56:88:b2:bb:e1:
                    20:28:07:79:fd:4c:3e:f4:e6:37:62:b0:97:b1:7e:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F5:26:3F:C3:F4:04:3E:1E:B5:FB:06:F7:3E:AB:B0:CE:0D:C5:CA
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32312d3234203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:71:1c:e5:e1:32:d1:8e:c2:a6:9f:1b:0b:4a:f6:df:28:a5:
         e7:1c:8a:41:cc:b0:0c:7a:8a:34:80:30:c9:8b:c0:62:59:a1:
         81:1b:fb:22:ee:dd:c8:57:01:a2:c4:c9:07:14:51:e8:30:da:
         80:32:4c:d5:fd:d7:7f:fb:7d:af:75:56:c7:e0:96:30:0d:4d:
         f7:f7:ce:48:b4:a8:bf:8c:6d:4e:da:82:01:c8:cb:19:e4:51:
         ac:15:42:7f:a6:da:99:64:8c:df:fe:fe:27:c8:35:cf:00:8a:
         80:db:69:25:83:b4:ea:e0:88:71:87:26:93:de:80:e7:4f:b9:
         5f:40:7f:b4:82:68:e8:a3:3d:53:af:94:04:bf:58:7c:77:56:
         77:96:4d:6f:71:c3:48:82:fb:50:c4:07:b2:66:eb:bc:fd:71:
         a2:69:1f:dd:d0:b9:9d:77:f4:e9:1b:d4:a0:8e:43:43:9b:9c:
         84:88:6d:01:7a:cc:20:fd:c5:68:2f:6c:57:0c:6e:7f:03:81:
         e2:d1:b5:b7:0a:9f:a9:55:e5:b5:42:19:ad:78:f9:0e:bd:26:
         f6:48:3a:62:f9:e6:07:c8:ea:31:ed:3b:4c:40:1f:6d:f8:07:
         97:e7:95:69:a5:54:e2:07:6c:b4:68:58:c2:dd:1c:aa:7e:5c:
         7e:2f:8e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org