Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32322d3232203d3e20323633353234.roa
File:                     3139312e3235332e32342e302f32322d3232203d3e20323633353234.roa (raw, json)
Hash identifier:          xZC2e7bLtAX1OPv2R73YoHnqNWBVqvsW0yT6L3XKrfE=
Subject key identifier:   97:51:40:E1:98:8E:E0:1A:33:55:D9:A2:B7:76:6C:DB:C9:3F:15:54
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       6BD222E035E1986AE9A202DC8F424936AE238025
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32322d3232203d3e20323633353234.roa
Signing time:             Mon 12 Feb 2024 17:14:23 +0000
ROA not before:           Mon 12 Feb 2024 17:09:23 +0000
ROA not after:            Mon 10 Feb 2025 17:14:23 +0000
asID:                     263524
IP address blocks:        191.253.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d2:22:e0:35:e1:98:6a:e9:a2:02:dc:8f:42:49:36:ae:23:80:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Feb 12 17:09:23 2024 GMT
            Not After : Feb 10 17:14:23 2025 GMT
        Subject: CN=975140E1988EE01A3355D9A2B7766CDBC93F1554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:05:75:31:c0:ab:de:8c:f9:87:15:74:ea:
                    0b:26:aa:fa:b1:64:a9:8f:c1:0a:de:ca:74:a0:7b:
                    c5:53:2f:2e:a7:9f:63:ac:17:40:c2:95:03:5a:c8:
                    26:2d:d2:b2:53:c7:6f:fa:e8:ce:a1:3d:35:72:29:
                    06:08:82:84:0c:bc:14:26:51:49:41:34:95:f8:07:
                    a3:ea:1e:6b:a1:c5:93:b3:e5:1d:f5:d1:2c:87:c3:
                    d7:7d:f9:59:1b:8d:a7:71:2c:f9:70:09:23:95:b9:
                    75:7e:46:02:d9:e7:b4:c1:c4:83:4d:ca:88:0b:fe:
                    d7:ad:24:e8:b1:17:15:4c:31:c5:02:1f:e8:f9:10:
                    21:71:4d:34:bd:e6:2b:92:4b:fd:02:84:5c:6c:8f:
                    03:df:fe:51:be:27:b5:2b:2f:f1:f1:b5:e0:e3:04:
                    6f:7c:a1:3e:58:81:7d:14:40:6f:5c:82:fc:7c:3c:
                    66:ae:97:c8:6b:d2:e6:bd:eb:56:47:26:85:32:8e:
                    64:03:a6:83:3a:02:35:40:5b:b0:fe:fc:b7:9b:c9:
                    a6:8c:c3:4a:d4:ef:b7:fa:60:cb:e7:f0:ca:ff:b3:
                    d5:17:61:4a:ca:e4:5b:7a:55:60:e9:80:e7:de:15:
                    73:56:71:b8:4c:a1:82:bd:ae:e5:04:16:cd:58:d0:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:51:40:E1:98:8E:E0:1A:33:55:D9:A2:B7:76:6C:DB:C9:3F:15:54
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32322d3232203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:91:b2:3b:9f:ac:04:f7:fc:e9:aa:fa:ab:f0:9b:ff:58:07:
         86:b1:1b:9c:d1:b0:de:ac:e5:07:6f:f2:89:64:1f:60:c8:02:
         31:78:41:57:7f:27:e2:70:34:36:69:19:28:bd:15:10:17:f1:
         3d:43:93:9d:6c:a6:d5:36:d9:42:ca:d2:2a:fa:d2:26:2d:5e:
         a6:3b:ca:c5:7e:7b:de:e0:ac:5f:e0:84:75:0a:bc:b7:a4:b0:
         19:c0:db:bd:1a:77:ca:89:4a:ea:9f:b5:d8:d4:ec:52:d2:57:
         c8:3c:88:ef:4f:59:f3:3a:5b:f4:b6:cc:2c:58:c3:d5:6b:1c:
         a7:aa:c4:c2:0c:1b:84:97:e3:15:8b:3a:27:af:ff:55:f4:9e:
         aa:8a:64:48:6f:eb:02:58:a2:3a:12:28:25:af:2d:63:2f:03:
         8d:fb:f3:3f:64:8a:b1:64:99:7e:b9:f5:85:0d:c4:9f:f7:cc:
         3a:01:54:f6:d8:c3:4f:c4:a1:da:2c:3e:4e:7e:d5:fe:4e:6e:
         0f:10:a5:bb:20:a2:4e:3d:f6:9a:9b:d8:42:1e:6d:ca:8f:7e:
         c3:32:be:39:b8:20:60:cd:3e:cf:a4:92:2f:62:71:9d:f7:0a:
         8b:2f:ad:f8:82:4a:35:fb:3b:71:76:23:98:eb:3d:ee:15:0a:
         49:8a:0a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org