Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32342d3234203d3e20323633353234.roa
File:                     3139312e3235332e32342e302f32342d3234203d3e20323633353234.roa (raw, json)
Hash identifier:          Se0ixNCpWocIPMi99GmrMtsJ7nidceVkds5+VEpkr/A=
Subject key identifier:   5F:5A:3E:9E:95:6A:EC:DD:65:4B:34:85:D2:CB:CD:14:BE:60:2B:04
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       63F6533D2BFCB4D97C45E8A70D8BA8AEA9364854
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32342d3234203d3e20323633353234.roa
Signing time:             Mon 12 Feb 2024 17:14:42 +0000
ROA not before:           Mon 12 Feb 2024 17:09:42 +0000
ROA not after:            Mon 10 Feb 2025 17:14:42 +0000
asID:                     263524
IP address blocks:        191.253.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f6:53:3d:2b:fc:b4:d9:7c:45:e8:a7:0d:8b:a8:ae:a9:36:48:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Feb 12 17:09:42 2024 GMT
            Not After : Feb 10 17:14:42 2025 GMT
        Subject: CN=5F5A3E9E956AECDD654B3485D2CBCD14BE602B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:cd:57:c5:f4:72:af:30:b4:ff:fa:49:36:
                    54:d1:91:a0:ef:f1:ca:f1:30:7a:89:d2:42:86:c7:
                    b0:7d:c5:74:c1:74:3e:4c:79:c3:c4:f3:6f:02:e4:
                    ca:8d:55:6f:3f:a7:8a:b3:a7:24:2c:f5:37:47:82:
                    11:46:77:1f:95:69:52:ec:41:8b:ee:bd:d8:c5:35:
                    41:c7:c8:9f:0b:81:e1:46:67:11:15:ff:13:35:dd:
                    cf:cd:35:51:63:cf:2f:0a:b2:31:1b:d4:bb:72:ce:
                    97:e2:d9:46:56:4d:61:6c:16:a6:cd:ab:50:36:18:
                    ac:e8:16:70:3b:e6:83:a1:c2:5a:ad:9c:7a:27:c5:
                    7e:05:b3:0a:ad:69:42:88:3c:c8:73:a5:41:5e:b8:
                    25:57:40:a7:5f:06:8a:8a:4e:83:c7:fa:95:13:97:
                    c9:d2:54:7f:1a:cc:86:60:82:9a:bf:b4:c2:de:eb:
                    20:71:e5:e9:47:9e:d1:68:78:2d:c3:36:a2:b8:fe:
                    60:6a:61:0f:ba:d0:44:6b:3f:f8:ba:3a:0f:5c:21:
                    73:d2:0e:41:f0:7b:fc:7b:5f:98:ce:94:78:49:59:
                    74:0d:be:4c:61:07:2e:c0:60:aa:9d:ed:ca:b0:08:
                    2e:08:d5:96:e1:56:ca:49:3b:39:53:31:bf:b8:90:
                    a9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5A:3E:9E:95:6A:EC:DD:65:4B:34:85:D2:CB:CD:14:BE:60:2B:04
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32342e302f32342d3234203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:8d:6e:c8:40:0e:4a:a9:cd:57:98:ed:da:89:2e:c0:ba:74:
         d2:4c:de:bf:55:66:1b:4e:60:05:d3:f1:e4:ea:73:33:50:a4:
         ee:c5:00:fb:db:46:88:4d:54:6e:c2:5e:6d:f3:39:38:0e:fb:
         eb:75:33:71:7d:3b:5c:4e:77:fc:62:67:78:ff:c8:86:c2:a5:
         06:fe:25:b1:55:1f:d7:67:a3:ab:4e:0b:2c:af:74:c4:68:cf:
         22:04:06:90:3b:0b:f6:9c:74:ae:91:f7:42:ca:84:e8:d3:ec:
         61:b5:20:e5:97:12:7c:fb:ea:d8:07:2e:23:7e:ed:bb:2b:17:
         fb:e7:5b:c9:25:1a:fa:28:1d:e1:9c:e6:bd:3b:20:2e:10:91:
         68:df:42:77:15:d9:96:0d:64:75:a1:25:3d:90:24:ee:0f:42:
         21:68:bd:dc:ab:85:90:4b:6b:b4:32:58:01:d1:0e:44:ab:09:
         ff:7f:21:c8:50:35:22:3b:50:c8:a4:9d:e1:16:cf:fc:d4:6a:
         fd:01:91:bc:15:67:a3:8d:c0:46:e8:e2:18:a1:42:86:a6:5b:
         a4:99:31:26:12:3c:32:60:7c:8d:c0:c8:5e:7e:d3:c1:8d:6d:
         e3:ee:e3:8e:3b:a3:2a:00:76:75:7a:45:db:cb:c1:73:b3:23:
         34:42:82:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org