Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32382e302f32332d3233203d3e20323633353234.roa
File:                     3139312e3235332e32382e302f32332d3233203d3e20323633353234.roa (raw, json)
Hash identifier:          /J54YtSzQYpYhBsZ71QE9zu8+uHZilRe+Y+VdjdfOuA=
Subject key identifier:   43:FD:E2:04:5D:BA:5D:40:A3:D3:2A:01:8F:CA:D6:8E:C1:50:0E:98
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       14B4302C94D011B9AF75CA380127D6D62A68670C
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32382e302f32332d3233203d3e20323633353234.roa
Signing time:             Wed 13 Dec 2023 21:24:10 +0000
ROA not before:           Wed 13 Dec 2023 21:19:10 +0000
ROA not after:            Wed 11 Dec 2024 21:24:10 +0000
asID:                     263524
IP address blocks:        191.253.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b4:30:2c:94:d0:11:b9:af:75:ca:38:01:27:d6:d6:2a:68:67:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Dec 13 21:19:10 2023 GMT
            Not After : Dec 11 21:24:10 2024 GMT
        Subject: CN=43FDE2045DBA5D40A3D32A018FCAD68EC1500E98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:db:19:7d:38:f1:38:33:a5:dc:5d:50:d4:
                    f2:c1:a0:af:6b:1d:1d:57:e4:4f:d6:bc:06:b9:5c:
                    2d:82:e8:dd:d4:a7:99:9f:90:e4:a0:88:83:d3:c6:
                    44:81:25:cf:a0:a2:af:64:e7:e8:67:a0:d8:4e:c4:
                    90:c9:7c:2c:72:c1:59:bb:65:ee:8c:db:f2:dc:70:
                    40:14:cd:db:6d:32:24:df:e5:67:9a:ad:ce:a2:a1:
                    b6:98:9f:2e:35:92:1b:58:94:15:fe:6c:8e:28:b4:
                    4f:6a:0d:51:96:41:b3:1d:d6:47:ed:a7:f7:6c:ec:
                    a7:fa:ba:3a:f4:9d:46:9f:22:7b:d4:26:2a:a4:19:
                    d5:8c:af:87:49:13:ab:6e:e0:4b:7b:6e:43:5e:3c:
                    a9:cc:80:5b:90:07:c7:d4:4d:40:9b:64:93:e8:7f:
                    34:fb:f0:27:8f:66:1c:10:88:90:d7:0f:53:49:4f:
                    c8:ac:45:fb:4f:e9:e4:2e:33:5d:72:a8:b8:a8:23:
                    bc:87:da:8a:a3:ec:c5:ff:03:09:27:65:f8:20:f3:
                    00:51:af:6f:03:3e:7f:2f:d8:cf:4b:8c:83:12:9e:
                    57:a6:32:3a:08:8a:3d:1a:6e:39:6a:a5:7c:0d:65:
                    8e:de:ef:4c:03:6a:62:fc:c9:31:76:f9:74:7a:bf:
                    c1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FD:E2:04:5D:BA:5D:40:A3:D3:2A:01:8F:CA:D6:8E:C1:50:0E:98
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32382e302f32332d3233203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:84:96:f6:9c:0b:db:2f:a4:8d:77:6c:58:07:1a:01:60:79:
         2d:5e:83:ad:54:63:d0:b8:5f:61:e4:73:43:6c:25:54:c1:29:
         81:08:c1:92:85:77:49:72:be:cb:50:0b:14:fc:95:8c:2e:00:
         d7:c6:1a:d4:a6:88:f4:5d:82:bd:74:67:97:9f:d1:07:f5:d8:
         c7:29:ab:31:17:f8:c2:38:44:f2:66:d3:11:af:4b:cd:51:30:
         63:8b:0b:bd:f6:4c:f5:f8:81:bf:d9:a9:55:2e:d4:72:46:c4:
         8b:88:f0:89:17:e4:34:0a:75:56:34:8f:fb:cb:5a:59:63:84:
         42:6c:b6:5b:b3:dc:2d:33:06:53:73:44:56:7a:40:b9:e4:ed:
         9e:0a:69:6c:9f:19:71:e5:fe:b1:cc:e6:aa:49:f2:8e:68:ca:
         f6:84:ea:90:c1:42:6d:ba:d5:11:83:ca:23:ee:ea:c6:88:9a:
         03:06:01:e4:4b:3e:08:6d:5e:c3:47:22:a0:59:da:7a:3f:37:
         b7:82:82:ac:46:1a:29:c0:62:9a:2b:4b:aa:2a:f7:94:24:e7:
         a1:3f:92:05:4f:f0:58:04:44:03:cf:bd:d4:24:9c:37:f2:ae:
         ea:67:c7:f2:6f:ef:36:5c:23:b3:bd:21:11:79:19:1c:91:fc:
         a1:93:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org