Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32382e302f32332d3234203d3e20323633353234.roa
File:                     3139312e3235332e32382e302f32332d3234203d3e20323633353234.roa (raw, json)
Hash identifier:          F8kIwvpPh1h6xF5mTUZRh3uSypMIwrsKbQqWiOGDqMM=
Subject key identifier:   DD:29:77:0F:78:9D:38:5D:53:87:39:8D:97:B0:03:EE:23:A8:F1:FA
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       234D7644ED5F42ED365A3464080A1C8F1E90FC6B
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32382e302f32332d3234203d3e20323633353234.roa
Signing time:             Mon 12 Feb 2024 17:21:21 +0000
ROA not before:           Mon 12 Feb 2024 17:16:21 +0000
ROA not after:            Mon 10 Feb 2025 17:21:21 +0000
asID:                     263524
IP address blocks:        191.253.28.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4d:76:44:ed:5f:42:ed:36:5a:34:64:08:0a:1c:8f:1e:90:fc:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Feb 12 17:16:21 2024 GMT
            Not After : Feb 10 17:21:21 2025 GMT
        Subject: CN=DD29770F789D385D5387398D97B003EE23A8F1FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:97:84:2b:14:00:17:bb:e2:b8:d3:b0:63:
                    33:db:f3:8c:69:46:0b:c9:45:a9:7a:2f:fd:60:67:
                    cf:0a:c3:8c:bf:12:72:74:43:77:36:b7:2f:03:cc:
                    b7:45:e7:32:ae:04:60:fc:db:98:b3:d2:7d:e7:37:
                    e2:f9:3d:01:ca:36:23:15:ac:27:47:7e:08:10:9b:
                    af:8e:5c:11:43:b6:a1:fa:5e:b0:c0:45:a7:b2:ca:
                    f9:95:a6:e0:76:7d:b1:56:88:21:98:1e:c3:7f:d8:
                    7b:07:76:8e:78:c3:f3:af:b7:de:83:57:95:ab:d5:
                    8f:78:92:6e:90:78:08:9a:f6:ac:0a:9d:a2:bc:2b:
                    e4:c7:b7:c2:f3:64:18:93:4d:27:52:0e:03:05:01:
                    6a:49:ce:7b:24:cc:0e:90:86:1b:39:46:18:b1:f8:
                    cb:12:8f:f4:34:ae:d6:8e:bf:2f:c3:83:71:d5:56:
                    70:51:5d:68:72:5e:a2:55:b1:a5:b2:57:a4:49:a5:
                    0a:2b:12:7c:1d:c8:24:42:a0:a6:6e:bd:39:c0:a9:
                    ee:f2:65:2d:5d:20:0a:83:4a:09:bb:22:8f:13:4a:
                    f7:bd:bb:68:41:67:33:d0:17:7f:98:2a:fd:96:af:
                    9f:bf:66:8b:f7:23:fe:46:78:ad:a9:28:c7:ac:bb:
                    bb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:29:77:0F:78:9D:38:5D:53:87:39:8D:97:B0:03:EE:23:A8:F1:FA
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32382e302f32332d3234203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:9e:1b:34:de:e1:96:92:c0:8e:ee:89:79:04:53:45:55:01:
         c8:d8:2c:b6:47:0b:54:a0:89:07:d9:1f:1e:68:80:43:db:3a:
         4b:5c:fe:2b:32:7e:bf:c7:56:33:13:0d:aa:f9:2d:75:b3:39:
         2e:a7:77:09:ce:4c:32:56:7b:d2:b0:e7:33:7b:4a:f7:68:0f:
         b2:2a:1e:27:e5:d6:06:fc:e3:02:2f:e7:1d:eb:b5:67:bd:65:
         c7:ab:4f:8b:8d:be:4f:bb:f9:a2:67:d0:6a:da:56:f3:b0:37:
         87:c0:50:fd:09:ef:01:d1:5f:82:0d:83:7d:51:26:3b:d2:b5:
         c9:8a:6c:5d:78:4c:4e:5c:e8:10:ca:c9:e5:f4:89:a6:a1:e0:
         d4:cd:b8:43:3c:77:b5:db:a1:f7:3c:33:ac:22:90:42:60:eb:
         e3:72:73:40:de:3f:3c:a6:ba:50:ae:0c:f9:82:2f:de:35:f8:
         ef:d7:88:01:60:85:cf:07:13:66:d4:2d:d7:b4:ec:d4:1b:6b:
         95:6f:43:e5:60:9b:a1:2b:2f:5a:02:23:76:20:96:fd:57:c5:
         ff:47:86:37:67:29:28:a3:97:62:59:74:0e:16:6b:b1:fa:bd:
         8d:12:d4:e8:6f:b1:2a:8a:1e:6c:ff:a5:01:b3:87:53:09:67:
         67:af:d6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org