Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32392e302f32342d3234203d3e20323633353234.roa
File:                     3139312e3235332e32392e302f32342d3234203d3e20323633353234.roa (raw, json)
Hash identifier:          8VQoy6d1Zs9jGXxCm8tYzV72Ps6TiGXysH1Bs2rm0G0=
Subject key identifier:   B5:F2:0C:E9:D5:40:50:35:FC:1D:7C:5B:27:A0:CB:76:33:03:08:93
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       1D3C72C5637352AFE2957E20E9E4F5BAEDDD1481
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32392e302f32342d3234203d3e20323633353234.roa
Signing time:             Thu 12 Jan 2023 11:37:59 +0000
ROA not before:           Thu 12 Jan 2023 11:32:59 +0000
ROA not after:            Thu 11 Jan 2024 11:37:59 +0000
asID:                     263524
IP address blocks:        191.253.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3c:72:c5:63:73:52:af:e2:95:7e:20:e9:e4:f5:ba:ed:dd:14:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Jan 12 11:32:59 2023 GMT
            Not After : Jan 11 11:37:59 2024 GMT
        Subject: CN=B5F20CE9D5405035FC1D7C5B27A0CB7633030893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:97:ec:3e:fc:3f:60:b8:20:15:8a:5b:c8:e6:
                    55:f1:7e:4e:0f:08:2d:4c:6f:d7:17:99:b4:02:73:
                    0c:ab:f4:fb:e4:7e:d3:bc:7f:7d:11:59:24:90:2d:
                    c3:f9:1c:11:33:89:fb:af:26:0b:9d:56:6f:8f:1a:
                    df:b6:d6:cc:b2:6d:27:83:9d:d0:bf:77:ff:9f:45:
                    18:32:60:8c:55:05:65:3f:f2:49:60:64:1b:5b:a1:
                    bd:01:e7:35:14:cd:4c:45:31:2f:d9:de:e2:8a:b3:
                    e9:dc:ec:a1:a6:c5:5d:87:d7:c6:02:d1:7a:d7:92:
                    65:f2:69:f5:c5:23:60:56:dd:1c:f9:99:e7:e4:60:
                    5f:54:92:36:f6:4c:df:0a:17:c7:d8:19:82:65:7e:
                    30:9d:f5:1d:cb:a7:73:c2:b5:cc:bc:e7:99:b5:7c:
                    b6:0d:e3:c5:71:0f:f4:85:8b:bf:3f:e2:fe:e5:41:
                    be:54:13:45:f0:e5:4f:59:0d:80:de:cb:d8:c4:8e:
                    5f:72:54:03:d7:71:a5:01:dc:87:5d:73:61:a3:88:
                    a7:cb:0d:4c:4a:02:0c:5d:b3:fa:b7:0a:d6:b2:a0:
                    76:e1:4b:bc:6c:4d:df:98:49:51:a2:b2:9a:0e:ca:
                    14:3c:17:6a:6a:ec:19:e4:a4:47:64:49:75:81:c8:
                    c8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F2:0C:E9:D5:40:50:35:FC:1D:7C:5B:27:A0:CB:76:33:03:08:93
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32392e302f32342d3234203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:02:3f:6b:ca:5a:2d:5c:41:0b:33:b6:b8:d9:76:f3:e2:09:
         15:6c:7e:15:65:cd:1f:da:a7:88:a7:93:94:50:86:ec:7d:d0:
         06:10:2f:9a:4e:ba:22:64:1e:9f:57:86:b2:6f:a8:f1:f8:89:
         c5:8c:86:9d:81:89:92:3d:50:13:cb:2b:79:d1:b0:be:58:4c:
         d4:7e:a4:14:34:93:3b:4b:96:b8:93:64:42:6e:d7:25:ef:3d:
         25:4a:c8:60:5c:b2:2b:78:1b:e5:57:90:e5:49:96:a8:94:da:
         d4:d4:b3:d6:dd:0a:e2:b4:b7:e0:72:81:82:ac:c7:ba:e9:9b:
         9d:39:5d:9a:41:14:21:85:0c:ca:c2:14:40:44:c0:69:a4:34:
         e8:8f:16:26:47:07:70:00:5b:c0:97:85:24:61:76:0b:f3:e3:
         db:76:d8:c7:1d:a7:46:6c:35:de:83:03:18:ed:f0:2e:a8:2a:
         61:52:11:93:2d:a7:a3:b3:bc:ca:33:74:eb:09:0a:94:45:92:
         64:ed:a8:9e:94:89:ca:73:9e:d5:dd:0d:12:d1:7b:47:d6:fb:
         bc:77:5b:2f:d1:4f:9e:fd:cd:b1:b1:b3:5f:a6:76:9f:b1:ff:
         1a:70:8b:aa:c7:4c:31:ee:08:4a:1a:33:5b:8b:3f:0e:cd:a5:
         7f:5d:0f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org