Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e35332e302e302f31362d3235203d3e203238323032.roa
File:                     3139312e35332e302e302f31362d3235203d3e203238323032.roa (raw, json)
Hash identifier:          jB9O+X5GkGNES1ur4A3Q+/z18oidoCnWztUC4Gyb1gs=
Subject key identifier:   C0:FC:09:A1:68:EF:83:20:08:D6:13:46:2E:67:36:01:93:57:6C:20
Certificate issuer:       /CN=EE2CA5226BA54EB97440397DC62AB9F75B58FA95
Certificate serial:       016F76BF2C0F797024A5E176F0462BD3438C9A6E
Authority key identifier: EE:2C:A5:22:6B:A5:4E:B9:74:40:39:7D:C6:2A:B9:F7:5B:58:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e35332e302e302f31362d3235203d3e203238323032.roa
Signing time:             Wed 13 Dec 2023 12:37:52 +0000
ROA not before:           Wed 13 Dec 2023 12:32:52 +0000
ROA not after:            Wed 11 Dec 2024 12:37:52 +0000
asID:                     28202
IP address blocks:        191.53.0.0/16 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6f:76:bf:2c:0f:79:70:24:a5:e1:76:f0:46:2b:d3:43:8c:9a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE2CA5226BA54EB97440397DC62AB9F75B58FA95
        Validity
            Not Before: Dec 13 12:32:52 2023 GMT
            Not After : Dec 11 12:37:52 2024 GMT
        Subject: CN=C0FC09A168EF832008D613462E67360193576C20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:35:8b:66:15:9a:86:d8:e2:78:a4:0b:09:
                    ea:56:c3:0b:a0:a4:3c:07:37:60:42:1f:1e:6b:b5:
                    18:13:58:bf:53:b5:9d:06:12:97:bb:23:06:78:cd:
                    b2:e7:18:92:72:06:74:b9:c8:60:ad:06:31:7b:d3:
                    7d:ef:e4:1a:01:28:4a:0d:f0:76:82:75:16:11:f4:
                    a8:ae:1b:ee:f2:8e:fd:37:c9:17:f2:f5:60:d1:e8:
                    52:e5:e5:68:9e:9b:ff:1b:24:ca:4b:41:67:e4:cb:
                    f8:88:8e:93:0d:ce:c9:7a:82:20:13:f5:f2:82:c5:
                    d3:72:41:26:57:e4:88:c0:cc:be:da:45:13:a8:d9:
                    3f:5b:db:19:7b:d1:5f:4f:ce:da:7e:5e:06:cb:02:
                    3f:e7:a9:d4:26:f4:dc:01:94:46:c6:98:13:d1:c8:
                    a2:1e:b8:5d:16:b0:d9:78:c2:cb:89:e7:d2:32:1d:
                    17:66:ab:a5:a8:54:14:4c:db:ca:7c:79:a0:77:f9:
                    84:4d:1d:5b:70:0a:f3:af:46:e5:8d:ce:4f:9c:d6:
                    75:49:8d:d3:b0:8f:77:d4:c6:54:75:f9:e2:23:27:
                    3d:bd:f3:40:72:13:45:46:ce:c3:8b:b8:24:09:40:
                    5f:d4:17:dd:55:1c:cf:61:c6:23:19:58:4f:f1:53:
                    bd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FC:09:A1:68:EF:83:20:08:D6:13:46:2E:67:36:01:93:57:6C:20
            X509v3 Authority Key Identifier:
                keyid:EE:2C:A5:22:6B:A5:4E:B9:74:40:39:7D:C6:2A:B9:F7:5B:58:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e35332e302e302f31362d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:fc:6d:82:b7:1b:df:69:5b:14:f6:0b:84:30:59:4c:f9:02:
         3f:bc:f0:a2:78:76:5b:ea:38:ab:b9:72:22:8c:47:1b:e7:3d:
         bc:8a:1a:79:8c:dc:4a:cd:c9:28:ec:88:62:0f:04:f6:72:68:
         33:53:ef:4d:18:a7:c4:19:75:9a:2d:7d:17:dc:09:09:fa:da:
         0d:5c:e1:84:ce:34:ac:e7:0c:e6:82:50:e4:92:1c:9e:96:0b:
         87:e1:0e:79:f2:7b:a5:89:35:b6:74:7e:72:f6:5f:1f:7c:58:
         de:b1:6a:7b:6e:24:dd:7b:77:0a:30:f4:12:a8:f7:45:65:49:
         79:ab:9a:e6:ed:c3:19:4c:13:ef:f8:ea:16:08:46:27:44:dc:
         60:61:de:7a:b0:be:f0:83:24:ff:bc:52:00:af:70:e3:b7:55:
         0c:8c:b7:70:69:46:ec:19:80:40:fd:f6:2b:0a:5a:77:0a:ca:
         da:85:d7:ce:1e:94:d9:fb:bc:b2:d0:8a:f9:4c:8d:63:ba:30:
         d0:4d:f0:79:9e:58:d4:dd:b4:9f:30:5f:d6:7f:2f:0a:09:bf:
         48:20:fd:85:38:02:11:ad:64:ae:d5:fa:39:4d:14:5c:bf:73:
         37:e7:a0:0a:ca:9f:1c:28:c9:bf:d2:f6:05:dd:8d:6f:a9:6d:
         e4:4c:d7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org