Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3139312e352e3232302e302f32322d3234203d3e203533323138.roa
File:                     3139312e352e3232302e302f32322d3234203d3e203533323138.roa (raw, json)
Hash identifier:          RSwy5DMY9D1/Gip3TG07dwmn5FVGSnRpgEESfHSIJqM=
Subject key identifier:   42:A4:08:0B:38:9A:C6:48:7E:BA:0A:52:0F:F5:3A:81:64:48:C8:67
Certificate issuer:       /CN=2F9412103006FB102F94DFE166EAB3530381A078
Certificate serial:       677732CE0798EB6ADBC014671FAE88E73E93C52A
Authority key identifier: 2F:94:12:10:30:06:FB:10:2F:94:DF:E1:66:EA:B3:53:03:81:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F9412103006FB102F94DFE166EAB3530381A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3139312e352e3232302e302f32322d3234203d3e203533323138.roa
Signing time:             Mon 13 Jun 2022 22:24:45 +0000
ROA not before:           Mon 13 Jun 2022 22:19:45 +0000
ROA not after:            Mon 12 Jun 2023 22:24:45 +0000
asID:                     53218
IP address blocks:        191.5.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:77:32:ce:07:98:eb:6a:db:c0:14:67:1f:ae:88:e7:3e:93:c5:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9412103006FB102F94DFE166EAB3530381A078
        Validity
            Not Before: Jun 13 22:19:45 2022 GMT
            Not After : Jun 12 22:24:45 2023 GMT
        Subject: CN=42A4080B389AC6487EBA0A520FF53A816448C867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:35:fd:39:ee:37:07:0e:f1:aa:82:fa:84:08:
                    be:bb:e2:45:66:7b:db:f1:17:ce:8f:db:9c:91:0c:
                    97:43:00:0a:64:c4:85:cd:b5:cd:cb:b2:17:5d:b9:
                    e7:76:d0:4b:49:9c:2b:3c:53:4d:13:aa:e9:fa:dd:
                    fe:41:eb:8b:d6:26:61:52:e5:24:6d:a5:40:5d:a1:
                    fa:e1:da:11:ba:7b:e4:b3:87:5e:5b:11:30:ab:50:
                    33:f8:d9:9f:d7:02:13:f5:88:ed:4c:f2:d2:92:a2:
                    8a:60:a7:3a:9a:4f:75:f8:44:ef:0f:b4:51:9e:24:
                    18:d1:28:15:b7:42:e0:b0:2d:48:ee:66:8b:5f:05:
                    6f:1e:fa:14:f0:f5:87:4d:8b:83:34:6e:73:0e:0e:
                    94:c7:ae:4d:23:50:8a:5b:dc:49:81:39:4f:fd:da:
                    ab:44:3d:34:e1:50:67:93:9c:f0:4f:38:d0:ca:7d:
                    60:4b:8d:9f:4b:d1:92:50:a1:a7:82:aa:98:5a:49:
                    ef:7b:9d:17:2d:ed:73:91:6e:1f:f1:6e:31:3a:b4:
                    a4:1f:37:ed:58:8b:2d:e7:5b:a0:39:96:37:68:75:
                    57:23:80:48:18:0e:a4:8d:9b:09:d3:12:0f:8e:ef:
                    10:da:28:26:a1:c1:d6:72:e1:1e:d3:85:44:e4:37:
                    f2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A4:08:0B:38:9A:C6:48:7E:BA:0A:52:0F:F5:3A:81:64:48:C8:67
            X509v3 Authority Key Identifier:
                keyid:2F:94:12:10:30:06:FB:10:2F:94:DF:E1:66:EA:B3:53:03:81:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2F9412103006FB102F94DFE166EAB3530381A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F9412103006FB102F94DFE166EAB3530381A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3139312e352e3232302e302f32322d3234203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:6b:cb:ba:57:a8:d1:2d:c7:ea:90:7d:9c:a7:5a:f2:84:79:
         5f:92:46:4d:25:1c:1f:f1:74:15:39:57:70:c7:94:ab:5c:be:
         96:51:cc:60:ba:bf:f3:cf:c9:fb:f5:48:13:17:24:93:0a:bd:
         39:b1:4c:c4:8a:7a:ca:8c:64:b3:6c:08:a3:62:05:b3:df:c4:
         93:6c:c9:35:e9:18:c0:20:45:50:68:9a:90:b1:de:0c:ec:c0:
         f0:a9:a2:d7:2e:88:82:a9:5c:a0:63:2f:8c:22:b9:60:76:c7:
         93:91:cb:4e:58:c4:c5:35:0c:72:0e:7c:7e:9c:ed:16:5b:ec:
         dd:f2:91:b2:2b:a2:bf:6f:19:bd:8f:72:c4:71:53:8f:69:19:
         48:ad:2c:b9:00:18:74:ca:17:f6:c7:95:03:50:14:32:4e:9d:
         cf:47:5b:13:ba:3a:de:cb:30:9f:f1:b9:3c:b9:2f:89:90:10:
         0f:73:f2:0b:eb:c0:f7:8f:e5:ae:34:93:e7:b7:5c:6f:d8:ac:
         cf:cd:9b:54:f7:9b:0e:9a:c8:8a:9a:2b:69:ed:2b:28:f6:f9:
         dc:28:0b:36:05:5b:0b:ad:fc:68:f8:53:ee:9c:d4:74:3e:31:
         29:94:a1:60:5f:00:2f:69:e0:71:74:6a:72:85:57:6f:96:95:
         08:78:88:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org