Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3139312e352e3232302e302f32322d3332203d3e203533323138.roa
File:                     3139312e352e3232302e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier:          akkT6oOVtztASdYJYJ8PWMO7r75KngpU2X30MQNtGWY=
Subject key identifier:   14:B1:0C:8E:DC:5B:A4:BA:51:66:1F:CA:2F:61:09:04:7B:9B:1C:05
Certificate issuer:       /CN=292430768F8FDCC636FCB3BD7A916A407C9461E8
Certificate serial:       5C66D440055FBD521FA31ED0ED46EF644781D80B
Authority key identifier: 29:24:30:76:8F:8F:DC:C6:36:FC:B3:BD:7A:91:6A:40:7C:94:61:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/292430768F8FDCC636FCB3BD7A916A407C9461E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3139312e352e3232302e302f32322d3332203d3e203533323138.roa
Signing time:             Tue 04 Jul 2023 16:00:23 +0000
ROA not before:           Tue 04 Jul 2023 15:55:23 +0000
ROA not after:            Tue 02 Jul 2024 16:00:23 +0000
asID:                     53218
IP address blocks:        191.5.220.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:66:d4:40:05:5f:bd:52:1f:a3:1e:d0:ed:46:ef:64:47:81:d8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292430768F8FDCC636FCB3BD7A916A407C9461E8
        Validity
            Not Before: Jul  4 15:55:23 2023 GMT
            Not After : Jul  2 16:00:23 2024 GMT
        Subject: CN=14B10C8EDC5BA4BA51661FCA2F6109047B9B1C05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:4c:70:8e:53:58:00:4e:28:0d:00:8a:69:
                    d3:ef:69:7c:ff:56:4a:12:4e:29:2c:32:50:b7:74:
                    22:cf:c2:d6:72:8d:e5:9a:59:02:16:ea:d3:91:4c:
                    a3:b0:7d:21:ab:89:79:56:12:ad:4e:8a:68:f2:e1:
                    da:61:d6:f2:b6:7c:3a:85:52:29:b3:0e:f3:83:0f:
                    c4:08:a2:6c:ea:81:18:0a:7b:91:d3:0f:b9:fa:b7:
                    f8:6e:9d:9e:cc:f1:5d:3d:00:94:b8:f4:21:c1:ab:
                    fb:09:1a:82:3f:f4:37:02:25:49:5e:35:54:eb:43:
                    3e:67:fd:82:cc:2d:71:b2:7a:2f:ac:d2:ea:15:9e:
                    fb:0b:3e:17:4e:12:2d:af:46:1f:ba:fd:8a:20:fc:
                    52:68:07:ad:18:a3:78:13:28:8a:cc:7a:3b:bd:5c:
                    a3:cf:7c:f7:c3:6b:69:2c:de:0e:01:26:9f:30:4a:
                    64:02:f6:7f:7c:0c:cf:1e:ab:5b:32:eb:39:ad:12:
                    50:e8:ce:6e:a4:55:f9:32:49:5e:6e:15:44:18:9e:
                    af:5d:9a:79:21:d4:9b:b3:b9:ad:85:09:8a:5a:1f:
                    2e:9e:70:ce:b3:9c:08:48:2e:7b:33:42:a2:84:ed:
                    01:31:e6:55:4c:6c:d4:14:aa:ca:82:7b:b0:e5:24:
                    9a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B1:0C:8E:DC:5B:A4:BA:51:66:1F:CA:2F:61:09:04:7B:9B:1C:05
            X509v3 Authority Key Identifier:
                keyid:29:24:30:76:8F:8F:DC:C6:36:FC:B3:BD:7A:91:6A:40:7C:94:61:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/292430768F8FDCC636FCB3BD7A916A407C9461E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/292430768F8FDCC636FCB3BD7A916A407C9461E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3139312e352e3232302e302f32322d3332203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:c2:a3:23:80:3c:c4:1b:36:cc:30:08:aa:ed:c0:f6:2f:6d:
         67:7d:a2:12:25:9e:70:ff:99:71:d2:d6:b4:5a:49:dc:43:7c:
         72:d7:86:d4:ad:dd:30:22:5d:dc:29:0e:c1:01:34:53:de:6c:
         59:24:d1:7e:9d:b6:97:a0:0e:b2:6c:b8:88:05:83:27:53:6a:
         00:9a:3c:39:5f:04:36:34:f5:1c:59:d1:b8:ba:62:b8:f8:8a:
         63:d9:8f:de:7a:e1:c4:90:0e:f5:84:4e:48:bc:04:74:97:ab:
         7e:a0:68:6b:eb:a5:05:4c:56:22:a2:8f:76:7b:5e:1c:86:18:
         f4:27:11:a6:30:81:73:e9:79:a3:76:e1:a6:a9:84:9b:72:08:
         b4:e1:5a:ac:60:03:4b:47:d7:1a:ca:43:8d:02:cf:20:af:22:
         f5:6e:84:dc:37:72:3e:16:39:83:1f:aa:cf:fb:e3:3d:3c:58:
         c6:97:99:1a:24:af:a4:58:55:85:1c:80:f4:f3:c0:94:c1:04:
         e2:d9:8b:78:ce:b4:01:1e:1b:50:ba:b0:6e:07:52:52:9f:19:
         71:6c:17:d2:2d:bc:84:31:2f:18:16:d6:79:97:40:9a:77:b7:
         d7:e2:20:c9:89:53:c4:b4:8b:07:c3:f1:26:22:c7:cd:3d:43:
         f3:57:3e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org