Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3139312e362e3233322e302f32312d3332203d3e203238363339.roa
File:                     3139312e362e3233322e302f32312d3332203d3e203238363339.roa (raw, json)
Hash identifier:          JG+nyItH46Is/vx0k/jVK/2rub/ccCtNaNnzviXZgmA=
Subject key identifier:   55:BC:BA:7C:C4:97:06:3A:93:3E:7A:EA:99:9E:71:C1:93:53:79:41
Certificate issuer:       /CN=0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1
Certificate serial:       4FB2C89A8CC021503205447E03D732F0EF368B67
Authority key identifier: 0D:48:62:7D:50:F9:C4:D0:D9:AA:77:8F:24:6C:52:27:F7:AA:F5:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3139312e362e3233322e302f32312d3332203d3e203238363339.roa
Signing time:             Sat 24 Feb 2024 13:00:46 +0000
ROA not before:           Sat 24 Feb 2024 12:55:46 +0000
ROA not after:            Sat 22 Feb 2025 13:00:46 +0000
asID:                     28639
IP address blocks:        191.6.232.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b2:c8:9a:8c:c0:21:50:32:05:44:7e:03:d7:32:f0:ef:36:8b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1
        Validity
            Not Before: Feb 24 12:55:46 2024 GMT
            Not After : Feb 22 13:00:46 2025 GMT
        Subject: CN=55BCBA7CC497063A933E7AEA999E71C193537941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:14:42:f9:54:ec:64:76:1f:7e:fa:66:bc:
                    59:99:8c:3b:ae:9a:8a:b0:4d:b5:83:1a:13:83:d7:
                    93:12:79:95:65:b2:87:60:41:27:9d:a3:aa:ae:41:
                    3f:1d:02:16:dc:3a:cd:96:a8:a4:3c:8f:be:4c:ba:
                    04:18:e0:58:64:57:00:45:d4:6b:9d:79:00:da:47:
                    18:c8:fe:bd:70:59:58:62:66:29:17:a6:ed:65:d2:
                    38:f5:ed:06:57:ca:59:ee:79:21:cf:87:ff:a9:c8:
                    fd:b5:d3:6e:80:ee:a8:79:3f:77:4f:4c:c9:ba:49:
                    9d:63:08:a3:f7:46:fb:e7:0c:88:b6:8a:38:7e:ad:
                    a3:f0:61:69:6b:ef:c0:ed:ed:d6:90:e9:f2:95:05:
                    84:89:2e:45:a6:8b:fa:7d:c2:0f:07:66:c4:7d:28:
                    74:b4:b2:48:4e:3f:2f:7e:a6:c5:c2:bd:09:67:db:
                    64:7a:6f:ce:ac:ab:9e:6e:de:94:f9:af:40:15:95:
                    ef:c6:a0:70:35:5a:6a:ca:98:97:69:f9:3f:2e:67:
                    cc:75:03:ce:79:f6:27:06:12:bf:77:8d:5d:73:5f:
                    16:8a:46:32:11:31:fc:47:95:8e:37:80:6b:ab:81:
                    82:56:36:c1:5a:d9:ef:94:72:ad:89:23:a3:6c:b0:
                    11:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BC:BA:7C:C4:97:06:3A:93:3E:7A:EA:99:9E:71:C1:93:53:79:41
            X509v3 Authority Key Identifier:
                keyid:0D:48:62:7D:50:F9:C4:D0:D9:AA:77:8F:24:6C:52:27:F7:AA:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3139312e362e3233322e302f32312d3332203d3e203238363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         e5:6a:99:01:94:11:46:71:d8:db:e3:31:b7:0b:5c:4d:76:fa:
         9a:61:93:4f:ff:e6:1a:c1:c6:d6:17:28:05:b0:85:2f:55:a1:
         14:a7:e5:f8:1d:15:6e:71:8d:99:8e:16:9a:ac:c3:29:e7:b6:
         7a:db:a2:cd:9e:57:63:be:f2:ef:84:75:9c:22:28:e3:d5:88:
         a2:aa:97:6f:eb:17:61:1e:29:26:e0:c2:42:7a:dd:44:52:96:
         39:29:26:0e:5f:8d:b1:c4:18:c5:e1:6c:9f:27:1e:ec:94:c6:
         60:43:b7:bd:49:20:58:46:ad:ad:d1:c1:bf:7b:15:af:2d:86:
         08:f1:c9:84:90:f0:93:23:cc:40:a2:44:7c:f0:e0:8e:75:49:
         09:09:19:df:1e:1c:55:e1:ae:cb:0e:0b:9f:16:7d:db:2b:9d:
         1d:43:8e:77:a1:96:8f:26:72:1e:c4:bb:ab:95:0f:d9:97:46:
         0c:8c:dd:22:1e:06:9b:ba:36:24:42:15:c6:de:90:8b:02:78:
         8f:24:ae:d1:86:1a:fd:ac:20:30:84:4a:cc:33:a4:04:4d:92:
         a3:b1:30:7c:7c:3a:4e:c1:7b:81:97:9b:34:58:b1:50:eb:f8:
         f0:10:0d:d9:ae:a5:cd:49:5e:1c:8a:eb:63:a8:f4:3f:ec:e5:
         40:0e:67:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:04 2024 by rpki-client on console-ams.rpki-client.org