Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133342e302f32332d3233203d3e20323633353336.roa
File:                     3139312e352e3133342e302f32332d3233203d3e20323633353336.roa (raw, json)
Hash identifier:          ktiGEb7j7B8sTe7URiagOe7Y3BF1g7VuXJamo72JhHc=
Subject key identifier:   D8:3B:71:54:94:1F:DB:4E:50:88:D9:90:58:44:28:95:DF:D6:37:E8
Certificate issuer:       /CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
Certificate serial:       1F89F90DA68A313C864B5371349C4265F54DA7CC
Authority key identifier: B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133342e302f32332d3233203d3e20323633353336.roa
Signing time:             Wed 05 Jul 2023 17:22:02 +0000
ROA not before:           Wed 05 Jul 2023 17:17:02 +0000
ROA not after:            Wed 03 Jul 2024 17:22:02 +0000
asID:                     263536
IP address blocks:        191.5.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:89:f9:0d:a6:8a:31:3c:86:4b:53:71:34:9c:42:65:f5:4d:a7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
        Validity
            Not Before: Jul  5 17:17:02 2023 GMT
            Not After : Jul  3 17:22:02 2024 GMT
        Subject: CN=D83B7154941FDB4E5088D99058442895DFD637E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:4b:e4:86:26:cc:b1:5a:e1:4b:17:65:16:
                    80:d2:79:7b:55:15:28:fa:52:21:20:79:d1:25:4f:
                    19:73:77:60:ff:49:b2:0e:5e:a9:6c:e7:56:7f:92:
                    a0:82:04:7f:ee:04:ed:35:61:bf:88:37:dd:19:43:
                    ae:fe:0d:7b:b3:27:5f:14:cc:6e:17:57:ee:70:90:
                    35:63:8a:28:56:88:93:3a:61:26:39:55:40:6b:b3:
                    72:f2:62:0c:29:6c:a1:03:8d:4d:be:f5:5e:98:4d:
                    6d:32:fa:33:16:67:c4:94:6f:58:42:d1:f2:31:cb:
                    9d:8c:2e:fc:3c:3f:a4:4e:75:dc:02:1c:c5:a0:8c:
                    c3:7b:68:db:28:f5:c7:81:08:af:1d:3f:2d:41:d9:
                    07:4e:57:2b:97:50:79:c0:d0:67:52:04:4e:5b:87:
                    d8:5e:8b:7e:34:5a:ed:d0:fc:51:28:52:66:54:ac:
                    f8:a2:ce:71:aa:71:8a:11:b4:51:2d:d3:77:5b:7f:
                    93:a3:cc:83:94:81:c0:37:54:13:cb:f9:fb:d2:32:
                    e8:50:4c:09:d8:9d:2c:af:16:46:4a:2a:e9:6c:67:
                    32:d1:2e:16:d7:36:e5:12:d7:6a:58:31:e2:0c:9a:
                    23:91:e1:0b:3a:b8:ea:8d:ab:ca:c7:01:45:65:1c:
                    66:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3B:71:54:94:1F:DB:4E:50:88:D9:90:58:44:28:95:DF:D6:37:E8
            X509v3 Authority Key Identifier:
                keyid:B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133342e302f32332d3233203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:dc:98:05:45:24:6d:c9:02:d4:29:30:52:f1:9b:c9:29:70:
         7f:2f:b4:03:e4:ba:2f:68:2a:3c:f2:97:a8:cd:f8:2e:b6:9d:
         06:8c:32:91:06:ec:d9:57:3f:76:f3:c3:8c:d2:5d:94:c5:c4:
         b1:15:34:76:f9:80:2e:aa:5b:f9:e2:c8:77:43:3e:62:ac:23:
         0a:5e:b7:9c:21:da:df:82:75:5f:fc:21:82:e3:60:cd:1d:cd:
         e3:d7:32:77:7a:26:5f:d3:9e:c4:1c:00:b4:6c:d1:6a:84:31:
         05:97:3e:82:58:97:89:7b:6d:af:e7:63:15:2b:4d:ff:31:c3:
         57:46:c8:23:b1:ba:90:dd:33:d8:81:34:7e:01:d9:9e:a2:6f:
         ef:80:69:50:8b:3b:2e:7c:79:3b:b9:73:3a:ac:2e:2e:43:65:
         2c:83:55:94:b9:40:81:a1:23:4f:44:04:50:aa:ce:3b:95:4d:
         3f:39:eb:8a:08:06:2e:47:2f:eb:40:d0:81:f8:93:a4:85:8a:
         d2:d3:1e:ca:59:c1:11:46:40:41:16:da:03:96:ec:86:53:3c:
         c0:51:2a:96:ef:77:f4:77:9a:a4:e6:57:cd:e0:6f:7e:2d:02:
         dd:b6:0d:0a:8c:45:4f:de:e5:58:42:16:e5:87:84:39:31:6a:
         a6:0a:10:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org