Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133352e302f32342d3234203d3e20323633353336.roa
File:                     3139312e352e3133352e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier:          ydRG+MWIEStNkNtetriM5IjpQj02p0sWwR0aIeYcG6s=
Subject key identifier:   44:81:E3:EF:72:69:DC:33:D8:35:13:E0:46:1E:9D:29:B0:01:D7:B2
Certificate issuer:       /CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
Certificate serial:       7062A566481AE2B63CA0BC4AE5BB66884D535F09
Authority key identifier: B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133352e302f32342d3234203d3e20323633353336.roa
Signing time:             Wed 09 Aug 2023 19:09:22 +0000
ROA not before:           Wed 09 Aug 2023 19:04:22 +0000
ROA not after:            Wed 07 Aug 2024 19:09:22 +0000
asID:                     263536
IP address blocks:        191.5.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:62:a5:66:48:1a:e2:b6:3c:a0:bc:4a:e5:bb:66:88:4d:53:5f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
        Validity
            Not Before: Aug  9 19:04:22 2023 GMT
            Not After : Aug  7 19:09:22 2024 GMT
        Subject: CN=4481E3EF7269DC33D83513E0461E9D29B001D7B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:d8:8a:dd:35:9b:5b:b2:48:e5:57:a4:cb:
                    4a:85:30:ec:c8:9f:b4:5f:54:6e:97:c7:89:08:fc:
                    e3:e7:8d:43:ae:b6:c5:22:02:b0:0d:ff:b3:9f:7f:
                    3c:41:96:e3:6d:84:9d:54:03:f6:15:7f:9b:72:8d:
                    37:ba:f6:86:c4:73:08:0d:90:5e:b7:16:eb:16:19:
                    99:97:9d:07:66:da:f0:2e:f3:8a:d8:08:7b:58:ce:
                    99:57:f2:1c:19:9f:8e:bc:de:56:e7:b4:40:98:e8:
                    85:15:9e:7d:d0:55:83:f0:a7:21:76:34:44:cb:49:
                    30:41:17:41:63:de:16:e1:ec:c9:8b:6d:48:41:54:
                    15:e2:b9:61:2e:71:bc:29:cd:27:ff:fb:04:ce:6a:
                    ed:cf:9b:fc:67:be:b9:e8:22:7c:1b:a1:18:21:ed:
                    59:49:6d:8d:4f:79:b9:f5:4d:c3:f4:8f:19:dd:e9:
                    39:f7:6f:54:4c:bd:e6:bb:05:7a:81:e0:46:8f:76:
                    a3:de:6f:7d:a7:b0:42:e0:ab:a6:76:e0:e6:d4:ec:
                    48:0d:24:7a:d8:69:a6:3a:98:33:a3:ab:40:e9:c6:
                    42:52:13:81:7d:7d:91:74:aa:bc:1c:74:86:5e:5e:
                    21:1b:df:f2:46:9e:d0:5d:5e:11:32:26:71:42:a2:
                    2f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:81:E3:EF:72:69:DC:33:D8:35:13:E0:46:1E:9D:29:B0:01:D7:B2
            X509v3 Authority Key Identifier:
                keyid:B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3133352e302f32342d3234203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:42:b1:68:39:56:42:6f:ab:b6:30:95:94:85:45:0e:ef:79:
         f0:16:a7:97:69:90:ae:6d:41:14:1e:bb:a4:a4:a8:27:d7:7a:
         af:94:91:3b:b3:14:56:45:31:15:03:10:8d:83:e2:03:e9:63:
         58:78:f7:12:ad:34:a0:f8:7d:fa:02:7f:da:13:7c:36:be:9e:
         61:c9:8b:9e:ff:5c:e3:1a:5b:ca:40:c2:00:99:4a:2a:76:41:
         77:83:b1:32:52:90:de:f5:f6:0a:b8:a3:e0:ee:5d:eb:36:02:
         8b:e3:c2:e4:f9:4f:98:6d:56:3e:8d:f8:c1:db:eb:17:d0:88:
         ea:47:d3:6d:5c:6f:ac:df:e5:49:0a:59:bb:f6:38:e2:a3:71:
         05:9e:5f:44:08:2b:f0:a5:59:de:9e:9b:4f:37:b2:5d:e8:fc:
         55:56:e1:52:33:2f:6a:91:b6:a0:4a:e2:29:d0:ad:e4:9b:5b:
         b4:11:ce:6b:f7:a0:8e:ab:f3:66:8c:29:63:24:6c:06:0f:22:
         df:4f:d0:3e:94:c7:6d:b7:66:c4:c2:4c:47:49:e7:fa:e6:59:
         9d:ac:ec:0d:ed:de:de:47:65:7b:af:4c:8e:75:15:94:37:92:
         1f:c2:e3:1f:76:f9:9e:86:d4:41:a3:33:34:89:8c:25:7e:33:
         d1:91:91:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org