Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3134302e302f32342d3234203d3e20323633353336.roa
File:                     3139312e352e3134302e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier:          /GBmo2npplr33+OqWwoRQpdySGu+GwuDI0nw+8DkxJM=
Subject key identifier:   D0:9F:00:CB:44:01:37:E9:DA:EF:D4:91:E3:20:EC:E6:3B:91:A5:03
Certificate issuer:       /CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
Certificate serial:       3E4B5272B4B5F57DE7DDC5D41F5853DDBA1D7205
Authority key identifier: B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3134302e302f32342d3234203d3e20323633353336.roa
Signing time:             Wed 09 Aug 2023 19:09:55 +0000
ROA not before:           Wed 09 Aug 2023 19:04:55 +0000
ROA not after:            Wed 07 Aug 2024 19:09:55 +0000
asID:                     263536
IP address blocks:        191.5.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4b:52:72:b4:b5:f5:7d:e7:dd:c5:d4:1f:58:53:dd:ba:1d:72:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
        Validity
            Not Before: Aug  9 19:04:55 2023 GMT
            Not After : Aug  7 19:09:55 2024 GMT
        Subject: CN=D09F00CB440137E9DAEFD491E320ECE63B91A503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:84:db:87:a1:f2:b1:0e:5b:5e:39:a5:90:f6:
                    a7:bc:54:d6:d5:ef:60:23:f0:32:8b:ec:cf:46:58:
                    c6:3d:f0:6a:85:3b:4d:ca:d5:53:bc:b3:20:cd:92:
                    cc:00:4b:bd:4e:c2:67:ec:ae:17:1d:bc:05:dd:3d:
                    2a:01:b5:3e:dd:79:47:33:74:c5:6a:d5:ea:59:23:
                    02:80:0e:2d:eb:b0:1e:0e:fc:69:a7:65:d9:fa:15:
                    0e:db:28:1b:bb:04:aa:3e:5c:3a:ef:bc:8a:10:c9:
                    5b:7b:c0:32:05:aa:9b:73:9e:88:e8:07:6a:d4:6b:
                    1b:fa:33:8d:1f:91:1a:f2:24:b2:38:43:a7:35:4c:
                    5b:d0:73:6b:75:ee:ec:1f:b6:1c:f5:02:be:dd:fa:
                    fb:3c:ac:c0:b9:50:6f:68:74:41:f6:70:2a:86:2c:
                    c6:29:15:ca:72:24:3a:44:e7:e2:a7:71:50:30:3a:
                    7d:c0:90:b8:fd:1d:03:23:8a:89:f3:1f:dd:50:16:
                    12:d7:f2:eb:8b:43:d8:78:87:81:7d:72:3a:d8:d6:
                    d3:32:2e:86:ac:bd:96:77:32:12:79:e9:d2:3c:b6:
                    45:35:74:d1:20:d7:9e:c5:bf:68:32:03:6e:9c:d0:
                    cc:4d:c1:f3:82:e0:4f:c7:37:f6:9f:12:bf:5e:46:
                    cc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9F:00:CB:44:01:37:E9:DA:EF:D4:91:E3:20:EC:E6:3B:91:A5:03
            X509v3 Authority Key Identifier:
                keyid:B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3134302e302f32342d3234203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:b3:74:08:35:f3:08:e5:34:fa:1f:43:6e:7b:93:b5:06:b1:
         d3:fa:2d:b4:91:f3:e7:9f:9f:58:97:71:68:d5:a4:13:8c:51:
         9b:10:53:1e:f3:04:54:2b:f1:34:d1:21:bd:d4:9b:b3:42:85:
         2c:c2:33:da:0a:2d:8e:44:1f:2e:f0:87:0b:51:4c:fb:33:8f:
         d7:3e:11:0e:0e:7e:29:d9:99:06:60:35:cb:68:23:c9:e1:ea:
         3a:13:29:23:d5:79:67:15:38:8f:42:9b:c7:ca:0c:b6:22:d3:
         5f:55:20:c6:59:25:35:33:12:cd:0a:ea:eb:c5:b3:88:37:50:
         12:8f:52:83:de:c2:5d:3f:45:e6:f7:23:0f:a2:3d:7c:be:68:
         fb:b4:40:9d:c4:0e:6a:fe:d6:43:dc:8e:be:c0:00:a8:a7:9b:
         7e:4d:71:cb:62:c2:53:0d:53:93:f9:e8:74:5c:3c:cd:4e:0d:
         b1:f2:4f:59:a5:ab:8f:e3:70:23:9e:5d:ca:69:d8:57:21:69:
         98:f8:76:35:34:f8:fb:67:32:b9:ba:32:0c:6e:e1:6f:9f:6c:
         2f:8d:91:25:69:c0:a9:67:43:37:f5:7b:4a:f8:9a:ee:e9:00:
         3f:e1:e0:5c:61:98:3a:66:52:9d:a0:9f:90:cd:9a:8e:08:8c:
         e6:c2:4d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org