Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AdM4WakDVcbVEP3WsmvhLFWJrpjyHHi5v6V3fbBaGMev/0/3139312e372e32382e302f32322d3234203d3e203532393430.roa
File:                     3139312e372e32382e302f32322d3234203d3e203532393430.roa (raw, json)
Hash identifier:          uaVLLMMESX3S01vP/iUbDl7H3uxiSNBHIGryafo1RSQ=
Subject key identifier:   B9:69:4F:0C:06:18:A1:E2:EF:05:6C:FC:9B:28:E6:43:EB:20:06:EA
Certificate issuer:       /CN=58DCEB2BA8436334BE768AC3D425297AFC59F56B
Certificate serial:       51EA869F80BFC1A201C89988BF99B6761F3FAD6E
Authority key identifier: 58:DC:EB:2B:A8:43:63:34:BE:76:8A:C3:D4:25:29:7A:FC:59:F5:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58DCEB2BA8436334BE768AC3D425297AFC59F56B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AdM4WakDVcbVEP3WsmvhLFWJrpjyHHi5v6V3fbBaGMev/0/3139312e372e32382e302f32322d3234203d3e203532393430.roa
Signing time:             Mon 25 Oct 2021 18:34:28 +0000
ROA not before:           Mon 25 Oct 2021 18:29:28 +0000
ROA not after:            Mon 24 Oct 2022 18:34:28 +0000
asID:                     52940
IP address blocks:        191.7.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ea:86:9f:80:bf:c1:a2:01:c8:99:88:bf:99:b6:76:1f:3f:ad:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58DCEB2BA8436334BE768AC3D425297AFC59F56B
        Validity
            Not Before: Oct 25 18:29:28 2021 GMT
            Not After : Oct 24 18:34:28 2022 GMT
        Subject: CN=3082010A0282010100DA02B70C4BE9DAF5C92B0B491C3E66F97A8D3B7D0AFE5A7A5718AD8361C98401A9A7A851A9B2DF5A588C1F6D0F76BD6698F2243CD38587C3676DD7030E07E9C018500609A60B29328D988CDA7225F185D787EE33F4E3E23C58F65551A10D324E9747A9511E9071C613C5DC212F92473B1AE7DC0D5EFBBB7D4030F98C71B312C155A986D0131A6848CD57B9B0C87A137C6C274EE406895279C8E20C16EBF357F7EFCA7F7870C90258E68522FB79E6E120A07D988514551945F6452FE2D92EE9898364F43A83799D5FAEFD04F08BCD504F1D151EFD23F00802A69D1BE8593F1383DAAFACF4D513D80930F536539F8D5B51E1BC95ED6EDB691CD7F5A80A027692370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:02:b7:0c:4b:e9:da:f5:c9:2b:0b:49:1c:3e:
                    66:f9:7a:8d:3b:7d:0a:fe:5a:7a:57:18:ad:83:61:
                    c9:84:01:a9:a7:a8:51:a9:b2:df:5a:58:8c:1f:6d:
                    0f:76:bd:66:98:f2:24:3c:d3:85:87:c3:67:6d:d7:
                    03:0e:07:e9:c0:18:50:06:09:a6:0b:29:32:8d:98:
                    8c:da:72:25:f1:85:d7:87:ee:33:f4:e3:e2:3c:58:
                    f6:55:51:a1:0d:32:4e:97:47:a9:51:1e:90:71:c6:
                    13:c5:dc:21:2f:92:47:3b:1a:e7:dc:0d:5e:fb:bb:
                    7d:40:30:f9:8c:71:b3:12:c1:55:a9:86:d0:13:1a:
                    68:48:cd:57:b9:b0:c8:7a:13:7c:6c:27:4e:e4:06:
                    89:52:79:c8:e2:0c:16:eb:f3:57:f7:ef:ca:7f:78:
                    70:c9:02:58:e6:85:22:fb:79:e6:e1:20:a0:7d:98:
                    85:14:55:19:45:f6:45:2f:e2:d9:2e:e9:89:83:64:
                    f4:3a:83:79:9d:5f:ae:fd:04:f0:8b:cd:50:4f:1d:
                    15:1e:fd:23:f0:08:02:a6:9d:1b:e8:59:3f:13:83:
                    da:af:ac:f4:d5:13:d8:09:30:f5:36:53:9f:8d:5b:
                    51:e1:bc:95:ed:6e:db:69:1c:d7:f5:a8:0a:02:76:
                    92:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:69:4F:0C:06:18:A1:E2:EF:05:6C:FC:9B:28:E6:43:EB:20:06:EA
            X509v3 Authority Key Identifier:
                keyid:58:DC:EB:2B:A8:43:63:34:BE:76:8A:C3:D4:25:29:7A:FC:59:F5:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AdM4WakDVcbVEP3WsmvhLFWJrpjyHHi5v6V3fbBaGMev/0/58DCEB2BA8436334BE768AC3D425297AFC59F56B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58DCEB2BA8436334BE768AC3D425297AFC59F56B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AdM4WakDVcbVEP3WsmvhLFWJrpjyHHi5v6V3fbBaGMev/0/3139312e372e32382e302f32322d3234203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:98:24:6d:b2:25:08:f2:35:5c:9c:a1:dc:8c:0d:1e:7d:5f:
         0a:82:c6:04:ba:8f:67:da:d3:c0:f3:2b:05:8e:5d:41:16:39:
         ff:0c:25:c7:70:1d:76:3e:bd:f0:35:fe:1c:ba:06:42:e1:40:
         c8:22:d0:d7:9e:98:42:e2:21:2d:0c:8f:c3:2e:1b:a8:62:b6:
         61:0b:81:46:19:79:3c:c1:d4:59:1d:5d:6a:cb:1d:13:57:4b:
         23:55:c8:ec:db:8e:c7:0b:ae:39:d4:78:df:89:a0:b3:59:75:
         d9:4e:96:bd:73:e9:18:c5:6a:5c:e6:78:07:7f:d1:81:82:0f:
         1e:99:8f:cf:48:27:01:bf:f6:96:eb:61:4c:d9:b2:96:82:1c:
         99:2b:91:4a:39:ab:dc:e8:4c:96:ef:a0:ec:9c:9b:aa:04:35:
         80:db:62:04:9b:ab:62:fd:25:18:63:d9:4f:fa:87:58:63:a6:
         83:62:e5:31:fb:7d:e8:1c:4f:46:1b:e1:f8:20:2c:10:48:d4:
         87:9d:ae:eb:0d:95:97:6b:45:94:46:87:6c:d5:30:26:2d:31:
         1d:16:6f:d4:c4:06:26:03:09:37:99:e3:b3:63:14:33:9f:bc:
         fc:b1:0c:90:0d:9e:49:53:d9:2b:7f:76:cf:ad:9f:cf:ab:b1:
         3d:3b:35:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org