Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37382e302f32342d3234203d3e20323636313336.roa
File:                     3139302e35322e37382e302f32342d3234203d3e20323636313336.roa (raw, json)
Hash identifier:          sjj1D1ioT0YxCyFL9Ba4T8D/kWCLz4MclqblXIgkh1c=
Subject key identifier:   D6:31:E7:02:54:84:D2:A6:80:57:3D:87:A4:6A:3B:83:C7:D8:93:73
Certificate issuer:       /CN=F5A7136C82E81D3EC065F636CE46776805FFAE48
Certificate serial:       5193D4774E2B14E51AC87B377DF9181C961791D3
Authority key identifier: F5:A7:13:6C:82:E8:1D:3E:C0:65:F6:36:CE:46:77:68:05:FF:AE:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37382e302f32342d3234203d3e20323636313336.roa
Signing time:             Wed 08 Nov 2023 23:49:55 +0000
ROA not before:           Wed 08 Nov 2023 23:44:55 +0000
ROA not after:            Wed 06 Nov 2024 23:49:55 +0000
asID:                     266136
IP address blocks:        190.52.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:93:d4:77:4e:2b:14:e5:1a:c8:7b:37:7d:f9:18:1c:96:17:91:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A7136C82E81D3EC065F636CE46776805FFAE48
        Validity
            Not Before: Nov  8 23:44:55 2023 GMT
            Not After : Nov  6 23:49:55 2024 GMT
        Subject: CN=D631E7025484D2A680573D87A46A3B83C7D89373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:53:74:7c:b1:02:ed:ed:24:21:ba:4a:e3:
                    9a:ab:49:5f:c7:11:e9:79:74:a5:40:1e:c2:f7:2c:
                    95:75:23:7f:ea:3a:b4:a3:1d:70:0b:e8:48:2c:2e:
                    41:a4:a6:5d:41:02:0f:d5:76:e6:9b:fb:c8:78:b0:
                    e6:7b:b0:42:8a:d2:53:7c:63:ba:81:e8:8a:5f:f9:
                    09:53:af:73:c8:9a:fc:d1:b5:2d:aa:07:86:87:d2:
                    16:26:99:29:46:cf:12:e1:84:c9:f5:d6:58:cc:a3:
                    fe:df:b2:13:8f:f1:a3:67:65:47:45:6b:cc:99:07:
                    36:d2:a1:2e:86:93:d8:fa:08:25:28:51:08:c7:22:
                    14:96:25:bc:18:8c:89:16:48:21:f9:6d:d9:16:ac:
                    50:7c:92:5b:0e:25:d5:cc:bf:63:10:f8:70:70:7e:
                    79:5c:13:e3:91:ef:41:ec:3c:7e:c1:7d:54:30:ad:
                    8f:bd:6e:c3:c9:ac:b4:7f:50:d3:db:b0:94:1c:30:
                    d9:59:87:18:be:2b:6e:5b:13:c0:30:27:a0:fb:f0:
                    69:ff:52:d4:7a:3e:ec:3d:d1:34:0c:4c:8e:00:30:
                    bc:fc:fc:19:67:24:1d:4c:87:e6:e3:fd:f8:99:2c:
                    26:61:9a:57:6e:fc:7b:88:33:f6:46:b7:f7:dc:b3:
                    6d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:31:E7:02:54:84:D2:A6:80:57:3D:87:A4:6A:3B:83:C7:D8:93:73
            X509v3 Authority Key Identifier:
                keyid:F5:A7:13:6C:82:E8:1D:3E:C0:65:F6:36:CE:46:77:68:05:FF:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37382e302f32342d3234203d3e20323636313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:16:ec:af:a0:d0:9c:d1:e9:a9:eb:8e:49:5d:71:61:e3:7b:
         d5:f9:4a:55:a5:2e:8f:82:b4:0c:82:0c:81:d2:4f:1c:41:64:
         47:16:8d:7d:6f:10:b3:9b:7b:da:0c:e0:4c:8a:32:95:3b:5b:
         c2:ac:27:2b:52:07:99:8d:06:5c:79:b0:ae:53:c6:8d:25:42:
         0b:62:6f:6b:5d:2a:1a:11:1b:67:76:11:5f:81:a6:b3:46:fb:
         9b:1d:e0:e8:18:fe:f8:57:6d:8c:74:b7:29:8a:ae:f2:80:74:
         91:4f:d5:72:61:60:02:f5:f0:c6:74:75:49:7c:b3:cf:a3:22:
         49:9e:19:1f:18:04:c2:1b:a6:b2:5e:ac:3e:9c:42:83:c4:7b:
         f7:8e:5c:45:de:1a:da:5b:b7:d5:7d:2d:cd:eb:8d:0a:0e:3d:
         40:b5:45:5d:f5:8a:1d:db:13:0c:07:b6:b5:cc:5c:a6:4a:54:
         58:54:a1:a4:d9:bd:74:67:2e:c6:7c:22:18:fb:2c:b1:61:5e:
         55:41:0a:b6:8c:e8:ba:96:ee:33:da:2a:0f:ea:64:52:8d:c6:
         99:06:a3:29:b1:88:fc:e8:5b:77:e7:7e:2d:ec:f0:16:89:ea:
         c6:92:3f:4a:02:b5:5e:4c:35:d0:c4:a3:45:da:d4:68:30:cc:
         c2:89:1a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org