Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3139312e33372e38382e302f32312d3234203d3e203631353838.roa
File:                     3139312e33372e38382e302f32312d3234203d3e203631353838.roa (raw, json)
Hash identifier:          JN6pw80OcwVIBfdAcKKiPcDg1NCMITnBGye1vOtUlzU=
Subject key identifier:   01:32:20:B2:A9:0E:98:74:D4:78:B9:C8:1A:B5:9B:98:79:B0:EA:D2
Certificate issuer:       /CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
Certificate serial:       5EC17E7CA2A5FFAC0F0EFE32EA903D6B2DAFD281
Authority key identifier: D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3139312e33372e38382e302f32312d3234203d3e203631353838.roa
Signing time:             Tue 20 Dec 2022 19:19:42 +0000
ROA not before:           Tue 20 Dec 2022 19:14:41 +0000
ROA not after:            Tue 19 Dec 2023 19:19:41 +0000
asID:                     61588
IP address blocks:        191.37.88.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c1:7e:7c:a2:a5:ff:ac:0f:0e:fe:32:ea:90:3d:6b:2d:af:d2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
        Validity
            Not Before: Dec 20 19:14:41 2022 GMT
            Not After : Dec 19 19:19:41 2023 GMT
        Subject: CN=013220B2A90E9874D478B9C81AB59B9879B0EAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e7:62:91:90:75:09:03:a1:8e:b1:9d:da:9d:
                    0a:4d:94:ba:79:f1:2a:e1:87:0d:5a:3a:6e:26:bb:
                    fc:ae:df:05:d2:1f:02:32:85:d7:4f:42:c9:df:e9:
                    1f:86:de:18:1c:9b:b5:84:96:97:b6:b1:8e:cd:ae:
                    ea:14:97:21:69:7a:a2:9c:0a:44:10:b2:15:eb:05:
                    d2:2f:d9:5f:31:cf:b4:a9:e7:0f:a1:55:9c:b5:63:
                    3f:83:6d:bd:64:9c:da:25:1b:a0:61:7b:b6:07:28:
                    69:b8:a0:ed:ab:fe:37:19:90:e3:7e:88:c3:f1:8c:
                    d7:ff:2c:9b:b0:44:23:77:ba:65:02:26:b7:6c:20:
                    e1:10:86:5d:7b:da:ab:ff:fa:a8:97:ff:4b:30:89:
                    43:7b:93:10:89:59:70:5e:59:b2:96:ca:44:ab:b9:
                    c1:03:c2:a6:6f:43:a8:48:ba:b5:fb:6a:4c:91:bc:
                    17:12:85:c1:c8:e6:26:ad:dd:2e:51:64:91:31:3f:
                    95:47:22:2c:e0:97:24:ae:43:7d:ed:00:91:4b:71:
                    70:12:7b:9a:d7:dd:40:f1:dd:7b:17:6f:8d:a8:69:
                    f4:21:d9:7a:f3:40:1e:99:d8:d3:ee:19:5e:45:51:
                    43:0a:eb:17:51:46:c0:dd:11:6f:56:77:fd:59:d2:
                    62:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:32:20:B2:A9:0E:98:74:D4:78:B9:C8:1A:B5:9B:98:79:B0:EA:D2
            X509v3 Authority Key Identifier:
                keyid:D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3139312e33372e38382e302f32312d3234203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0e:18:da:7b:53:37:c5:2d:e5:91:12:98:57:d6:28:66:c3:67:
         f8:b7:7a:63:06:86:dd:c6:30:71:56:06:b4:ed:7d:95:1c:dd:
         3c:88:47:0c:89:77:a1:d5:ef:fd:3e:54:c6:8f:10:66:3f:7e:
         7c:35:4b:d4:e1:16:be:3f:32:75:d4:fc:7e:2c:ea:86:c4:14:
         3f:13:78:c8:d9:6d:a1:e0:39:bb:ee:aa:a8:b9:dd:31:0f:3a:
         31:b7:75:f0:d9:72:1c:fe:a6:4c:57:86:cd:58:ea:06:42:7b:
         66:03:fd:4a:6b:21:2e:57:56:74:9b:6b:b2:a1:88:02:33:4e:
         54:67:c1:29:91:96:d1:58:5e:48:0f:f1:bf:83:38:7e:e1:0c:
         9b:76:fe:0a:04:58:6c:5e:44:e1:58:34:a4:c4:09:8d:07:6e:
         d3:0f:64:14:20:8a:2a:68:fd:d3:9c:c9:1e:2a:ff:77:e0:59:
         78:35:b4:cb:08:f1:2d:1d:6f:39:69:bb:76:32:15:42:da:ae:
         32:96:2f:5e:e0:22:90:d5:87:b2:f8:3f:6b:06:e0:5f:36:2b:
         92:19:67:35:6d:3f:80:c3:8c:a2:65:60:d2:2a:54:2b:c5:45:
         b4:96:02:c3:94:56:27:83:1c:a3:20:6e:b6:4c:37:a7:7b:cc:
         29:a8:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org