Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38312e302f32342d3234203d3e20323730393732.roa
File:                     3139312e33372e38312e302f32342d3234203d3e20323730393732.roa (raw, json)
Hash identifier:          iwiqo5Ik2Nm2EvTTqPC+lrebFGTELdyZqMWuOXCm9Cs=
Subject key identifier:   AC:8E:68:00:29:16:5F:E7:EB:08:20:61:3B:5C:BE:B8:68:DE:09:1B
Certificate issuer:       /CN=5C4CF16B8DA3EAC53AC14CF5F617C97602F3CC39
Certificate serial:       1392A4A04E4D9A8C4B6152145765F800B4565B43
Authority key identifier: 5C:4C:F1:6B:8D:A3:EA:C5:3A:C1:4C:F5:F6:17:C9:76:02:F3:CC:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C4CF16B8DA3EAC53AC14CF5F617C97602F3CC39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38312e302f32342d3234203d3e20323730393732.roa
Signing time:             Wed 26 Jul 2023 23:11:22 +0000
ROA not before:           Wed 26 Jul 2023 23:06:22 +0000
ROA not after:            Wed 24 Jul 2024 23:11:22 +0000
asID:                     270972
IP address blocks:        191.37.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:92:a4:a0:4e:4d:9a:8c:4b:61:52:14:57:65:f8:00:b4:56:5b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C4CF16B8DA3EAC53AC14CF5F617C97602F3CC39
        Validity
            Not Before: Jul 26 23:06:22 2023 GMT
            Not After : Jul 24 23:11:22 2024 GMT
        Subject: CN=AC8E680029165FE7EB0820613B5CBEB868DE091B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ec:10:e9:58:f0:d8:d6:c0:fd:57:2b:40:4d:
                    43:7d:2d:25:2d:73:95:dc:2a:0b:cc:ef:20:16:ec:
                    f1:e0:18:34:9a:ac:a4:7b:3c:d5:76:3a:51:af:59:
                    eb:47:40:48:73:79:9c:76:79:62:62:b0:b2:8a:d5:
                    fa:5d:08:ea:a3:78:40:a6:65:7c:3d:6b:88:0c:3f:
                    8b:ac:54:bc:85:7c:6c:39:7b:20:f8:91:80:27:f0:
                    89:10:fe:ae:e7:4c:39:10:f6:0a:f4:63:ea:02:3e:
                    b7:56:14:c2:e1:57:ab:c2:60:19:da:85:db:22:f1:
                    55:81:f0:52:ca:7a:8d:d8:0d:97:fa:0e:5b:12:02:
                    7f:a6:6a:9f:4d:7f:38:20:d4:fe:1d:2a:82:99:ab:
                    f0:71:17:6d:25:79:e4:bc:80:ed:ab:7a:72:48:55:
                    6c:0a:b1:8b:7b:3a:99:de:f3:f6:44:17:be:a4:9f:
                    ba:4d:1f:10:a4:51:57:25:a1:05:a1:c8:cb:e0:1d:
                    84:fb:5e:fb:be:cd:e1:c7:fc:ef:6e:71:02:55:85:
                    05:39:0d:d4:1d:80:48:6b:8b:85:2a:bb:52:10:a6:
                    fc:17:ef:d4:da:db:e6:30:75:54:ea:a5:8b:27:7e:
                    05:4a:55:3a:f4:10:d2:46:14:41:a1:f6:07:3d:d2:
                    f2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8E:68:00:29:16:5F:E7:EB:08:20:61:3B:5C:BE:B8:68:DE:09:1B
            X509v3 Authority Key Identifier:
                keyid:5C:4C:F1:6B:8D:A3:EA:C5:3A:C1:4C:F5:F6:17:C9:76:02:F3:CC:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/5C4CF16B8DA3EAC53AC14CF5F617C97602F3CC39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C4CF16B8DA3EAC53AC14CF5F617C97602F3CC39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38312e302f32342d3234203d3e20323730393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:f5:d7:e4:d2:3c:9e:90:85:33:e6:e4:a1:1d:fa:35:df:b7:
         4c:df:80:90:0c:76:eb:7a:fb:f9:ee:5b:26:68:9c:c8:47:87:
         99:f2:45:75:19:12:4d:ee:55:50:85:94:37:fa:b4:a0:75:97:
         a1:00:fd:9e:74:41:68:52:04:56:6d:43:fc:9e:6b:b9:5d:cd:
         22:fb:94:15:18:80:c0:32:71:cd:96:9e:ac:03:c0:77:1a:9e:
         8b:8d:f3:cb:2a:4c:6e:a2:24:80:a9:93:59:c0:ab:95:8e:00:
         8e:cb:1c:98:07:05:76:7e:ef:09:63:19:bc:61:bd:72:57:b8:
         e6:98:dc:53:1a:fb:4b:dc:4c:ea:51:47:19:42:15:dd:4c:b4:
         a4:4b:e2:94:75:47:34:db:51:4e:8f:06:60:98:5e:10:f6:55:
         0e:aa:73:2d:ea:b2:82:59:19:77:ee:bc:6c:22:06:73:52:3f:
         3d:a7:a9:05:55:77:8b:e9:e2:d9:16:22:ce:e8:3b:d7:c0:63:
         f6:d3:17:e4:ad:05:10:44:ec:7e:57:70:3b:63:f8:50:1e:39:
         ca:77:c6:2b:84:49:f1:ed:37:2c:1f:10:55:43:92:02:e3:53:
         e5:b6:96:6c:d9:cd:49:4b:ed:b0:84:11:20:0a:e4:46:27:f6:
         55:b2:e5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org