Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32322d3232203d3e20323633333335.roa
File:                     3139312e33362e3133362e302f32322d3232203d3e20323633333335.roa (raw, json)
Hash identifier:          k3eKCy2jmetlLxKkG1/dlaA4fjQnJ3TJIbVpQMwi5n4=
Subject key identifier:   86:8B:5E:5C:67:F1:F9:0C:FD:B5:A0:05:88:14:77:3F:3A:79:41:72
Certificate issuer:       /CN=5D556114DD1ED477249D63DF1F7CE26C1E22ABF7
Certificate serial:       669324B553E4D71134120F30E00103F7F6659632
Authority key identifier: 5D:55:61:14:DD:1E:D4:77:24:9D:63:DF:1F:7C:E2:6C:1E:22:AB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32322d3232203d3e20323633333335.roa
Signing time:             Thu 09 Nov 2023 14:13:58 +0000
ROA not before:           Thu 09 Nov 2023 14:08:58 +0000
ROA not after:            Thu 07 Nov 2024 14:13:58 +0000
asID:                     263335
IP address blocks:        191.36.136.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:93:24:b5:53:e4:d7:11:34:12:0f:30:e0:01:03:f7:f6:65:96:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D556114DD1ED477249D63DF1F7CE26C1E22ABF7
        Validity
            Not Before: Nov  9 14:08:58 2023 GMT
            Not After : Nov  7 14:13:58 2024 GMT
        Subject: CN=868B5E5C67F1F90CFDB5A0058814773F3A794172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:12:71:2a:47:02:01:dc:de:ce:07:d4:e1:
                    5c:5b:55:39:1a:d9:b5:a3:d2:b3:1b:5b:a3:9e:58:
                    d5:71:d1:99:af:a4:44:d1:51:58:8b:3e:ba:02:43:
                    5a:cc:67:9d:8d:d6:31:65:02:35:a6:19:2f:84:3f:
                    43:f8:91:08:8a:1a:7f:ef:89:17:34:c5:b8:d1:6d:
                    cb:0b:27:54:20:73:ff:74:39:65:c0:8d:ba:8d:d6:
                    9e:56:2d:a9:2b:0e:cb:0e:75:6a:c5:8c:09:2f:b7:
                    6d:78:05:03:26:04:44:47:bc:c2:06:ce:8c:f4:90:
                    60:9e:85:bd:a0:54:4d:72:e9:73:ec:81:6d:13:da:
                    ed:34:ec:50:ab:ac:8b:85:8f:a9:9e:4f:14:0f:18:
                    18:b2:89:ea:97:a8:76:2a:0a:ef:02:48:d4:dc:44:
                    66:57:b0:8a:fa:9d:96:f2:91:29:98:4c:65:65:3d:
                    47:97:32:0a:ba:84:d0:8e:a1:96:1b:62:9b:97:d8:
                    41:f3:9e:fd:ae:dc:af:4d:e9:aa:e1:1b:44:e3:2d:
                    06:bb:d7:43:f8:3c:3e:7f:ac:fe:13:b6:91:dd:b1:
                    80:92:e4:e4:1c:d7:2e:72:42:08:14:79:76:29:85:
                    e6:cb:32:2b:90:dc:5f:2d:1e:8a:33:e4:86:c7:75:
                    c2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8B:5E:5C:67:F1:F9:0C:FD:B5:A0:05:88:14:77:3F:3A:79:41:72
            X509v3 Authority Key Identifier:
                keyid:5D:55:61:14:DD:1E:D4:77:24:9D:63:DF:1F:7C:E2:6C:1E:22:AB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32322d3232203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:16:34:39:6e:77:75:ac:89:0a:a8:0f:c1:cd:dd:95:34:2a:
         cc:44:ca:48:f9:4b:c3:6e:ae:01:3d:e6:90:c8:f3:98:e2:3e:
         9c:b5:78:c3:31:64:03:9b:c6:1d:8a:33:28:31:f1:4b:bd:5b:
         dd:45:ef:95:9f:df:fe:cb:12:f5:bf:50:9a:0a:75:7d:70:95:
         b6:01:9f:53:e5:57:eb:79:19:96:b8:65:75:00:90:7a:88:5d:
         e5:55:22:ad:de:e1:b6:71:f9:95:26:5f:34:3e:77:68:24:44:
         aa:a4:52:0e:20:4a:ea:43:0b:4a:6d:54:4d:3e:45:7f:41:17:
         06:b9:40:cc:c2:ad:2f:49:38:53:98:28:82:e1:21:6c:97:bf:
         1e:66:4c:d8:bc:0b:fa:46:2f:df:38:0e:fc:25:7e:ed:9c:6c:
         19:92:bf:ae:a1:0c:62:c3:f9:a6:bf:fd:d2:d5:19:2d:c3:c7:
         de:1a:2e:5d:87:da:16:7a:ec:ec:67:b1:16:c3:5c:6c:9b:28:
         6a:df:6c:65:1a:1e:77:13:01:f5:7d:e6:fe:b0:2d:dd:77:8e:
         19:a3:68:c0:4c:24:d2:33:5e:b6:aa:cd:c7:ff:4b:a5:27:b1:
         c2:18:9d:cc:f7:9a:13:b3:36:a4:02:65:aa:c9:fb:08:07:68:
         68:5a:4c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org