Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          lIQFi3LOjFWJCbnlNQTnuiSHMuZT0xesayXIDvw1KhE=
Subject key identifier:   CE:3B:F4:4B:E8:DC:31:5B:CA:1D:4D:19:F7:5B:93:E0:31:26:32:FA
Certificate issuer:       /CN=5D556114DD1ED477249D63DF1F7CE26C1E22ABF7
Certificate serial:       428661ECFA4720D7DC51885DF7D834416FB798DE
Authority key identifier: 5D:55:61:14:DD:1E:D4:77:24:9D:63:DF:1F:7C:E2:6C:1E:22:AB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa
Signing time:             Thu 09 Nov 2023 14:13:58 +0000
ROA not before:           Thu 09 Nov 2023 14:08:58 +0000
ROA not after:            Thu 07 Nov 2024 14:13:58 +0000
asID:                     263335
IP address blocks:        191.36.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:86:61:ec:fa:47:20:d7:dc:51:88:5d:f7:d8:34:41:6f:b7:98:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D556114DD1ED477249D63DF1F7CE26C1E22ABF7
        Validity
            Not Before: Nov  9 14:08:58 2023 GMT
            Not After : Nov  7 14:13:58 2024 GMT
        Subject: CN=CE3BF44BE8DC315BCA1D4D19F75B93E0312632FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9d:ff:0c:7b:fb:5f:52:b0:d9:49:f7:c5:eb:
                    a0:92:04:4a:c7:a1:37:62:24:d8:e1:68:40:ca:88:
                    9b:31:2a:a7:f7:75:ee:23:43:a2:9f:5b:88:34:4d:
                    43:4b:76:17:73:9b:9d:b7:56:7a:47:05:2d:6b:25:
                    10:ca:dd:d3:72:be:74:49:40:43:19:83:6b:d7:d6:
                    6b:0e:7b:86:f5:d5:37:b0:39:40:84:c7:dc:1b:54:
                    50:d9:57:c7:fd:75:83:2f:4e:66:fd:51:61:1a:ed:
                    ac:93:6f:29:bb:a0:bb:7e:b3:35:1f:3e:bb:a2:a9:
                    8b:cc:c4:f7:a5:28:6c:3a:7a:78:be:c1:e3:39:b6:
                    52:2b:bd:0f:7d:82:03:db:cd:ee:d8:c2:0d:df:72:
                    a1:b2:1f:7c:35:66:c5:0d:ac:c8:73:c8:a4:3c:29:
                    0b:af:69:d7:c4:b5:d9:ed:5d:88:b3:f5:e1:ad:c3:
                    76:81:36:bf:db:a4:7d:7f:5c:fc:fb:d0:79:1c:70:
                    15:72:e0:0a:36:d8:07:69:78:0b:81:95:d9:c1:ee:
                    ba:b4:bc:f7:20:c6:ac:62:35:a2:bb:24:15:80:d7:
                    34:16:db:b7:f3:09:36:26:02:93:d3:23:d3:42:43:
                    bf:1a:c6:e8:09:f7:4b:af:ab:bf:8d:21:c2:48:3f:
                    f3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3B:F4:4B:E8:DC:31:5B:CA:1D:4D:19:F7:5B:93:E0:31:26:32:FA
            X509v3 Authority Key Identifier:
                keyid:5D:55:61:14:DD:1E:D4:77:24:9D:63:DF:1F:7C:E2:6C:1E:22:AB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:b4:4e:1b:8d:3d:2a:cf:e2:26:48:e0:1a:98:af:38:cd:50:
         18:3d:23:ed:68:97:45:ff:92:6a:cb:b6:2a:e5:b8:2f:1f:bd:
         41:3d:cc:46:90:ad:75:76:9f:d6:21:45:98:ed:32:1c:70:6d:
         be:bb:2e:12:80:9e:f9:43:1a:74:76:fc:0c:1f:6c:7e:50:d4:
         a4:f7:17:5c:4a:1a:40:9a:24:6a:54:86:f1:bf:e3:61:50:a7:
         b6:0c:c0:fa:6e:5e:52:ea:82:8e:cd:bf:2d:76:14:37:fb:3b:
         aa:9a:ee:4f:4f:d2:f2:71:da:4a:14:46:5b:43:a6:56:de:82:
         25:74:d5:11:1d:be:73:c2:d7:8b:7d:91:58:2a:5f:e6:81:5c:
         65:5f:14:8e:c7:23:d5:a9:96:4d:c6:09:a5:08:ad:07:af:b9:
         e6:55:d8:b5:4a:65:42:99:04:58:72:f9:90:16:7a:15:f8:03:
         94:a8:d5:5d:ec:07:3b:1f:75:1c:14:b0:37:6e:96:84:60:fd:
         7f:86:a3:59:94:a7:1a:3b:a1:db:6a:45:79:9f:3b:5c:1f:ff:
         ca:97:f8:41:4c:cb:6f:34:0c:eb:c7:81:87:9b:54:2f:f5:a2:
         a1:60:4b:26:81:51:95:65:73:1e:ff:87:f2:64:b5:c2:55:12:
         5f:d1:fb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org