Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133382e302f32332d3233203d3e20323633333335.roa
File:                     3139312e33362e3133382e302f32332d3233203d3e20323633333335.roa (raw, json)
Hash identifier:          p0Uc6rIZswoUOTXgIw/Qlf0VVgfMsbGjnXsSPQL7Vv4=
Subject key identifier:   85:99:64:F5:46:BD:2D:BC:E5:8F:90:1B:CE:4B:4C:BF:76:AB:1E:EB
Certificate issuer:       /CN=5D556114DD1ED477249D63DF1F7CE26C1E22ABF7
Certificate serial:       72FBCB916890EF286F4355C112CCC29DA1EBBC15
Authority key identifier: 5D:55:61:14:DD:1E:D4:77:24:9D:63:DF:1F:7C:E2:6C:1E:22:AB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133382e302f32332d3233203d3e20323633333335.roa
Signing time:             Thu 09 Nov 2023 14:13:58 +0000
ROA not before:           Thu 09 Nov 2023 14:08:58 +0000
ROA not after:            Thu 07 Nov 2024 14:13:58 +0000
asID:                     263335
IP address blocks:        191.36.138.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fb:cb:91:68:90:ef:28:6f:43:55:c1:12:cc:c2:9d:a1:eb:bc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D556114DD1ED477249D63DF1F7CE26C1E22ABF7
        Validity
            Not Before: Nov  9 14:08:58 2023 GMT
            Not After : Nov  7 14:13:58 2024 GMT
        Subject: CN=859964F546BD2DBCE58F901BCE4B4CBF76AB1EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:ea:62:fd:fe:59:ce:ab:ea:d6:3d:47:7d:
                    9b:53:a1:1b:6a:94:2a:43:01:cf:80:33:31:79:00:
                    20:ad:6a:cf:54:8c:b1:ea:1d:b4:cc:73:48:5f:87:
                    8a:81:10:4c:a6:28:7e:e7:2e:6a:b0:66:bb:dd:cc:
                    8e:d1:e4:ff:d7:f2:16:41:70:94:b9:2a:45:99:21:
                    14:c8:44:b3:f9:e0:b5:c5:d8:87:df:3c:c9:37:c0:
                    ca:c5:bb:06:1f:b7:b9:f8:fd:b7:17:f4:eb:eb:a4:
                    0e:96:ae:52:3a:4c:1e:e7:79:77:71:63:4f:e2:9c:
                    e0:7b:f2:50:04:9a:e9:35:5a:96:47:55:04:3f:4d:
                    e6:73:07:07:19:f8:f3:c9:37:4f:7e:7d:d5:39:04:
                    07:84:6c:c4:e0:1b:c2:c4:72:55:39:4f:1b:ac:44:
                    6c:dc:5b:c3:54:0a:3a:ab:ae:89:ca:39:c6:c8:0d:
                    b5:28:2f:47:8c:ae:38:c5:cd:09:94:4a:7b:d2:95:
                    5f:0b:90:e3:32:0d:c0:db:ac:36:0c:89:56:de:00:
                    1d:30:fc:7e:d9:ca:1a:75:0f:73:9e:b0:c5:91:ed:
                    4d:d8:71:f5:c6:62:e7:f7:72:bb:91:e0:96:d3:a4:
                    c6:ec:37:1e:2f:62:9f:99:e3:f5:e1:76:72:1a:64:
                    ba:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:99:64:F5:46:BD:2D:BC:E5:8F:90:1B:CE:4B:4C:BF:76:AB:1E:EB
            X509v3 Authority Key Identifier:
                keyid:5D:55:61:14:DD:1E:D4:77:24:9D:63:DF:1F:7C:E2:6C:1E:22:AB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133382e302f32332d3233203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:73:c2:a9:15:e6:a6:78:38:0a:82:64:f0:28:f6:24:a4:5a:
         2c:0a:40:33:07:be:f4:53:91:de:b3:c6:a9:09:5e:6a:1a:f4:
         e1:36:2d:5f:0a:a0:b4:1a:86:1b:c7:84:7c:01:7d:bb:c7:85:
         4b:96:bc:70:11:ae:92:1d:da:80:53:be:42:90:a7:3d:a3:04:
         af:8a:bd:40:7b:e4:c8:c2:36:f7:99:50:68:7b:59:1c:d5:d1:
         b3:72:8c:8f:87:6c:ed:ff:07:33:f6:b5:91:22:99:e7:40:db:
         46:89:13:66:ad:d1:26:ac:7f:eb:b0:95:9f:5a:00:1f:05:b2:
         b6:d0:1d:4b:e6:3c:e0:8f:64:ed:00:9d:a9:d1:fd:5c:40:ff:
         9f:9a:c2:8b:5a:08:0e:7b:31:ef:75:dd:be:5c:a5:71:95:98:
         25:25:88:61:a7:7e:73:cd:26:e6:9d:a5:f2:61:7d:92:35:65:
         92:f8:78:29:ae:3c:06:92:f8:ab:83:7a:75:b7:0f:f2:f0:3e:
         07:66:24:ad:a6:f1:f3:c3:dc:87:4f:4a:0f:a5:6b:21:33:bd:
         05:19:eb:5e:09:df:53:3f:4b:13:36:b1:f3:2f:86:86:aa:6b:
         48:5c:59:d3:4e:bc:56:99:9c:8a:de:d8:69:ef:66:ba:2d:26:
         0b:cd:36:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org