Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133382e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3133382e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          yHC0fIua3b+td9rRghabyZrcKMp9TVb1Niz7/0LxRa8=
Subject key identifier:   37:0D:FE:22:27:01:9A:9C:40:97:BC:98:95:41:AD:C9:A3:D5:21:79
Certificate issuer:       /CN=5D556114DD1ED477249D63DF1F7CE26C1E22ABF7
Certificate serial:       39F2A3F64F59B320A15A5D6BADC00F0CFF04671C
Authority key identifier: 5D:55:61:14:DD:1E:D4:77:24:9D:63:DF:1F:7C:E2:6C:1E:22:AB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133382e302f32342d3234203d3e20323633333335.roa
Signing time:             Thu 09 Nov 2023 14:13:59 +0000
ROA not before:           Thu 09 Nov 2023 14:08:59 +0000
ROA not after:            Thu 07 Nov 2024 14:13:59 +0000
asID:                     263335
IP address blocks:        191.36.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f2:a3:f6:4f:59:b3:20:a1:5a:5d:6b:ad:c0:0f:0c:ff:04:67:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D556114DD1ED477249D63DF1F7CE26C1E22ABF7
        Validity
            Not Before: Nov  9 14:08:59 2023 GMT
            Not After : Nov  7 14:13:59 2024 GMT
        Subject: CN=370DFE2227019A9C4097BC989541ADC9A3D52179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:95:ec:33:33:8a:53:e5:da:57:d0:57:a4:cb:
                    f7:af:72:d9:db:c4:e1:2b:da:d5:75:18:72:a6:aa:
                    40:01:1d:62:a3:77:bf:4f:20:39:b1:e2:5e:3f:42:
                    da:f6:73:00:72:60:73:3c:83:28:e5:05:9e:3e:de:
                    a2:ac:1d:90:7b:29:bd:68:be:15:7f:a4:fb:54:57:
                    14:f7:19:49:b0:25:5c:be:55:02:d7:75:b3:28:49:
                    02:90:4c:c7:56:f1:e0:62:98:89:df:41:4b:72:aa:
                    21:75:ff:95:f8:70:0c:70:a9:f0:94:d2:65:7a:5b:
                    9b:3a:7a:77:7a:ee:15:3b:52:f7:1b:2a:47:2c:3b:
                    1b:a3:b3:3f:ee:38:b3:43:d3:c7:8c:5b:05:ba:1f:
                    ca:01:46:a2:f8:0f:e3:c7:a9:0f:fc:cf:73:e9:8a:
                    e3:d3:0b:56:20:8e:01:8c:0c:99:2d:63:ea:e7:a9:
                    e4:c9:42:d1:16:04:a2:3e:d4:66:7a:0a:1d:4c:8f:
                    9a:e9:f6:cd:62:62:b2:7d:fb:ee:44:73:65:c1:c9:
                    d2:a0:69:d2:27:4a:b5:3f:ab:d3:6c:b3:ce:20:a0:
                    9b:bf:d2:69:01:10:0f:5a:c5:9b:06:76:ad:c9:0d:
                    74:b8:c6:fa:6b:ef:4a:e3:dd:68:b2:e3:a4:86:58:
                    45:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0D:FE:22:27:01:9A:9C:40:97:BC:98:95:41:AD:C9:A3:D5:21:79
            X509v3 Authority Key Identifier:
                keyid:5D:55:61:14:DD:1E:D4:77:24:9D:63:DF:1F:7C:E2:6C:1E:22:AB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133382e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d5:74:15:8d:9a:f6:49:43:05:7f:be:87:6b:68:e6:5d:26:
         8e:96:5f:28:39:fb:ca:d5:be:5b:af:12:7b:b7:ec:1a:59:2d:
         4e:e4:3d:b3:b8:c2:42:c7:b3:b7:43:7f:a6:0e:09:c2:4b:08:
         bb:e3:66:91:c3:a4:a4:3e:cc:a7:c6:2a:f6:28:7e:2d:05:34:
         a4:7e:76:84:a5:11:d1:ee:eb:8a:80:b8:8e:50:15:5c:5b:7b:
         45:4b:4d:9d:da:cb:7a:82:d5:11:77:a0:02:69:cf:52:39:ac:
         44:fb:2e:62:cf:d6:ff:f4:a9:3a:1c:71:0e:9b:e5:77:d2:02:
         a8:0c:e7:14:2e:04:d1:69:f4:40:50:51:67:68:64:0a:1d:6e:
         41:98:a9:da:a5:34:1b:1e:0d:3f:13:a2:03:7f:f3:dc:db:91:
         03:f9:54:c3:61:eb:41:0b:f5:da:85:15:24:24:8a:47:1c:32:
         1e:d7:69:e9:e5:1f:b3:60:80:af:47:57:a9:33:a9:72:80:b7:
         c3:59:76:6d:06:53:dc:95:4b:3c:23:38:fb:03:95:fb:96:08:
         6b:cb:3c:4e:5d:b5:b8:59:63:c3:3c:a6:2c:4e:dc:66:38:e6:
         b9:0a:ac:c6:de:9e:b2:fb:e0:04:e7:74:65:17:8e:ad:8a:89:
         07:75:53:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org