Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          jufhwz9+juIkAOEw0Es9qvGE82bzeUt6ru+DpR3OamU=
Subject key identifier:   41:98:1F:1E:43:0C:F5:5F:ED:FC:6E:A6:EE:BF:28:93:F6:D6:4D:3A
Certificate issuer:       /CN=5D556114DD1ED477249D63DF1F7CE26C1E22ABF7
Certificate serial:       2672C097967C6E10C1403441AEB1364D9677C235
Authority key identifier: 5D:55:61:14:DD:1E:D4:77:24:9D:63:DF:1F:7C:E2:6C:1E:22:AB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa
Signing time:             Thu 09 Nov 2023 14:13:59 +0000
ROA not before:           Thu 09 Nov 2023 14:08:59 +0000
ROA not after:            Thu 07 Nov 2024 14:13:59 +0000
asID:                     263335
IP address blocks:        191.36.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:72:c0:97:96:7c:6e:10:c1:40:34:41:ae:b1:36:4d:96:77:c2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D556114DD1ED477249D63DF1F7CE26C1E22ABF7
        Validity
            Not Before: Nov  9 14:08:59 2023 GMT
            Not After : Nov  7 14:13:59 2024 GMT
        Subject: CN=41981F1E430CF55FEDFC6EA6EEBF2893F6D64D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:d3:74:d5:7c:60:7a:b1:21:67:dc:3a:d5:
                    3e:4d:46:6e:c6:d5:a0:48:5a:1f:8c:c2:0c:7c:ca:
                    df:3e:be:e6:74:9f:ce:d6:a6:b7:75:57:8e:69:72:
                    13:d9:3d:56:4b:55:7d:0a:f6:c6:ae:23:3a:20:8a:
                    24:63:c5:c4:22:64:4f:7d:57:86:f6:6f:ab:29:00:
                    7a:f2:a4:ec:0e:3f:d6:18:b7:ff:15:07:87:31:a2:
                    b7:03:92:15:c4:71:03:ff:26:ae:b4:bf:4e:9e:f4:
                    3a:b2:b6:5b:8f:03:47:8a:fc:61:4a:32:df:89:5e:
                    f4:65:9d:b9:5f:ec:a9:bc:09:1f:98:c3:77:64:af:
                    52:5a:b7:8e:74:4d:45:45:03:44:b1:c7:73:23:74:
                    2b:d3:50:20:e1:52:e3:fa:86:c5:96:da:34:33:be:
                    e7:eb:7f:31:b5:1a:14:1d:dc:7c:35:86:38:57:2a:
                    75:1c:5a:9a:b4:e8:64:a9:41:45:64:61:32:76:1c:
                    df:1b:63:0f:8e:18:60:37:cd:09:1e:66:5f:d2:ec:
                    57:d9:80:14:c1:c0:c8:47:79:f6:3f:f1:6a:f0:ab:
                    87:d3:b9:90:c7:2b:e5:05:08:e9:60:0d:a9:e3:48:
                    f7:02:03:f6:db:bb:dc:8e:22:8d:2d:99:2f:ab:88:
                    23:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:98:1F:1E:43:0C:F5:5F:ED:FC:6E:A6:EE:BF:28:93:F6:D6:4D:3A
            X509v3 Authority Key Identifier:
                keyid:5D:55:61:14:DD:1E:D4:77:24:9D:63:DF:1F:7C:E2:6C:1E:22:AB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:64:77:9d:cd:4b:37:c5:bd:08:3c:dc:e3:f9:db:85:ef:ff:
         7f:75:07:09:c9:32:4f:34:b9:51:f8:9f:71:2e:6b:f2:6c:eb:
         ab:2e:18:9e:11:56:08:b7:56:3a:3f:e9:8e:d5:b5:85:d4:e8:
         f2:b2:8a:e5:b9:48:42:52:89:1b:67:88:cf:14:95:3f:54:74:
         ee:80:31:3b:71:0b:1c:a7:61:b3:c8:d1:09:4a:b6:0f:4f:12:
         be:58:d2:44:05:c9:a9:d2:4e:c7:73:16:43:3f:e6:f0:c9:d1:
         e7:bc:5f:6a:5b:10:a0:6d:29:5d:4d:02:19:71:ec:0b:40:bf:
         59:7a:da:c5:9c:e7:a8:87:3a:47:40:f0:8e:68:fa:67:01:38:
         14:0a:c6:51:86:da:cc:b7:d7:72:0b:95:1a:75:ba:7d:2d:56:
         9b:97:1e:6a:59:63:36:54:ea:0b:ef:2e:70:98:80:fb:fc:a1:
         d7:c9:0d:d8:ff:a6:42:80:cb:16:d1:44:28:30:d2:89:96:9f:
         49:be:98:9a:02:8e:35:e1:9a:c7:92:49:57:78:66:1a:e5:c3:
         ce:21:7e:46:37:81:d2:1e:3b:22:f4:1c:c1:a0:d9:f0:b7:f2:
         16:0b:c7:a2:03:2f:35:26:05:9f:af:7a:38:7b:61:73:ba:cc:
         16:5e:be:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org