Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa
File:                     3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa (raw, json)
Hash identifier:          M6wxdQnk7Td8BuFPqZdfaxU7FhBUSnI1MnrJnVU3lzg=
Subject key identifier:   45:14:2B:20:2A:48:29:4B:E1:EC:E5:ED:3F:97:DB:3A:D5:35:9B:35
Certificate issuer:       /CN=5D556114DD1ED477249D63DF1F7CE26C1E22ABF7
Certificate serial:       65231BD697C15C7425CDF3D2A67937C17632294B
Authority key identifier: 5D:55:61:14:DD:1E:D4:77:24:9D:63:DF:1F:7C:E2:6C:1E:22:AB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa
Signing time:             Thu 09 Nov 2023 14:13:58 +0000
ROA not before:           Thu 09 Nov 2023 14:08:58 +0000
ROA not after:            Thu 07 Nov 2024 14:13:58 +0000
asID:                     263335
IP address blocks:        191.36.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:23:1b:d6:97:c1:5c:74:25:cd:f3:d2:a6:79:37:c1:76:32:29:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D556114DD1ED477249D63DF1F7CE26C1E22ABF7
        Validity
            Not Before: Nov  9 14:08:58 2023 GMT
            Not After : Nov  7 14:13:58 2024 GMT
        Subject: CN=45142B202A48294BE1ECE5ED3F97DB3AD5359B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:d0:91:1d:5e:1f:a0:c3:01:00:33:59:2f:
                    29:a1:48:b2:72:39:e3:09:4b:57:07:9d:1a:db:04:
                    28:f3:a5:54:b7:a7:d1:66:33:6b:57:2a:bf:bc:fc:
                    3f:bc:95:87:f1:3f:51:0d:f8:57:84:9d:62:17:85:
                    6a:43:94:6a:c4:47:56:68:a3:39:50:c6:05:14:d4:
                    52:d5:d9:5a:f5:2d:dd:cc:00:aa:6f:24:46:94:19:
                    76:96:18:83:cb:5b:6a:38:37:e3:86:1c:a8:e2:c5:
                    f8:44:0e:76:22:1a:3a:0a:36:9f:33:b0:6c:d3:85:
                    e6:37:45:cc:11:12:a6:1d:ba:23:71:27:16:c1:dd:
                    c4:43:85:be:df:8c:65:7b:79:e3:e7:00:e0:be:2e:
                    2f:eb:fb:5e:0c:aa:93:59:32:1a:f2:3d:61:d3:06:
                    30:f9:79:c1:b1:f3:85:29:03:56:b1:2b:c8:ac:15:
                    00:33:6c:8f:45:1c:56:8a:cc:b6:d9:75:60:86:5a:
                    e2:fa:29:10:de:a1:8b:9f:07:c8:9a:57:cc:9d:07:
                    f3:b7:a3:bc:b7:64:44:f8:96:92:e5:55:51:42:40:
                    c2:5b:b1:44:f4:b1:2d:82:8b:8d:7d:6b:ba:08:69:
                    2d:51:41:cb:5f:0d:67:3c:7c:df:dc:46:7e:5a:61:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:14:2B:20:2A:48:29:4B:E1:EC:E5:ED:3F:97:DB:3A:D5:35:9B:35
            X509v3 Authority Key Identifier:
                keyid:5D:55:61:14:DD:1E:D4:77:24:9D:63:DF:1F:7C:E2:6C:1E:22:AB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D556114DD1ED477249D63DF1F7CE26C1E22ABF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:89:e6:a4:e2:2a:f7:00:7b:1f:79:f7:59:cd:01:6d:75:f8:
         38:2e:fc:d1:b1:c5:9d:15:70:d9:56:31:7e:5c:9d:d2:7d:09:
         a9:ca:32:ca:7d:c6:5c:fa:69:a0:8f:05:5c:d2:fe:b4:a1:18:
         bb:fb:1b:68:5d:c0:75:9f:b6:9b:86:d1:dc:a7:9e:f7:91:aa:
         cc:22:f9:30:dd:d1:a5:2f:5e:17:e3:43:80:07:1c:86:ba:95:
         03:26:76:2a:ec:d8:db:da:cb:f1:c8:90:e1:6b:ca:83:b5:0f:
         77:78:dc:d1:9f:1f:99:9b:dd:c2:d3:ec:5c:8a:9c:1f:9d:ac:
         35:03:be:ab:e9:3f:78:f1:13:c3:ae:a8:a9:fa:43:e3:ae:96:
         e5:3c:bf:e8:0c:c5:f1:fc:2f:8d:22:f0:28:0d:2b:79:32:fd:
         18:36:bf:42:ce:9f:fa:67:23:21:00:fb:f0:3d:21:a4:2a:16:
         e0:98:bd:c8:c3:ff:bd:77:5f:19:4e:95:89:b3:31:56:0a:de:
         c5:0b:0c:b9:8d:02:d5:ef:d9:be:47:90:e8:38:bb:97:a7:7d:
         b7:68:2b:ea:86:df:57:5a:5a:c4:e4:21:97:3c:21:a0:6c:16:
         3f:aa:64:bf:43:f3:9c:d2:b7:43:9a:f8:cc:bd:69:4e:32:05:
         33:54:2e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org