Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/3139312e352e34382e302f32312d3231203d3e20323633353332.roa
File:                     3139312e352e34382e302f32312d3231203d3e20323633353332.roa (raw, json)
Hash identifier:          4mrb0GEGoXAcOVT3w266YWqBFOfPpWpFFM2jSRUvlHc=
Subject key identifier:   A1:F3:09:72:7F:5E:DA:2C:5A:E5:4B:45:4D:2C:25:00:AF:79:67:1D
Certificate issuer:       /CN=BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A
Certificate serial:       3200036EBA354623DE5433BD7F058FE5F358AEAF
Authority key identifier: BA:8F:2E:AA:10:80:F6:FA:C4:F5:DA:B6:B9:E4:3F:8E:6A:CC:66:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/3139312e352e34382e302f32312d3231203d3e20323633353332.roa
Signing time:             Tue 12 Apr 2022 17:49:00 +0000
ROA not before:           Tue 12 Apr 2022 17:44:00 +0000
ROA not after:            Tue 11 Apr 2023 17:49:00 +0000
asID:                     263532
IP address blocks:        191.5.48.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:00:03:6e:ba:35:46:23:de:54:33:bd:7f:05:8f:e5:f3:58:ae:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A
        Validity
            Not Before: Apr 12 17:44:00 2022 GMT
            Not After : Apr 11 17:49:00 2023 GMT
        Subject: CN=A1F309727F5EDA2C5AE54B454D2C2500AF79671D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:4e:d3:07:90:d9:7c:7e:26:9a:b4:bc:c9:
                    ef:a3:be:a8:05:bd:f9:de:30:72:14:fb:84:b5:e3:
                    7e:15:d6:6f:72:28:3d:2a:3e:a5:62:53:39:78:cc:
                    c2:f2:83:d0:78:2a:59:28:0f:1f:ef:f6:46:32:bb:
                    b7:90:f7:3a:3a:14:7b:80:ce:0d:29:7f:49:38:53:
                    61:99:5a:d5:04:b0:40:83:90:9a:00:9e:fa:85:35:
                    a0:72:1e:3b:8f:8c:75:4d:72:a1:40:ca:89:c4:a1:
                    71:89:23:f0:a7:0e:87:0d:58:05:9a:5f:a8:ca:f9:
                    eb:b1:d3:b2:bb:55:97:0d:c2:c6:c4:ae:2c:c8:01:
                    de:ab:06:7c:d9:d2:be:89:27:4e:ce:7a:d9:2a:27:
                    6e:ef:a6:01:d2:15:27:4f:db:92:ff:28:2b:e2:fb:
                    a1:68:c3:68:4b:d7:38:7b:d4:6a:54:02:35:38:64:
                    38:3a:4a:fe:83:81:80:8f:09:79:fe:f5:e9:be:a3:
                    6c:44:c8:88:27:a9:2a:49:e7:8a:a5:fd:02:c7:4d:
                    d3:26:38:a4:e6:ac:20:45:e6:c3:43:ce:48:41:23:
                    02:51:24:6d:5a:aa:5f:92:be:46:3e:cc:76:e3:dc:
                    a3:49:a3:db:ae:1f:90:50:a2:32:75:f1:ec:91:48:
                    b4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F3:09:72:7F:5E:DA:2C:5A:E5:4B:45:4D:2C:25:00:AF:79:67:1D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:2E:AA:10:80:F6:FA:C4:F5:DA:B6:B9:E4:3F:8E:6A:CC:66:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/3139312e352e34382e302f32312d3231203d3e20323633353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b9:85:e2:54:f1:17:84:18:4b:88:60:67:31:4a:a1:30:8d:92:
         42:d5:e4:dc:fb:70:b4:73:75:bd:a7:2a:bb:65:cb:59:be:73:
         cb:a3:a1:e5:66:de:51:a2:9f:f3:8b:cc:c7:ec:83:91:00:58:
         54:aa:44:60:8d:2c:e6:bd:3a:f2:b2:8f:8c:8f:26:e5:a1:72:
         f4:ad:f6:51:85:5e:2c:95:a7:f8:a8:67:55:89:fe:70:1f:f0:
         36:19:9d:03:aa:a7:7d:f3:68:74:26:34:20:4c:2d:df:c8:89:
         6a:50:d9:ca:49:d9:5b:65:eb:42:ff:c8:41:d8:3b:0c:9b:a0:
         8c:95:15:7a:58:27:fe:bb:7c:5e:3b:f1:c7:8c:3f:40:f0:5f:
         23:d0:7c:dc:ca:82:79:e5:b5:59:73:90:bf:b3:46:01:e2:b1:
         0c:c2:84:f2:f3:c5:b5:e0:03:06:18:6a:4e:d5:89:3c:5c:ea:
         59:16:72:ca:58:29:7f:be:95:8f:3a:1d:c0:a8:e8:58:37:35:
         54:3f:f7:3d:08:1d:17:8c:e5:67:b0:e3:55:d6:b1:ce:73:b5:
         ad:90:d1:11:46:32:ec:4c:f0:f3:f9:ee:b9:80:c9:56:06:b0:
         11:00:8e:7d:00:b4:25:5b:44:82:fe:aa:69:4c:fc:a6:1a:cf:
         50:da:90:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org