Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/3139312e352e34382e302f32312d3234203d3e20323633353332.roa
File:                     3139312e352e34382e302f32312d3234203d3e20323633353332.roa (raw, json)
Hash identifier:          r+4IFznhyGvRwkz6CxKgRQaraZTbUv1/FO6VCYXnf+Y=
Subject key identifier:   CE:A8:37:02:CD:42:1D:5F:30:FA:6E:17:4F:DD:8F:3C:61:64:5B:28
Certificate issuer:       /CN=6A108E4F623A285865E640BA6F834863966A2D1C
Certificate serial:       30AAAEEBD33AF6784DE3FB77905861C41D40BFA3
Authority key identifier: 6A:10:8E:4F:62:3A:28:58:65:E6:40:BA:6F:83:48:63:96:6A:2D:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A108E4F623A285865E640BA6F834863966A2D1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/3139312e352e34382e302f32312d3234203d3e20323633353332.roa
Signing time:             Tue 14 Nov 2023 14:09:04 +0000
ROA not before:           Tue 14 Nov 2023 14:04:04 +0000
ROA not after:            Tue 12 Nov 2024 14:09:04 +0000
asID:                     263532
IP address blocks:        191.5.48.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:aa:ae:eb:d3:3a:f6:78:4d:e3:fb:77:90:58:61:c4:1d:40:bf:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A108E4F623A285865E640BA6F834863966A2D1C
        Validity
            Not Before: Nov 14 14:04:04 2023 GMT
            Not After : Nov 12 14:09:04 2024 GMT
        Subject: CN=CEA83702CD421D5F30FA6E174FDD8F3C61645B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:d8:b3:9a:83:5f:bb:65:53:75:90:83:c9:
                    09:c8:83:62:1c:f3:d6:b4:6a:db:63:b3:9d:27:f9:
                    50:b6:88:80:67:c8:41:c6:80:1a:35:f4:33:a2:6a:
                    a0:40:06:bc:46:6b:12:bd:06:0f:1c:c2:5b:56:83:
                    0b:98:22:90:85:c7:6d:2b:7f:21:a8:d1:cc:6c:d6:
                    26:79:47:99:e6:c4:de:81:d1:f3:ea:0f:1a:22:1e:
                    b7:1a:98:6a:d7:4b:ac:b2:ae:05:20:3b:b9:ec:50:
                    5c:b3:57:23:c3:4e:7d:dd:f6:71:53:50:5d:86:b9:
                    4b:93:2f:85:86:c0:26:91:60:94:c3:97:5b:00:e5:
                    27:a8:4c:5c:51:08:c9:fa:1b:fe:66:23:f4:c6:18:
                    cd:9a:48:7c:1e:8d:0d:ff:0e:bc:70:72:39:5d:fe:
                    f9:22:58:9f:ed:19:96:fe:0a:eb:9f:ab:c8:8c:77:
                    cd:7e:2b:f6:a4:81:62:19:7e:0f:51:c4:5c:df:52:
                    92:19:86:c9:7b:76:63:b9:1a:95:0f:db:96:8a:f7:
                    2c:44:c3:4f:5c:9f:0e:a0:cb:ee:9d:4f:08:ab:3f:
                    48:99:fe:83:e6:8d:64:81:cb:24:95:5f:7c:cb:f3:
                    57:ea:d3:94:52:47:a4:59:92:9a:99:b3:79:ec:12:
                    24:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A8:37:02:CD:42:1D:5F:30:FA:6E:17:4F:DD:8F:3C:61:64:5B:28
            X509v3 Authority Key Identifier:
                keyid:6A:10:8E:4F:62:3A:28:58:65:E6:40:BA:6F:83:48:63:96:6A:2D:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/6A108E4F623A285865E640BA6F834863966A2D1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A108E4F623A285865E640BA6F834863966A2D1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/3139312e352e34382e302f32312d3234203d3e20323633353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:3d:10:c6:d0:e1:6d:83:35:42:d0:44:d9:c7:76:f9:bf:5d:
         6d:75:dd:08:5a:fe:e1:ca:61:25:49:21:34:62:f6:e5:a1:15:
         76:9f:46:0e:d6:db:a1:64:4b:e6:f1:c2:77:38:c1:bb:eb:d5:
         09:ce:27:06:84:7c:a0:2a:7b:c5:6b:99:c5:75:fa:0b:11:cd:
         25:94:3f:55:07:b9:11:de:e8:37:01:e1:5f:29:04:f9:52:4d:
         66:8d:b1:d0:95:b7:cd:d6:0e:c3:a8:a0:ed:a2:3d:46:33:da:
         5a:69:cd:86:6a:35:07:d9:84:6f:f8:4f:6d:ea:e9:e2:db:43:
         01:de:e5:ce:df:80:70:33:9d:73:d7:fd:bb:97:bd:92:6c:1b:
         69:e4:c5:08:22:d2:60:64:bc:3b:f0:39:2d:7a:ab:81:72:b9:
         7d:6d:3e:da:9a:43:e1:70:25:67:83:30:13:18:d4:14:90:a0:
         7f:b4:20:6d:ee:40:8a:22:b9:b6:33:12:a7:c0:27:17:40:c5:
         60:98:a0:51:77:a3:32:aa:24:0c:24:38:19:cb:24:dc:fa:c4:
         7a:cf:2d:eb:c0:70:73:86:f9:e9:ee:78:a4:6f:20:ab:35:5b:
         41:c8:dd:54:6d:4e:b8:f6:04:a9:21:e3:70:9f:d1:3d:83:a4:
         4c:22:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:24 2024 by rpki-client on console-ams.rpki-client.org