Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/3139312e352e34382e302f32342d3234203d3e20323633353332.roa
File:                     3139312e352e34382e302f32342d3234203d3e20323633353332.roa (raw, json)
Hash identifier:          suxA4aJp1oxYTYXspTyMa9uPB4Iyw980YIksHHcHn9Q=
Subject key identifier:   6E:8F:F6:87:07:17:0F:D1:5C:F6:94:12:6D:1C:A7:BB:52:77:7F:BA
Certificate issuer:       /CN=BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A
Certificate serial:       7FD96831CD04DBFE127D9AAD2D657A249CE08BAB
Authority key identifier: BA:8F:2E:AA:10:80:F6:FA:C4:F5:DA:B6:B9:E4:3F:8E:6A:CC:66:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/3139312e352e34382e302f32342d3234203d3e20323633353332.roa
Signing time:             Tue 12 Apr 2022 17:49:02 +0000
ROA not before:           Tue 12 Apr 2022 17:44:02 +0000
ROA not after:            Tue 11 Apr 2023 17:49:02 +0000
asID:                     263532
IP address blocks:        191.5.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d9:68:31:cd:04:db:fe:12:7d:9a:ad:2d:65:7a:24:9c:e0:8b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A
        Validity
            Not Before: Apr 12 17:44:02 2022 GMT
            Not After : Apr 11 17:49:02 2023 GMT
        Subject: CN=6E8FF68707170FD15CF694126D1CA7BB52777FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:2c:51:2e:d0:5b:0f:43:11:de:14:96:1a:
                    68:5e:22:18:11:2e:0b:1f:db:a3:ef:84:88:74:33:
                    76:4b:87:45:2e:28:96:0f:10:85:c7:b2:fe:f1:d3:
                    5f:01:80:28:d2:8d:05:65:d1:f9:85:3f:de:9f:be:
                    b9:b3:51:2d:2b:bf:0c:39:e2:b8:d3:35:c6:d3:ea:
                    5f:81:fe:f5:c0:f1:fb:9f:bd:90:8e:6b:29:20:29:
                    94:e2:d5:9c:bf:01:d6:e3:28:03:c1:7c:2d:db:27:
                    ee:a7:08:40:6b:c0:55:e9:69:4e:08:9c:18:3c:df:
                    bc:16:41:bd:53:bd:fd:fa:81:de:2c:a7:e4:e1:a5:
                    93:c8:b1:ad:bf:8c:7d:0f:81:98:69:5d:fa:fd:7b:
                    c0:7f:04:77:ea:a2:64:72:69:b9:a8:f1:86:df:0f:
                    a0:a3:7b:61:11:b9:d5:ad:52:1c:21:65:2f:b1:d1:
                    87:d9:48:2b:fd:d4:cb:f1:ac:d6:5f:c9:b2:3b:1d:
                    cf:19:e1:64:03:1f:c2:cd:51:e6:bf:9f:2a:a6:50:
                    41:d3:29:74:fc:eb:c8:07:d6:a2:ac:72:24:ff:5b:
                    a1:8f:e3:92:fb:9e:6f:fa:d6:e3:be:8a:94:81:59:
                    08:e6:a7:5d:92:7f:57:e1:c3:fb:60:62:ec:6e:7b:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8F:F6:87:07:17:0F:D1:5C:F6:94:12:6D:1C:A7:BB:52:77:7F:BA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:2E:AA:10:80:F6:FA:C4:F5:DA:B6:B9:E4:3F:8E:6A:CC:66:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/3139312e352e34382e302f32342d3234203d3e20323633353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:9e:f5:70:2d:4e:c4:60:97:b4:af:f8:72:09:d7:b2:79:50:
         39:82:a5:8e:68:af:1a:c5:8e:ff:3f:08:2e:e8:e5:e6:d7:0c:
         82:d0:84:3e:02:69:30:5b:ca:ad:14:93:66:13:e1:32:44:a1:
         c5:ad:c9:c0:ca:4b:a4:72:d3:13:d5:9f:49:5c:37:77:45:8c:
         93:5f:93:32:d8:bc:51:e9:23:e6:bb:ab:b5:b3:bc:62:4e:7a:
         8c:fe:ae:55:60:14:72:fe:53:9b:01:f5:6f:67:09:1b:74:5b:
         e4:78:27:2b:6c:fc:97:52:d0:21:fb:21:42:52:2c:84:78:a8:
         d6:21:64:1b:7a:23:de:03:fd:bc:70:ab:9c:ff:ff:14:6a:dd:
         ff:82:76:17:ec:21:ed:80:e2:39:76:f2:05:cb:6d:26:88:13:
         8d:c7:d4:5c:44:30:0f:93:e8:c4:74:12:88:39:25:f5:3c:91:
         90:78:48:6b:6e:13:d3:57:82:fc:66:93:34:97:64:e4:66:5b:
         94:ee:32:d4:f7:78:39:6d:4e:5e:74:71:4a:36:be:8a:d7:e2:
         bc:b0:7b:69:b5:70:26:34:4b:a0:02:c7:d8:75:f6:e8:f1:25:
         b2:bd:83:e5:2e:67:3c:0c:51:c7:bf:e8:05:ab:e5:74:8f:de:
         f9:11:00:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org