Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/3139312e352e35312e302f32342d3234203d3e20323633353332.roa
File:                     3139312e352e35312e302f32342d3234203d3e20323633353332.roa (raw, json)
Hash identifier:          aiA73JNm2vq7sEuHS4r219tNmoFJLnDW5IJLbhvH67c=
Subject key identifier:   8F:5C:D4:1A:D5:92:7B:D2:40:8E:CF:05:E7:35:E3:43:B7:5B:09:19
Certificate issuer:       /CN=BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A
Certificate serial:       168992B9943158215FB8D7CE3901F46AD7FD500B
Authority key identifier: BA:8F:2E:AA:10:80:F6:FA:C4:F5:DA:B6:B9:E4:3F:8E:6A:CC:66:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/3139312e352e35312e302f32342d3234203d3e20323633353332.roa
Signing time:             Tue 12 Apr 2022 17:49:18 +0000
ROA not before:           Tue 12 Apr 2022 17:44:18 +0000
ROA not after:            Tue 11 Apr 2023 17:49:18 +0000
asID:                     263532
IP address blocks:        191.5.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:89:92:b9:94:31:58:21:5f:b8:d7:ce:39:01:f4:6a:d7:fd:50:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A
        Validity
            Not Before: Apr 12 17:44:18 2022 GMT
            Not After : Apr 11 17:49:18 2023 GMT
        Subject: CN=8F5CD41AD5927BD2408ECF05E735E343B75B0919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:52:5f:01:bf:d2:df:e3:c5:8c:40:56:3e:d5:
                    66:d7:ce:61:1c:7f:97:6a:7f:04:b2:f1:c7:e8:57:
                    df:99:b2:6c:65:8d:42:46:66:0d:1a:8d:73:ce:bf:
                    8d:07:fc:31:f1:30:ef:3a:3c:58:e9:cb:19:e9:2a:
                    d3:d1:47:f1:ae:27:ea:0b:6f:4b:17:38:7a:d9:2d:
                    d0:a4:8b:be:2f:10:cd:eb:ce:b6:50:18:aa:b7:da:
                    e3:08:03:ef:d4:58:e2:f3:37:bb:96:cd:e1:8a:00:
                    fe:87:76:9d:a1:3a:f1:b7:7d:20:2c:f5:74:90:f0:
                    55:5f:51:e1:ae:a3:22:a0:90:9b:cb:c6:0e:df:aa:
                    96:7c:27:f4:29:53:d6:ea:e5:12:e4:fb:fd:84:15:
                    bd:b0:18:5c:ca:89:07:81:bb:60:2c:11:72:e0:2c:
                    1e:4a:f8:b5:d0:3f:83:26:78:9f:1a:31:89:f2:a5:
                    83:f9:4a:23:a6:9f:83:07:1b:87:0d:22:03:59:7e:
                    bd:f9:1f:27:4c:06:14:4e:05:8d:ac:a3:11:e4:26:
                    33:c5:31:5c:d3:30:4c:76:5f:45:46:f1:1d:0f:45:
                    29:a1:7a:79:60:0d:fd:67:cc:26:7e:46:70:dc:cd:
                    95:03:7e:6d:74:a2:c3:86:ba:ed:0b:c6:66:4f:92:
                    0e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5C:D4:1A:D5:92:7B:D2:40:8E:CF:05:E7:35:E3:43:B7:5B:09:19
            X509v3 Authority Key Identifier:
                keyid:BA:8F:2E:AA:10:80:F6:FA:C4:F5:DA:B6:B9:E4:3F:8E:6A:CC:66:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA8F2EAA1080F6FAC4F5DAB6B9E43F8E6ACC663A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/0/3139312e352e35312e302f32342d3234203d3e20323633353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:b8:db:a9:25:45:7b:d8:3a:9b:ea:eb:35:85:26:ee:9e:c8:
         d6:c6:2f:c3:4f:c1:ea:75:69:54:d9:ae:c1:02:c3:2f:b1:9b:
         c9:e6:7b:fc:e4:ca:69:05:93:cb:35:80:2f:f8:40:2a:1d:2e:
         11:ad:fb:ed:d8:b0:f3:ff:5a:c3:ee:87:6e:a8:65:ff:08:2a:
         2c:77:55:5b:38:a5:c1:3f:9f:64:7e:6d:a6:0e:0e:44:01:cc:
         bb:41:4a:b0:84:f7:7a:dc:4d:dc:73:c3:a9:20:e6:63:d0:2b:
         69:86:97:b1:ad:8c:c6:04:18:f4:4a:09:c0:96:aa:6d:e6:10:
         5b:17:77:0f:93:f2:7d:13:63:26:fa:3e:9e:88:dc:cb:f8:e3:
         20:e1:33:9c:d9:92:89:88:da:7e:04:4c:5a:dd:6e:73:3a:a9:
         19:0b:f5:ba:c9:e1:78:9f:28:69:ad:b1:09:71:7f:0f:dd:2b:
         a1:ea:90:ec:60:82:1d:a7:e5:8e:d0:03:8e:1e:37:7d:dd:02:
         ba:34:92:8a:fb:26:68:d4:14:91:b9:83:d0:72:d3:71:af:47:
         cd:c5:c2:2d:39:8d:60:b7:3e:55:db:86:fc:9c:d8:68:22:16:
         92:4a:9e:c7:0e:c7:9c:ef:f3:e1:f1:2d:7d:8b:ca:0d:9d:07:
         cb:f4:ab:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org