Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35332e302f32342d3234203d3e203532353936.roa
File:                     3137392e3139312e35332e302f32342d3234203d3e203532353936.roa (raw, json)
Hash identifier:          zLhCIhShJkeKV1sA7w1K2JIJ9lRTYz945fPX9btvp3c=
Subject key identifier:   AF:0A:BF:31:B0:89:68:6B:5F:AF:B5:18:EA:DA:32:54:18:3B:5F:60
Certificate issuer:       /CN=90C2688905F91095963A8A3CEA8A3E287892FA51
Certificate serial:       11C5F9A708EFD25CD386970329C9284807990C88
Authority key identifier: 90:C2:68:89:05:F9:10:95:96:3A:8A:3C:EA:8A:3E:28:78:92:FA:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2688905F91095963A8A3CEA8A3E287892FA51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35332e302f32342d3234203d3e203532353936.roa
Signing time:             Fri 26 Jan 2024 12:01:00 +0000
ROA not before:           Fri 26 Jan 2024 11:56:00 +0000
ROA not after:            Fri 24 Jan 2025 12:01:00 +0000
asID:                     52596
IP address blocks:        179.191.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c5:f9:a7:08:ef:d2:5c:d3:86:97:03:29:c9:28:48:07:99:0c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C2688905F91095963A8A3CEA8A3E287892FA51
        Validity
            Not Before: Jan 26 11:56:00 2024 GMT
            Not After : Jan 24 12:01:00 2025 GMT
        Subject: CN=AF0ABF31B089686B5FAFB518EADA3254183B5F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:17:4b:37:7a:fa:f6:5b:17:64:de:1b:53:a2:
                    f0:03:bc:4a:d0:31:2b:12:cc:94:bb:64:28:cb:c5:
                    62:b7:82:b1:80:70:7e:02:c9:30:e6:3d:5b:8e:8e:
                    17:fb:15:8b:53:b9:03:cd:84:d5:bc:25:cb:cc:0c:
                    9c:bf:61:6a:8e:d5:7f:47:fe:38:ef:7e:0f:2b:4e:
                    ba:8b:6f:ff:41:64:56:fa:0a:81:a5:6e:28:3f:f3:
                    70:2e:5c:62:81:39:75:e3:ae:c4:92:2d:2e:49:52:
                    8c:54:e0:ef:61:c9:aa:33:d9:9e:c2:77:fa:c3:17:
                    d1:e8:60:b5:32:91:7a:a0:37:e6:5b:82:6e:3b:cb:
                    57:27:98:46:7a:1b:8f:dd:e9:ee:6a:04:01:ff:ac:
                    c3:d4:df:3e:41:81:59:2a:94:e6:78:89:12:89:78:
                    60:eb:16:65:b9:64:a5:0d:1b:c3:bc:7f:03:2f:16:
                    03:90:35:d8:64:99:d6:1d:9a:98:18:c8:1b:54:25:
                    c8:b3:6d:49:36:99:3f:e0:ea:f6:3e:dd:eb:6f:db:
                    9d:cf:b7:6a:23:69:e6:81:3f:9d:1b:5b:0f:5b:e6:
                    da:d2:18:75:0d:0e:ae:f5:12:f9:64:05:d7:3a:cc:
                    6c:5e:7c:a0:0e:be:c1:ec:f4:d2:0b:b2:40:9d:58:
                    c8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0A:BF:31:B0:89:68:6B:5F:AF:B5:18:EA:DA:32:54:18:3B:5F:60
            X509v3 Authority Key Identifier:
                keyid:90:C2:68:89:05:F9:10:95:96:3A:8A:3C:EA:8A:3E:28:78:92:FA:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/90C2688905F91095963A8A3CEA8A3E287892FA51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2688905F91095963A8A3CEA8A3E287892FA51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35332e302f32342d3234203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:94:55:19:50:34:c0:9c:49:3d:4c:6c:c0:02:e7:85:24:c5:
         7e:15:36:80:4c:05:91:cd:21:5c:32:53:3c:3e:74:3a:e3:4e:
         e4:59:48:b6:12:00:b7:53:14:95:51:a2:28:a0:a6:8e:dc:0e:
         29:7e:86:6f:92:d7:de:60:2c:5e:3a:f1:78:74:d1:26:1b:d0:
         c8:91:6f:b6:e7:b4:7b:34:a2:e0:15:44:7c:70:51:4d:26:a7:
         68:00:b8:eb:8a:1c:54:30:3c:ad:f2:49:35:6d:2d:58:78:47:
         00:c2:10:f6:f4:41:54:d3:47:12:f6:dd:f3:93:90:41:7a:5b:
         ad:05:22:23:ff:9a:ad:36:eb:09:1b:04:a6:88:72:85:92:1a:
         e0:c7:ba:e2:64:af:28:c3:4a:56:a6:63:fa:28:ae:4e:7f:b2:
         95:b9:cb:bb:bb:bd:e6:63:94:0a:8d:28:ca:13:68:e3:d4:aa:
         b7:49:ee:3b:db:0b:d1:96:7e:10:1b:fa:72:2c:9e:6e:19:ce:
         6a:e7:79:ab:61:f3:d4:d2:9d:84:55:2b:2b:a6:64:9b:5c:d4:
         5a:d6:b8:fe:e2:18:8e:62:1c:c4:20:23:7a:b1:31:34:86:f5:
         41:1c:59:b9:1e:e9:d7:86:02:78:32:e9:15:2d:cd:27:d6:c5:
         3e:f1:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org