Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139322e302f32342d3234203d3e20323632343638.roa
File:                     3139312e352e3139322e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          uZRofTDel7wzMOhrta9RPC183Yfyj1MOo/1MO1LDD4w=
Subject key identifier:   D8:48:CE:38:2E:BF:64:46:ED:72:5E:A7:B9:E3:D3:05:06:54:FA:E2
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       678990EEA915748F9D933C774896A96CA6CA1A4D
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139322e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:46 +0000
ROA not before:           Tue 20 Dec 2022 15:04:46 +0000
ROA not after:            Tue 19 Dec 2023 15:09:46 +0000
asID:                     262468
IP address blocks:        191.5.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:89:90:ee:a9:15:74:8f:9d:93:3c:77:48:96:a9:6c:a6:ca:1a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:46 2022 GMT
            Not After : Dec 19 15:09:46 2023 GMT
        Subject: CN=D848CE382EBF6446ED725EA7B9E3D3050654FAE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fb:04:33:f7:2d:72:c9:ac:e5:64:76:b9:56:
                    a3:aa:be:fb:db:fd:05:7e:14:6a:8a:7c:d9:23:6a:
                    2a:97:a4:a5:c6:d5:8c:70:d5:f4:8c:4c:ee:5b:77:
                    74:52:be:12:8c:5f:d6:de:d4:c9:73:15:b6:b3:ce:
                    e0:09:d0:14:90:ea:ab:f9:34:d8:28:ef:57:95:76:
                    61:8c:2a:0f:16:98:b4:aa:60:a4:cc:96:7c:81:ff:
                    6b:6e:25:74:79:37:1e:fb:b5:a5:4d:6a:ed:39:b2:
                    21:c2:87:c4:82:6b:31:cf:29:69:36:83:2f:6f:cc:
                    b9:b9:c0:66:4d:25:f9:79:05:9c:63:fa:a8:59:5b:
                    42:dc:53:28:c4:d0:de:dd:8e:36:f0:8e:62:17:6b:
                    54:75:56:e8:9e:28:54:77:b7:28:b7:59:92:ba:dc:
                    52:6c:dc:ab:a2:7c:72:4d:c7:4c:7e:3c:2f:82:80:
                    3e:dc:96:1e:b5:9a:43:09:6b:0d:6e:63:d3:62:c3:
                    a9:05:9b:24:08:70:e8:d8:e0:dc:c6:61:b7:35:c1:
                    39:46:f5:bf:0a:79:d8:48:d9:27:14:3d:df:9c:26:
                    77:20:3c:cc:ad:74:b1:cd:e1:7c:ab:08:26:f1:dd:
                    02:30:50:a4:06:5d:bf:cb:d0:18:48:48:5a:fe:3a:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:48:CE:38:2E:BF:64:46:ED:72:5E:A7:B9:E3:D3:05:06:54:FA:E2
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139322e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:81:49:3a:6d:2d:99:19:ff:eb:ab:f8:e6:5b:ce:99:d7:ce:
         33:ef:1d:fa:30:0e:61:d9:72:18:dd:07:41:e8:46:47:dc:18:
         d3:db:38:08:e9:e9:6f:8f:f7:42:5d:7f:2f:cc:d0:06:8e:86:
         65:a8:6f:a9:c2:95:9c:ee:9b:9b:3d:50:0b:66:7a:c7:05:e2:
         8a:84:48:e5:a1:55:f5:0c:08:00:c2:e4:54:95:8b:af:73:8a:
         82:5f:ac:28:65:f8:c2:70:d6:82:c2:47:4e:dd:2a:6c:01:fe:
         8c:e7:da:36:1a:e0:5e:80:ca:5d:f4:3a:c4:8f:ba:4e:2b:fc:
         0f:4a:95:04:7f:df:92:fd:0b:f1:0a:da:50:d6:45:f2:a2:b2:
         df:9e:5c:73:67:90:f1:93:38:7a:c5:b1:65:68:f5:7f:28:95:
         35:0f:d4:b7:a2:65:a3:4c:1c:2c:f6:7f:33:4b:ca:62:ee:15:
         f1:64:02:7b:6c:9e:db:5d:34:a0:f9:28:d7:31:f5:c6:e3:d2:
         6c:4e:ab:4f:9b:68:7e:42:38:fe:68:d7:f8:3c:2e:67:b0:b7:
         ce:a7:01:80:24:c8:f5:bf:4f:61:18:87:b6:e4:19:60:d2:cd:
         a6:24:6a:98:cc:98:a5:df:42:b4:ac:50:a4:05:27:d5:c1:2b:
         4e:5e:1d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org