Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139352e302f32342d3234203d3e20323632343638.roa
File:                     3139312e352e3139352e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          ZZcm8mp4cN/wbrpW4l3vMYY5kKrJpAfuHd9BxURJAN0=
Subject key identifier:   2B:1C:A5:1D:45:A9:DB:BF:50:7F:88:5C:23:C9:76:89:82:B6:74:71
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       1DAFFDFC9849130A62E310EBC28B5A33A9BBF888
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139352e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:44 +0000
ROA not before:           Tue 20 Dec 2022 15:04:44 +0000
ROA not after:            Tue 19 Dec 2023 15:09:44 +0000
asID:                     262468
IP address blocks:        191.5.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:af:fd:fc:98:49:13:0a:62:e3:10:eb:c2:8b:5a:33:a9:bb:f8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:44 2022 GMT
            Not After : Dec 19 15:09:44 2023 GMT
        Subject: CN=2B1CA51D45A9DBBF507F885C23C9768982B67471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d2:80:4b:18:aa:71:8c:3e:4a:ae:6e:1b:34:
                    be:27:68:6e:30:03:a1:21:46:b3:dc:69:96:91:dc:
                    3f:c7:b2:ab:48:af:e2:66:59:7b:d2:c1:a6:f1:c4:
                    e6:1b:3b:08:76:07:e4:e8:91:f0:6a:5f:3d:6d:37:
                    33:38:94:04:10:28:51:9d:e0:c9:50:81:ae:de:ff:
                    f6:2a:f5:e9:c7:b3:f7:8f:24:9c:35:ea:e6:75:11:
                    47:ef:2d:d0:5d:3f:49:ae:26:e2:6d:51:a5:63:47:
                    1b:ec:e2:9b:a1:49:16:04:7d:1b:9e:c0:e9:e6:3f:
                    9c:36:54:4c:aa:5f:e4:42:34:4f:7e:42:a8:49:76:
                    a8:82:b0:f1:12:17:bd:72:2f:73:66:13:fd:59:64:
                    40:56:d8:d3:c6:79:b7:6c:d6:e9:1d:6e:0e:f6:9c:
                    be:c3:12:d8:d3:2a:26:46:be:c3:58:79:4f:66:77:
                    d6:af:86:8e:9d:dc:3e:b4:1c:80:d5:f8:af:8f:56:
                    44:f7:b3:b7:87:32:2d:9c:85:3b:27:dd:89:71:15:
                    48:22:57:42:c3:9b:dd:11:36:1a:04:a8:69:fe:05:
                    c7:33:97:18:2c:6d:ee:f2:e6:d7:66:87:e8:25:d8:
                    98:37:73:e9:d3:2b:60:b7:c7:ad:11:25:86:ad:a0:
                    ae:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1C:A5:1D:45:A9:DB:BF:50:7F:88:5C:23:C9:76:89:82:B6:74:71
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139352e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:15:8c:76:9f:d2:27:bc:c7:7a:b5:2e:55:c5:d9:17:ed:7b:
         61:c7:fa:33:1e:fa:f5:c3:8f:51:a7:2a:20:23:29:6c:ae:2a:
         12:f5:7a:e5:09:1e:1a:eb:c0:d2:d1:08:f8:1d:dd:da:30:eb:
         80:4a:86:02:58:a6:7f:6f:1d:f8:5a:06:a4:b2:e0:eb:47:62:
         d1:f2:7a:dc:3f:51:9d:5c:81:af:14:1c:4d:1a:71:d1:93:c1:
         ef:2c:17:4d:59:33:07:ef:2a:f7:4b:28:a9:bb:a7:7b:14:d3:
         97:c1:5b:36:6f:41:aa:e1:ca:aa:f9:51:23:fb:b5:7b:73:4f:
         59:c6:e3:6f:80:23:b6:fe:08:10:67:5e:71:fa:9c:a9:20:13:
         75:8f:9d:08:34:b7:53:4c:8f:a0:5e:11:8a:0c:d6:ce:6c:af:
         61:6d:53:0f:c3:ad:9f:16:98:52:43:b7:39:3d:3c:39:45:ca:
         c2:af:94:02:1d:40:f1:97:3a:92:0e:d9:06:8f:df:86:b3:a0:
         fa:63:61:fe:bf:7c:5e:c2:89:a5:b8:c3:52:99:a6:35:fb:9a:
         87:b7:5d:2f:80:ee:43:89:5b:64:df:96:05:fa:32:cb:f1:ca:
         b1:f7:9c:90:a2:f1:29:46:48:df:19:99:cb:e8:94:57:78:eb:
         fe:a0:85:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org