Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139362e302f32342d3234203d3e20323632343638.roa
File:                     3139312e352e3139362e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          GjzUDF6cOTRqgJdnQCs2fie4oNIimn0EN+I9OAuPJz8=
Subject key identifier:   C3:A3:A6:90:DB:F6:0E:E4:99:D1:B1:C4:5C:D2:71:6B:0A:34:F1:BB
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       2312C25D861CE56CE9E2BA57A100FB2BC544D984
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139362e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:59 +0000
ROA not before:           Tue 20 Dec 2022 15:04:59 +0000
ROA not after:            Tue 19 Dec 2023 15:09:59 +0000
asID:                     262468
IP address blocks:        191.5.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:12:c2:5d:86:1c:e5:6c:e9:e2:ba:57:a1:00:fb:2b:c5:44:d9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:59 2022 GMT
            Not After : Dec 19 15:09:59 2023 GMT
        Subject: CN=C3A3A690DBF60EE499D1B1C45CD2716B0A34F1BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4c:4b:18:65:71:3f:fe:fc:91:02:fa:e5:cf:
                    01:63:ca:99:ec:57:72:3b:1a:d7:48:28:9d:4f:44:
                    e0:56:a2:4a:66:d8:25:ee:c3:ce:5d:51:9d:43:15:
                    a3:fd:01:35:cf:48:cc:e1:f9:78:20:92:a2:cc:80:
                    21:99:14:37:c8:64:43:72:3e:ea:c8:dc:54:7d:00:
                    b2:33:61:a5:cf:9c:0f:c6:92:cd:b9:3d:54:b7:93:
                    4d:07:d2:83:fa:bf:e6:67:c8:6e:62:6a:c9:e4:ec:
                    d9:e5:5b:50:d2:f0:e1:2d:83:79:71:fd:24:bb:a6:
                    4b:ea:67:86:72:25:8a:23:65:1d:7a:e7:56:d6:50:
                    ef:53:ee:9d:a5:31:70:a9:4d:a5:66:3d:86:83:9b:
                    68:d4:41:0c:49:3c:d6:fd:34:ff:98:2a:b6:62:de:
                    4e:f0:96:4d:62:cb:bf:3b:c8:98:99:8e:58:50:ac:
                    2c:9a:21:de:3c:17:c3:39:79:59:56:8f:7d:92:b7:
                    e4:20:39:c6:ec:44:0b:7a:0c:2c:b6:8c:b0:fa:e5:
                    67:c5:8b:94:02:26:4b:b4:be:49:70:72:db:1f:de:
                    93:05:63:c2:d3:57:c2:06:74:ca:61:ba:5d:cd:84:
                    45:92:9a:af:92:35:06:94:ba:cb:6c:af:5f:6e:a6:
                    6f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A3:A6:90:DB:F6:0E:E4:99:D1:B1:C4:5C:D2:71:6B:0A:34:F1:BB
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139362e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:b6:08:82:b6:5b:b5:34:18:e0:9b:93:73:8e:4b:2f:f5:b4:
         78:9c:3b:2f:50:6c:13:3a:97:6b:ab:18:c7:82:e9:a0:45:6e:
         25:ed:3f:8b:f2:78:34:60:c7:fb:22:8b:88:30:4e:3f:cc:7c:
         80:19:58:cc:71:99:3b:52:1c:fb:07:70:2a:86:e5:11:d5:2f:
         e0:27:52:19:17:2c:3a:c8:0b:a9:43:c9:12:eb:3a:53:43:e9:
         9a:95:e7:26:90:f0:7e:f2:8e:03:fb:7d:30:53:bf:24:36:2f:
         fb:f2:02:77:2a:58:bb:e6:fe:54:b2:60:5b:f4:73:f6:33:bf:
         a2:71:8c:2b:92:c6:ba:34:7e:da:9f:63:3e:23:28:8f:d8:80:
         ae:56:85:77:15:e4:18:91:93:f4:a4:d6:32:ba:39:be:a1:9d:
         d3:4b:52:10:42:0b:dd:6f:45:4b:f5:71:b0:42:cd:e9:36:79:
         ba:2f:4c:9e:3a:26:f5:4d:ca:f2:c5:fa:d5:ba:d8:b8:00:71:
         9b:aa:d5:3c:1e:d3:3f:fa:65:a5:3c:61:12:e9:cc:94:61:2f:
         45:a5:cd:7c:82:b2:30:a3:72:ba:5b:57:ae:26:2a:66:68:37:
         39:c3:14:6b:90:7b:3c:57:a4:0c:fe:28:b4:04:8a:44:8c:0f:
         50:1b:00:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org