Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139372e302f32342d3234203d3e20323632343638.roa
File:                     3139312e352e3139372e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          3AHx2CBlJqile4MpxHmcuQC3F0PEwp/v58GjScFoW00=
Subject key identifier:   E0:7C:C2:35:4A:87:2D:75:DB:8C:B3:CD:C0:82:B0:45:96:1E:D6:63
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       54FEDF71F7454B3893E6B6856DEFE9EFFDF1F202
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139372e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:41 +0000
ROA not before:           Tue 20 Dec 2022 15:04:41 +0000
ROA not after:            Tue 19 Dec 2023 15:09:41 +0000
asID:                     262468
IP address blocks:        191.5.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fe:df:71:f7:45:4b:38:93:e6:b6:85:6d:ef:e9:ef:fd:f1:f2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:41 2022 GMT
            Not After : Dec 19 15:09:41 2023 GMT
        Subject: CN=E07CC2354A872D75DB8CB3CDC082B045961ED663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:5b:73:a9:d1:a5:b8:74:f6:d0:ff:20:aa:
                    b9:84:69:8f:8b:cf:30:70:e9:a6:3e:bc:dd:bc:da:
                    15:0e:76:9c:43:db:28:cf:e4:29:73:2b:e4:fb:5c:
                    b4:4d:53:46:33:f4:c6:56:2d:7c:0d:53:52:81:31:
                    2f:8b:73:83:28:1d:71:c7:08:59:ad:45:b4:05:b5:
                    f3:d3:25:36:a8:95:13:b2:27:cc:bc:92:cb:28:68:
                    83:ce:c5:82:b1:54:b9:52:c8:f0:16:c0:c2:92:0b:
                    b7:1d:d9:b5:d7:ce:80:f2:98:8f:a8:90:b9:ab:ac:
                    26:9a:65:7c:6f:c1:10:0d:79:9f:c1:e5:e0:2e:c8:
                    7e:a4:01:a2:5f:7b:ae:dc:42:5b:09:75:b3:21:ca:
                    c7:2e:94:45:65:13:15:d1:e0:0a:e0:0d:47:71:37:
                    f8:47:66:f0:bc:8d:5f:ca:2f:0b:4a:08:89:bd:8b:
                    fc:1b:fe:ed:c0:38:14:86:3a:65:40:6f:28:e3:e9:
                    90:86:df:ef:56:90:67:48:f7:21:ad:11:14:6f:bc:
                    f1:02:97:2f:d1:80:87:3d:c3:d5:db:da:76:26:8a:
                    12:da:5d:05:54:e5:97:0b:b0:a7:7e:a3:d8:29:20:
                    9a:66:92:19:36:a1:b7:ac:c0:95:d8:a7:29:67:da:
                    6f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7C:C2:35:4A:87:2D:75:DB:8C:B3:CD:C0:82:B0:45:96:1E:D6:63
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139372e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:df:b1:2c:ee:31:79:e1:5c:e4:3d:48:8a:f5:fd:02:f5:4b:
         c4:ff:da:5e:67:a6:35:29:08:6f:99:97:be:ef:09:01:44:3f:
         c7:83:b9:65:49:80:62:63:96:09:24:1d:83:4b:b1:fd:f6:6b:
         09:c7:bc:a9:7b:24:76:7f:46:40:22:52:b2:e2:10:2b:94:2d:
         ac:93:ba:3c:4c:79:42:f0:00:f5:8c:ea:d5:c0:fa:60:d1:41:
         b0:d6:fd:df:d2:a8:fc:b6:45:93:f2:e4:b2:62:2e:9a:d6:1c:
         38:85:f1:26:43:1c:e5:fd:69:ca:b8:23:25:d4:f7:8e:24:8c:
         f4:74:38:5e:20:8b:ea:57:73:92:d2:3c:39:f8:64:46:79:8b:
         54:05:58:7d:17:ff:d0:51:96:47:03:16:0e:6f:07:99:c3:fd:
         f6:25:f6:00:cc:cb:c0:56:8e:a4:72:47:56:9e:78:e7:70:a8:
         02:f6:b6:71:78:0f:e7:83:e2:00:65:99:b8:c2:76:a5:65:8e:
         99:51:6b:02:82:ab:a0:24:f9:92:37:5d:88:c1:84:af:42:28:
         91:f8:a9:ea:b2:30:9b:5f:40:4f:67:7d:58:01:48:68:d0:f3:
         8b:a8:53:af:dd:09:82:dd:e9:db:5f:b1:0f:b2:5d:28:23:4f:
         f8:31:47:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org