Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139382e302f32342d3234203d3e20323632343638.roa
File:                     3139312e352e3139382e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          nuu8kvLJ8zf9fjgqaqLVMrwnOjrOBrbLMDKeeWs3TIk=
Subject key identifier:   22:E4:BD:A6:A1:C9:DB:59:59:7A:CB:94:BB:F9:95:44:09:48:D0:27
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       26128476234C0237E6837DB43303C47B5A906505
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139382e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:53 +0000
ROA not before:           Tue 20 Dec 2022 15:04:53 +0000
ROA not after:            Tue 19 Dec 2023 15:09:53 +0000
asID:                     262468
IP address blocks:        191.5.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:12:84:76:23:4c:02:37:e6:83:7d:b4:33:03:c4:7b:5a:90:65:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:53 2022 GMT
            Not After : Dec 19 15:09:53 2023 GMT
        Subject: CN=22E4BDA6A1C9DB59597ACB94BBF995440948D027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:b9:5c:e5:1c:f5:b6:93:52:e8:40:ac:4f:
                    4d:0e:4a:79:1e:07:e1:61:ba:0a:f1:6a:1c:cd:70:
                    e6:33:19:63:61:c7:63:7e:1b:a0:3d:c2:15:1f:82:
                    06:c3:ab:20:90:2e:5c:9b:2f:6b:c2:61:c3:e2:5b:
                    4e:18:9e:eb:0a:ef:32:58:5b:39:f9:f8:25:f8:e8:
                    c9:95:3a:92:a7:38:62:19:76:42:cb:55:01:b7:44:
                    42:59:67:26:b1:07:2a:5d:99:a4:5e:dd:38:65:4f:
                    0c:a8:5a:92:58:69:de:65:5e:e0:9e:22:be:a6:33:
                    70:e8:ef:15:a1:ea:f2:9b:c0:0c:24:12:1e:8e:6d:
                    31:92:ef:b4:0f:8a:ab:c1:37:39:fa:2d:af:da:19:
                    dd:25:5b:d9:fc:cc:ca:42:6e:c0:c0:6d:bc:69:1c:
                    65:2c:dc:bc:fe:e0:ec:e5:71:97:3b:2f:c8:73:32:
                    01:87:ae:d1:f5:0e:fe:a1:94:51:73:25:60:5c:92:
                    05:39:bc:60:3c:fe:4e:25:86:92:8f:76:24:9b:38:
                    f0:e9:73:a3:63:bf:f0:16:27:bc:ca:4c:72:29:03:
                    2f:75:40:0b:d5:2d:15:12:d0:7a:b9:63:6e:57:ff:
                    7d:d5:dd:d9:0b:94:d7:d5:64:58:07:29:86:36:f7:
                    95:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E4:BD:A6:A1:C9:DB:59:59:7A:CB:94:BB:F9:95:44:09:48:D0:27
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139382e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:fc:1b:55:f0:c2:d6:7b:de:a0:bf:3a:3a:15:33:1b:f8:9b:
         39:5f:c0:96:8a:54:6a:90:d7:72:c9:c2:9a:f1:10:86:6f:8d:
         20:8b:59:34:92:67:81:80:b7:14:09:07:ac:a6:d7:9a:53:f1:
         f8:68:1a:ce:7a:2c:d4:e3:b6:74:80:65:c9:3b:d5:ce:4e:45:
         11:38:c5:e7:c2:40:1e:19:38:ba:2e:c2:06:87:00:31:86:f0:
         7a:ab:a7:fd:c7:6b:cd:dd:60:11:48:1b:26:63:82:5d:73:9c:
         67:fe:d6:ec:15:6c:0b:50:8c:4c:be:2f:06:7b:ba:53:e3:9f:
         af:a8:ff:14:b4:8f:20:12:8f:30:09:e4:ff:44:25:80:8b:be:
         b3:d6:01:fb:e2:25:b9:d6:51:54:a7:3c:a7:9f:6e:cb:6c:62:
         46:38:c0:fa:e7:64:68:81:fa:e0:51:86:b0:e5:14:9e:a5:76:
         bd:a5:06:98:61:ae:43:00:b1:c5:29:52:c9:fd:61:aa:93:a9:
         41:af:a5:6f:24:43:d5:e2:86:54:be:e5:74:c4:f4:27:35:71:
         ea:df:be:61:6b:f6:ae:42:1f:95:b5:e5:93:6e:b2:03:86:16:
         56:1f:be:5c:78:24:9d:c4:3b:db:db:79:46:6e:e8:a1:05:38:
         cb:c5:32:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org