Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139392e302f32342d3234203d3e20323632343638.roa
File:                     3139312e352e3139392e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          NXZXQa7l7Q8XkZHuA1/gOrxNdvzdk132S3gfnjiPS8k=
Subject key identifier:   4E:5E:13:87:1A:BB:15:D9:9F:9C:C5:FF:D1:5C:7B:3C:2C:3D:36:B8
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       64880EDD938E35C1E90F3F6D72EFE02E19AD594C
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139392e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:51 +0000
ROA not before:           Tue 20 Dec 2022 15:04:51 +0000
ROA not after:            Tue 19 Dec 2023 15:09:51 +0000
asID:                     262468
IP address blocks:        191.5.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:88:0e:dd:93:8e:35:c1:e9:0f:3f:6d:72:ef:e0:2e:19:ad:59:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:51 2022 GMT
            Not After : Dec 19 15:09:51 2023 GMT
        Subject: CN=4E5E13871ABB15D99F9CC5FFD15C7B3C2C3D36B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:9b:c7:80:80:49:a6:2c:bc:05:ea:66:23:
                    bd:0f:2e:59:02:c3:c6:66:df:3d:05:29:c5:92:50:
                    30:43:00:3f:89:52:41:2d:d9:ba:b5:77:f7:ca:99:
                    33:6c:f8:22:7b:0a:9b:9a:07:e0:05:ff:9b:b5:c6:
                    6d:b0:0b:1c:fc:7a:0d:1b:4b:8b:ed:40:c7:5d:09:
                    e6:ed:e5:a9:da:1f:42:df:f6:c7:9c:a6:f2:37:ab:
                    5e:62:ec:63:c5:98:d0:46:12:61:9d:25:8f:0c:c7:
                    4c:f8:23:11:31:3f:e5:d4:de:b2:6f:ba:39:a5:0d:
                    c8:c6:32:19:41:6a:ee:5f:91:60:0a:6a:e4:c0:6e:
                    3c:61:b0:35:d8:d9:00:6f:2e:b8:9a:69:c5:9f:78:
                    48:1d:d4:b9:33:17:c6:f5:75:f5:2f:ac:e6:8b:96:
                    45:b1:f9:60:5f:bb:a3:bd:a0:33:f0:45:6a:65:03:
                    0d:85:86:bc:21:11:49:43:96:34:72:c6:d1:d8:be:
                    96:b4:cb:2b:68:00:e0:d5:31:8e:62:34:a3:93:aa:
                    52:b3:b5:f3:b5:c1:1a:8f:af:06:18:0b:fc:4a:ce:
                    fd:6c:4c:05:62:f6:35:1e:03:29:5f:2a:82:b2:be:
                    93:f1:eb:b1:fc:d8:45:3e:b0:1e:a5:32:3a:9d:eb:
                    89:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5E:13:87:1A:BB:15:D9:9F:9C:C5:FF:D1:5C:7B:3C:2C:3D:36:B8
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3139392e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:e1:1a:47:b7:06:15:db:42:8c:7f:db:ad:cc:b4:0e:40:da:
         d3:40:c7:47:4e:7b:49:20:d4:9f:13:f0:35:15:e5:dc:27:32:
         b2:ff:7b:52:a0:e8:f3:32:5e:22:34:58:fd:77:e6:9e:06:eb:
         23:d3:94:b4:4c:b7:6f:1e:33:da:bd:75:e9:ae:4e:23:71:c8:
         96:e9:ff:23:05:41:f1:a9:7e:5e:0a:bd:45:c4:ba:3b:89:44:
         24:24:c0:16:f5:2f:ab:41:be:43:7a:97:d2:f2:93:5b:00:47:
         98:f2:c2:28:f7:8c:bc:8b:62:8e:67:85:56:75:78:11:7f:e4:
         f3:9e:4e:7c:21:a3:0e:dd:d5:91:81:9a:ba:11:23:04:84:ea:
         77:01:72:1f:cf:b0:67:01:eb:f4:d3:c1:32:06:6c:24:e6:e5:
         8b:4a:39:fc:5c:c6:e9:e6:98:8b:4c:3f:94:3d:42:b0:57:6f:
         d4:72:0e:89:09:d5:48:99:e7:2f:40:d5:95:54:20:ba:38:c3:
         0d:8b:e9:9b:1c:c7:d0:b8:63:d1:0b:d9:4e:63:1c:d2:cb:74:
         7f:69:41:84:18:64:64:04:7a:cd:05:8a:4d:b3:99:79:36:f3:
         43:dd:f6:c5:69:5d:9d:ca:73:64:a0:44:9e:11:ab:6f:fa:6e:
         72:51:32:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org