Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3230322e302f32342d3234203d3e20323632343638.roa
File:                     3139312e352e3230322e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          flfhKLu7xYo6i+5iG24wkVClyDs5CeZnF01jsQMhZSg=
Subject key identifier:   91:8C:CD:01:B3:CF:E8:0A:27:0C:D0:6E:83:23:2A:10:EB:75:37:21
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       5507B4528BCE13E793CF05AFC5EF4FE9FCF07C51
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3230322e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:59 +0000
ROA not before:           Tue 20 Dec 2022 15:04:59 +0000
ROA not after:            Tue 19 Dec 2023 15:09:59 +0000
asID:                     262468
IP address blocks:        191.5.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:07:b4:52:8b:ce:13:e7:93:cf:05:af:c5:ef:4f:e9:fc:f0:7c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:59 2022 GMT
            Not After : Dec 19 15:09:59 2023 GMT
        Subject: CN=918CCD01B3CFE80A270CD06E83232A10EB753721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:43:08:3d:6c:74:fa:62:f6:c4:74:5b:68:
                    2e:c8:60:88:3c:e5:e6:d1:f8:42:ac:d1:6c:8a:be:
                    59:37:7f:0f:15:42:05:5c:ed:dc:c7:a5:09:e4:db:
                    58:ce:e1:3c:98:d9:8f:22:4e:e8:33:d2:87:c5:5d:
                    2b:4e:53:df:ab:1b:ba:f6:c0:60:c6:6f:63:3c:f2:
                    0e:2b:c2:33:25:d2:5a:ed:d4:0e:18:99:07:5b:c1:
                    01:f5:2f:c5:0b:63:6e:6f:82:aa:36:b4:94:c0:67:
                    b9:18:e0:ee:2e:f2:e5:00:b2:96:03:48:a8:98:08:
                    cf:0a:7d:88:db:9f:4f:36:29:28:86:87:e4:a4:e3:
                    6c:9c:e3:f5:ad:5d:da:4b:9d:6b:d3:7c:7e:54:47:
                    3d:d8:96:96:80:b3:70:d6:59:4f:87:08:9e:bc:fe:
                    05:41:6c:dd:65:bf:d5:ff:6b:ca:49:c0:a4:ea:a4:
                    a8:b2:45:4c:16:e0:02:ce:5a:40:07:ee:7b:1b:9b:
                    e0:51:85:13:62:96:df:3b:8d:e9:a1:5e:1a:88:a4:
                    c6:b8:7f:a4:da:64:72:f5:17:b2:44:4e:5e:8d:3b:
                    e6:7f:1d:a0:c9:32:58:99:47:02:35:a4:5f:42:70:
                    b9:f7:0a:af:ff:fa:04:11:65:95:90:eb:b5:6a:23:
                    7b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8C:CD:01:B3:CF:E8:0A:27:0C:D0:6E:83:23:2A:10:EB:75:37:21
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3230322e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:fc:9b:c1:72:ac:e9:34:cc:53:17:40:38:04:05:53:91:fa:
         99:87:f9:38:73:5f:3d:42:f5:11:ce:6f:0b:26:0a:e3:11:b2:
         f3:59:37:cc:cd:48:fd:af:be:71:a1:40:e0:54:ca:95:94:dd:
         d2:29:c1:17:64:c2:d4:cf:d0:ef:ad:f2:5e:f5:01:f3:94:28:
         be:92:55:e8:c6:71:06:8b:5f:82:0d:32:33:be:6a:b4:22:34:
         4f:85:be:ed:e8:8c:79:c2:ef:12:11:d3:ea:51:5c:ed:92:74:
         b9:f8:3a:93:bf:10:32:1e:d0:3a:a4:c3:7c:45:83:ed:77:c1:
         47:9a:76:bf:2f:12:51:10:43:f6:da:5e:6d:0d:4a:fe:8b:b5:
         c9:a0:c3:39:66:51:64:76:3c:8e:ff:18:41:88:d4:c5:96:3e:
         62:e2:7d:9f:27:b5:f5:9b:09:ff:e4:55:2e:47:77:40:51:69:
         e9:48:f0:03:78:fc:19:9d:0a:d5:fc:58:c8:a0:ab:74:9a:8c:
         dc:e6:84:00:10:46:64:5c:7b:03:e4:6d:9a:fb:99:7b:94:d0:
         dd:8e:f7:95:0d:4d:80:d3:61:84:84:29:db:82:da:7c:b0:e0:
         dc:10:8b:33:cc:fd:3d:b4:63:7e:ac:67:db:4e:5f:41:30:ee:
         a7:2f:17:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org