Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3230342e302f32342d3234203d3e20323632343638.roa
File:                     3139312e352e3230342e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          KuSuasGi3i4Rb44TZnOJRNyowtW3Rbpf1c4ZYs9e1/8=
Subject key identifier:   92:EF:0E:BC:44:D9:40:13:2F:2B:E8:4B:15:4B:82:B3:FE:09:DA:97
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       12CC0CA7BCB99763041637F800EECC4522910CC2
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3230342e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:10:03 +0000
ROA not before:           Tue 20 Dec 2022 15:05:03 +0000
ROA not after:            Tue 19 Dec 2023 15:10:03 +0000
asID:                     262468
IP address blocks:        191.5.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cc:0c:a7:bc:b9:97:63:04:16:37:f8:00:ee:cc:45:22:91:0c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:05:03 2022 GMT
            Not After : Dec 19 15:10:03 2023 GMT
        Subject: CN=92EF0EBC44D940132F2BE84B154B82B3FE09DA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:55:b0:86:8c:82:2e:c2:ce:8a:f9:38:cb:
                    f8:96:73:7f:3d:b5:c8:c2:01:ee:08:e4:57:b6:0c:
                    8e:d1:ef:41:53:3f:f4:c0:00:74:cd:e5:80:46:dc:
                    d6:f9:03:5f:a7:fa:4b:e8:70:ec:f6:17:d1:e5:be:
                    b8:24:9d:ea:07:04:8c:85:80:09:37:82:f2:bd:db:
                    73:6c:fd:21:cc:d7:47:09:34:2f:5c:36:d5:40:8f:
                    ca:86:3e:c7:f9:b5:c7:b0:f3:79:f5:26:7a:e0:6b:
                    31:21:49:6d:a2:8c:42:16:b7:ac:90:63:bc:3c:6d:
                    f4:9a:75:9a:34:29:63:2e:26:71:30:85:e2:b5:77:
                    84:1d:e8:42:75:6e:da:17:37:87:cd:60:2b:f0:c4:
                    b8:45:0b:e7:45:a8:ee:2c:18:4a:48:f5:04:98:93:
                    97:cf:84:a2:7c:11:cf:92:3d:77:66:c3:c4:9a:d1:
                    9e:c4:40:19:7a:7f:7d:b5:b2:d1:03:7b:30:b8:ee:
                    cb:8c:ae:d3:64:78:6a:23:52:c6:d2:69:a4:90:d9:
                    5d:0e:d5:92:77:d0:0f:85:50:3d:17:a8:d9:52:31:
                    9d:2f:e1:fb:7b:f2:66:59:91:71:91:23:c6:51:eb:
                    27:8d:0d:24:f9:e6:dc:52:4c:35:c1:83:3e:ee:e6:
                    70:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EF:0E:BC:44:D9:40:13:2F:2B:E8:4B:15:4B:82:B3:FE:09:DA:97
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3230342e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:43:8c:ee:bb:f0:38:65:63:69:78:0f:03:0b:5d:aa:ad:dd:
         3f:58:1d:e4:64:4c:7d:a8:f0:e8:b7:fa:e9:37:d0:b0:a0:ca:
         8c:59:78:54:d5:66:d7:5f:0d:bc:59:93:03:93:e0:0e:92:d1:
         85:bb:2a:f0:c7:48:b2:57:a2:6d:fc:aa:80:01:f9:a8:ae:f2:
         75:0a:ac:c9:a7:57:13:22:f5:7a:68:5f:6f:43:3b:88:42:9e:
         ea:b5:2f:fa:31:96:72:24:f2:7e:02:51:50:f7:79:00:69:38:
         54:27:aa:5a:a6:b5:88:bf:cc:6d:89:fd:65:87:2c:84:a6:7a:
         0b:e7:e8:50:23:a0:44:f6:78:9a:25:b5:46:e8:8a:12:bf:c7:
         28:4a:b3:0d:57:b8:bd:f9:62:e9:50:83:92:96:b4:83:74:f9:
         62:a7:7a:93:74:8e:58:9d:fb:b5:32:69:8e:a0:e3:8b:d3:25:
         92:c1:94:f3:a0:61:11:2c:09:2d:8a:08:90:b0:92:5e:ea:a2:
         fb:02:2a:35:91:68:78:b4:02:e2:a8:a9:df:e3:c7:be:bd:a0:
         44:16:b8:55:65:1b:ec:94:b3:49:81:9e:ac:5f:ef:bb:7f:f2:
         43:7f:a2:60:aa:a2:54:74:96:92:92:fd:9c:e9:80:6a:a8:98:
         02:c6:fe:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org