Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3230372e302f32342d3234203d3e20323632343638.roa
File:                     3139312e352e3230372e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          Z24cxg0giuXMTXhxAniBpVzKcRml14ILOizLp7HWrO0=
Subject key identifier:   BB:CF:E0:10:20:F9:AD:67:C8:65:E9:90:C8:34:30:14:1D:55:4C:11
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       53E7024E2740E76E7B7D8E75488F295B1978C554
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3230372e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:10:00 +0000
ROA not before:           Tue 20 Dec 2022 15:05:00 +0000
ROA not after:            Tue 19 Dec 2023 15:10:00 +0000
asID:                     262468
IP address blocks:        191.5.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e7:02:4e:27:40:e7:6e:7b:7d:8e:75:48:8f:29:5b:19:78:c5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:05:00 2022 GMT
            Not After : Dec 19 15:10:00 2023 GMT
        Subject: CN=BBCFE01020F9AD67C865E990C83430141D554C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5d:41:8e:ad:88:a9:03:bc:37:db:a8:78:76:
                    f2:94:ae:c9:34:e4:18:1a:ac:b4:08:cd:33:ed:2d:
                    99:d4:38:13:56:d5:43:46:69:0b:cf:7c:1e:d2:7a:
                    4f:53:fe:37:2c:74:c7:38:df:5f:52:3d:7b:31:a8:
                    d8:9d:ea:89:ad:7d:ab:bc:a8:22:3d:37:79:be:bb:
                    db:29:4a:3f:4a:6b:9b:d4:39:f9:23:53:c8:5b:be:
                    83:0e:7e:e6:49:88:1b:25:f0:b2:79:db:c8:e7:d8:
                    95:70:b6:1d:27:7d:d6:97:ff:81:fa:02:fa:45:99:
                    83:d8:e6:81:54:e6:26:35:34:d7:6e:de:85:4b:7f:
                    09:a5:22:4c:3a:7b:1a:24:b5:9d:c5:09:13:8a:e5:
                    44:12:26:5d:00:53:d1:61:c1:63:db:3e:9d:48:62:
                    bf:5a:0b:a2:bd:82:76:82:c4:0b:40:72:b7:8b:db:
                    25:2f:f4:d1:a3:8b:b7:de:6e:bf:be:7c:ec:46:a1:
                    96:dd:30:ff:1a:93:45:64:3e:7b:fa:1f:c4:92:19:
                    e9:ed:20:19:41:c8:43:c3:ef:57:a4:52:41:fa:e5:
                    44:24:d3:1e:04:c6:67:ee:bc:b7:07:ec:0c:94:fb:
                    65:b2:4c:60:08:2b:cb:32:df:41:fa:f3:31:83:a4:
                    8b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CF:E0:10:20:F9:AD:67:C8:65:E9:90:C8:34:30:14:1D:55:4C:11
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3139312e352e3230372e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:0f:51:34:1a:12:c4:7b:89:e0:97:1e:20:b3:34:51:00:36:
         47:a3:a2:30:b0:90:52:ad:bd:f5:36:0d:48:4b:ef:ef:61:b6:
         41:02:a6:84:45:e8:51:87:ab:cf:6b:c5:da:63:9b:6d:f0:24:
         5e:ec:44:ca:f4:91:ed:95:81:7a:b4:c3:c2:ab:11:e5:4f:55:
         cc:dd:df:38:29:16:ef:4b:77:c5:75:da:73:f9:c4:2b:53:aa:
         2b:15:08:ff:73:c2:ac:b7:f7:4e:a2:26:c1:60:cc:3e:f7:c5:
         2d:d4:32:c7:86:c6:b1:65:4e:6c:e7:9a:3a:ca:cb:b9:e9:2f:
         05:41:7a:40:e9:bc:b6:7c:9e:07:8d:b3:5d:fd:08:3a:21:98:
         1d:a2:67:a1:ad:f0:7b:ea:3d:92:a6:b5:79:ee:e2:64:30:aa:
         90:42:4d:45:90:1f:91:11:fb:d4:29:17:4d:c6:cb:1d:a8:b2:
         6f:46:26:62:47:ae:f4:88:37:a5:98:c2:34:99:1a:7d:74:69:
         24:d5:2c:fc:16:f7:60:bf:75:9f:69:f8:99:46:f0:04:12:42:
         25:69:d4:e3:ae:6e:f9:30:f9:fe:6c:7f:0c:23:88:a5:3a:f8:
         06:d7:3b:2d:4e:05:8d:54:3f:d3:a5:02:4e:47:3b:55:37:c8:
         8b:8a:5f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org