Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/3139312e352e3130302e302f32322d3332203d3e20323633353335.roa
File:                     3139312e352e3130302e302f32322d3332203d3e20323633353335.roa (raw, json)
Hash identifier:          yYv6koypaFWHY4Ty2+3QojIlZP+mvi2HD0wSrsMxDFQ=
Subject key identifier:   98:01:FC:16:73:D7:9A:FD:21:CC:3B:D3:DC:BC:4E:AA:45:10:57:7B
Certificate issuer:       /CN=387CC636934238244AFEBD33B0AF5BBD91139A5B
Certificate serial:       270F7DD51D93FF09C371AA8E9AA7B6C35B57AB5B
Authority key identifier: 38:7C:C6:36:93:42:38:24:4A:FE:BD:33:B0:AF:5B:BD:91:13:9A:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387CC636934238244AFEBD33B0AF5BBD91139A5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/3139312e352e3130302e302f32322d3332203d3e20323633353335.roa
Signing time:             Sat 11 Mar 2023 12:03:49 +0000
ROA not before:           Sat 11 Mar 2023 11:58:49 +0000
ROA not after:            Sat 09 Mar 2024 12:03:49 +0000
asID:                     263535
IP address blocks:        191.5.100.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0f:7d:d5:1d:93:ff:09:c3:71:aa:8e:9a:a7:b6:c3:5b:57:ab:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387CC636934238244AFEBD33B0AF5BBD91139A5B
        Validity
            Not Before: Mar 11 11:58:49 2023 GMT
            Not After : Mar  9 12:03:49 2024 GMT
        Subject: CN=9801FC1673D79AFD21CC3BD3DCBC4EAA4510577B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:3c:b7:3f:58:74:6f:ff:9f:ed:fd:d6:59:
                    28:81:47:10:8d:16:f0:9a:66:26:47:36:53:b8:95:
                    52:2a:c0:03:54:bc:11:4e:28:1a:bf:33:c4:56:44:
                    a1:b2:9a:9e:a4:c4:a6:3f:9b:af:4a:d8:33:62:09:
                    8d:69:92:29:95:f2:7c:39:c2:0b:fc:08:12:9e:e9:
                    cd:d9:79:ec:e4:d8:e2:ec:0a:f4:b8:9f:ef:0b:88:
                    e9:44:03:fd:51:4a:0a:6a:ca:c9:52:07:d0:14:88:
                    ec:66:86:06:c6:40:51:76:e6:2b:8b:7d:3f:f6:a1:
                    68:b6:9e:ed:4c:82:68:55:17:00:5a:e4:00:7e:07:
                    46:69:69:ca:e7:53:93:09:71:f5:1e:f7:1b:9c:eb:
                    1e:63:41:70:bb:95:09:3c:c6:24:47:b1:5b:ef:f0:
                    a6:23:06:4a:09:a8:6a:5f:a2:30:0c:b7:95:43:d5:
                    74:d2:13:f8:77:cd:2a:c1:a0:d6:56:56:9e:58:c3:
                    ae:2f:1e:fa:38:c1:c0:9d:a7:40:c7:da:f8:9b:19:
                    ea:4c:34:58:a6:66:7f:38:11:84:36:3a:42:b4:ec:
                    76:d0:e0:34:47:c3:f0:83:fa:62:94:a1:86:7e:26:
                    f9:7b:9e:41:5a:07:df:56:e1:c1:7b:e0:88:81:52:
                    6f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:01:FC:16:73:D7:9A:FD:21:CC:3B:D3:DC:BC:4E:AA:45:10:57:7B
            X509v3 Authority Key Identifier:
                keyid:38:7C:C6:36:93:42:38:24:4A:FE:BD:33:B0:AF:5B:BD:91:13:9A:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/387CC636934238244AFEBD33B0AF5BBD91139A5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387CC636934238244AFEBD33B0AF5BBD91139A5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxCJPdcgjMZAL23RdD56QdZ9QWKc2cuWxdrw78cJzx6g/0/3139312e352e3130302e302f32322d3332203d3e20323633353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:cc:69:91:5e:a1:c7:92:10:6a:02:b9:29:28:4d:15:c6:4a:
         cc:20:21:0c:fb:4a:0b:f0:9a:de:f6:cb:00:b4:c0:9c:64:27:
         e4:ff:9f:94:cf:78:3b:96:5d:b8:9e:3e:10:64:75:f6:4d:84:
         3b:ee:3e:63:30:a2:75:d8:93:1a:18:ec:fb:30:e8:b5:17:50:
         ba:2e:26:04:78:4c:be:3a:9e:66:41:76:b7:38:88:ff:fc:33:
         f7:8b:5c:77:e9:d5:35:7f:ac:ef:f0:28:eb:d8:f7:64:c1:bf:
         9c:06:36:9e:ce:a1:c1:f8:3d:64:ab:4c:da:09:91:78:b0:53:
         ab:e7:04:8e:b5:1d:10:f1:b3:5b:d5:90:f5:09:3d:19:2b:9b:
         3a:6b:9c:64:93:48:b7:1a:83:f7:94:56:25:39:69:db:40:15:
         7d:1d:b9:a6:11:10:dc:5c:2c:83:97:c6:69:30:bc:85:e1:e2:
         d5:ba:6f:93:ba:5e:47:2b:a4:89:5b:a6:b7:eb:79:37:95:a1:
         0a:55:76:a2:31:cc:19:af:06:0a:68:04:86:44:fa:c4:17:ac:
         13:c3:d2:91:d6:44:6a:8d:ec:f4:e3:a0:9f:c7:f9:bd:d4:75:
         b2:18:a3:4c:c6:2a:fe:75:69:07:99:7c:6e:34:93:c1:9e:f7:
         ff:36:f9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org