Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3139312e352e37322e302f32322d3332203d3e203532353833.roa
File:                     3139312e352e37322e302f32322d3332203d3e203532353833.roa (raw, json)
Hash identifier:          /P2yiUZgQbu8Y4UOQvQ8gLk4Acv4D3+Xw2yGZyVDZ7I=
Subject key identifier:   CC:05:BB:01:3E:7B:12:F8:E5:83:7E:51:4A:2B:68:07:1B:7D:6E:F8
Certificate issuer:       /CN=1AC76CD1F04A803385A19BFD83DB6B28E9060FD5
Certificate serial:       6E0B00A7471784CD0AD21D02195D93A4599E447A
Authority key identifier: 1A:C7:6C:D1:F0:4A:80:33:85:A1:9B:FD:83:DB:6B:28:E9:06:0F:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AC76CD1F04A803385A19BFD83DB6B28E9060FD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3139312e352e37322e302f32322d3332203d3e203532353833.roa
Signing time:             Tue 19 Dec 2023 22:02:08 +0000
ROA not before:           Tue 19 Dec 2023 21:57:08 +0000
ROA not after:            Tue 17 Dec 2024 22:02:08 +0000
asID:                     52583
IP address blocks:        191.5.72.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0b:00:a7:47:17:84:cd:0a:d2:1d:02:19:5d:93:a4:59:9e:44:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AC76CD1F04A803385A19BFD83DB6B28E9060FD5
        Validity
            Not Before: Dec 19 21:57:08 2023 GMT
            Not After : Dec 17 22:02:08 2024 GMT
        Subject: CN=CC05BB013E7B12F8E5837E514A2B68071B7D6EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d6:0f:5c:a1:85:65:cb:ff:84:89:47:2e:fa:
                    ff:95:83:27:16:8d:38:31:1e:31:5b:48:74:85:ed:
                    71:96:e4:25:cc:eb:ab:be:0a:a6:e4:84:d9:9f:cb:
                    aa:12:83:22:85:75:7a:48:86:14:96:b3:7e:99:e1:
                    b1:d8:17:5a:10:01:13:26:64:ba:47:26:ba:37:15:
                    b6:e6:5e:75:64:cb:4f:f7:51:5a:f7:66:f2:a8:f7:
                    b0:2d:23:59:00:22:7a:fd:1c:88:82:d5:46:0b:a9:
                    67:a7:65:64:51:b2:ef:1d:af:ab:d4:21:62:ac:91:
                    dd:ec:8d:57:86:3b:e3:e4:51:d7:b3:c3:ea:ed:08:
                    cb:a2:99:f6:c2:ba:43:3b:3a:7d:1c:03:18:b7:f3:
                    55:9b:f6:e5:6e:59:67:ec:a4:ca:97:f3:87:71:c6:
                    37:52:79:53:54:0d:e8:60:36:56:37:2b:68:36:da:
                    26:53:03:f2:fb:e5:41:89:1b:53:71:d2:c5:a9:b3:
                    68:0e:f8:8b:2e:c1:29:4c:7e:b0:76:6b:84:d6:06:
                    33:4b:e5:53:cc:eb:bc:b2:10:6b:50:b9:b3:bb:4e:
                    41:6e:b5:93:57:6a:f8:34:f4:b1:5f:89:8b:3e:b2:
                    01:4e:f2:75:6f:c1:e7:b1:53:17:25:d7:82:78:46:
                    c2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:05:BB:01:3E:7B:12:F8:E5:83:7E:51:4A:2B:68:07:1B:7D:6E:F8
            X509v3 Authority Key Identifier:
                keyid:1A:C7:6C:D1:F0:4A:80:33:85:A1:9B:FD:83:DB:6B:28:E9:06:0F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/1AC76CD1F04A803385A19BFD83DB6B28E9060FD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AC76CD1F04A803385A19BFD83DB6B28E9060FD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3139312e352e37322e302f32322d3332203d3e203532353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:1e:c9:0c:5b:a4:e7:50:fd:62:89:cf:ba:2b:d7:46:70:29:
         65:c1:e0:63:17:f0:8d:25:7a:96:69:03:dd:18:00:ed:2e:43:
         2e:77:41:56:1d:a4:21:fe:68:21:da:a2:3b:fd:66:43:55:76:
         f6:70:77:8f:e5:da:dd:c7:c0:69:a1:7c:ca:8e:cb:87:dd:25:
         08:9f:69:52:7c:7f:6d:fa:92:26:a9:9d:d5:a0:d4:d5:24:a1:
         86:6b:ac:d8:bd:02:e2:11:d5:a5:37:34:99:bc:ad:8f:99:00:
         fd:50:68:e9:d2:21:d6:ca:82:28:5e:07:e3:ad:cd:7a:0d:62:
         b0:dc:b8:34:7d:e2:c1:19:15:87:56:83:dc:2c:45:5e:87:3e:
         5f:51:48:02:f5:cb:67:a6:69:cb:4a:3d:48:7a:f7:40:8b:11:
         ca:b9:1a:fc:19:b9:ce:89:f6:fd:28:bf:b4:8a:14:c5:9b:b7:
         f8:4e:69:15:48:ec:12:98:48:c4:f0:b0:c8:0f:fd:d9:ab:aa:
         c4:ff:b8:60:a7:3c:4f:08:5c:2e:9b:c2:71:be:89:4b:11:c0:
         42:98:3e:bc:57:92:f6:85:49:cf:9d:0d:aa:c5:86:cf:30:c1:
         70:7e:e8:a8:8f:a5:b0:c5:2c:42:da:5d:7c:33:69:27:fd:26:
         e8:a4:e0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org