Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3139312e352e37362e302f32322d3332203d3e203532353833.roa
File:                     3139312e352e37362e302f32322d3332203d3e203532353833.roa (raw, json)
Hash identifier:          MEa1PdyFUwiWC0zG8VGlKToyrvQ2V71GIkpQjjRjuUA=
Subject key identifier:   3A:69:50:A7:7F:03:D4:46:F0:4F:75:ED:76:44:70:3E:95:73:AD:EE
Certificate issuer:       /CN=1AC76CD1F04A803385A19BFD83DB6B28E9060FD5
Certificate serial:       5FFC9BDB29D82E96CED4092CD6EE0AF71347A70E
Authority key identifier: 1A:C7:6C:D1:F0:4A:80:33:85:A1:9B:FD:83:DB:6B:28:E9:06:0F:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AC76CD1F04A803385A19BFD83DB6B28E9060FD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3139312e352e37362e302f32322d3332203d3e203532353833.roa
Signing time:             Tue 19 Dec 2023 22:02:38 +0000
ROA not before:           Tue 19 Dec 2023 21:57:38 +0000
ROA not after:            Tue 17 Dec 2024 22:02:38 +0000
asID:                     52583
IP address blocks:        191.5.76.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:fc:9b:db:29:d8:2e:96:ce:d4:09:2c:d6:ee:0a:f7:13:47:a7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AC76CD1F04A803385A19BFD83DB6B28E9060FD5
        Validity
            Not Before: Dec 19 21:57:38 2023 GMT
            Not After : Dec 17 22:02:38 2024 GMT
        Subject: CN=3A6950A77F03D446F04F75ED7644703E9573ADEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:5d:89:d4:c4:39:1e:7b:01:4a:42:9e:0a:
                    4e:81:dd:8e:5e:85:53:a1:84:f5:1a:97:d4:74:d9:
                    3b:de:dc:9a:d3:e2:74:49:19:28:c6:92:93:3b:89:
                    24:c1:ba:a9:04:38:9b:69:6e:d8:76:30:04:cf:b2:
                    f0:83:5a:31:7c:89:12:8a:45:68:5f:92:c4:d7:90:
                    65:13:ec:be:11:0b:4f:24:37:03:f2:20:4c:56:bb:
                    52:55:0b:db:03:95:97:88:02:f2:b7:65:fc:5b:f3:
                    6f:c9:91:42:a2:8a:93:3b:99:a6:87:3b:46:d1:83:
                    14:88:68:bb:1b:4e:b9:7b:5e:a8:7b:4a:ac:35:90:
                    6b:f5:e0:74:70:58:98:25:b4:bd:2c:20:f3:d6:ac:
                    d2:a3:39:ef:32:79:bc:4f:1f:ef:a5:56:ca:00:34:
                    a6:bd:2b:47:b3:c9:02:eb:ab:f7:ab:47:89:1c:59:
                    00:cf:7d:15:85:5d:88:ed:02:ee:bd:ad:a5:0a:68:
                    71:3d:a0:e9:2d:69:53:57:72:51:3c:33:6a:5a:4a:
                    36:32:81:f3:fc:32:b6:8d:eb:fa:55:01:0c:ce:f9:
                    4b:0b:eb:cd:f6:7d:36:e6:62:1d:70:33:5d:a9:0a:
                    95:bd:1b:fe:b4:23:f9:43:ba:e0:26:a7:21:19:6d:
                    30:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:69:50:A7:7F:03:D4:46:F0:4F:75:ED:76:44:70:3E:95:73:AD:EE
            X509v3 Authority Key Identifier:
                keyid:1A:C7:6C:D1:F0:4A:80:33:85:A1:9B:FD:83:DB:6B:28:E9:06:0F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/1AC76CD1F04A803385A19BFD83DB6B28E9060FD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AC76CD1F04A803385A19BFD83DB6B28E9060FD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3139312e352e37362e302f32322d3332203d3e203532353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:15:97:a1:74:02:6b:95:e1:96:ab:26:f6:52:bc:16:43:
         2f:65:2b:bb:62:7e:2f:a3:50:db:2d:bf:5b:21:fa:e4:0e:f6:
         f4:65:81:b6:95:92:c5:85:d8:2f:05:14:8d:36:dc:1d:e9:d8:
         57:f6:d8:13:dc:e4:68:b4:89:61:1b:ed:e2:45:ba:14:10:69:
         02:54:bb:d0:bb:f1:c1:93:a6:79:28:c3:df:3a:43:3e:59:b8:
         71:9e:73:3e:bf:a3:5e:73:72:13:af:e4:e2:10:f0:9a:6e:9a:
         de:58:70:88:f8:ae:94:e0:01:50:df:8f:09:61:f8:fd:fe:74:
         08:55:17:12:73:88:0c:65:6f:2c:f1:4d:38:85:64:52:9a:1a:
         50:a1:f2:fd:c9:1a:0d:4e:d4:7a:c8:4a:3f:45:05:63:7e:28:
         31:25:bb:3c:a2:84:84:06:1a:c0:50:d2:43:a1:33:d2:0f:6b:
         e7:ba:2a:57:5e:e0:ac:5b:8c:0b:98:7b:d7:72:63:55:0a:e7:
         1b:8f:75:99:06:f2:33:bd:51:62:58:4a:2b:ea:15:f2:b3:69:
         8e:93:54:cd:33:20:0d:4b:5f:c3:dd:9e:6b:b6:71:8c:40:2d:
         9d:39:3f:20:c6:a7:38:6c:25:ff:cf:dc:da:df:24:1a:5c:77:
         2b:a6:74:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org