Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31362e302f32322d3232203d3e203238313235.roa
File:                     3138372e31392e31362e302f32322d3232203d3e203238313235.roa (raw, json)
Hash identifier:          WHT0tJSI6GcT+TeQiJ1E0JR4vVvytGzLPxMW1FL+hVQ=
Subject key identifier:   59:0A:14:3C:32:F2:57:B7:AB:A3:7C:0D:13:20:30:74:54:D9:42:7C
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       3C1155D270EA7F22BC6BAA534AF94A84DDE61F8C
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31362e302f32322d3232203d3e203238313235.roa
Signing time:             Thu 20 Apr 2023 17:50:44 +0000
ROA not before:           Thu 20 Apr 2023 17:45:44 +0000
ROA not after:            Thu 18 Apr 2024 17:50:44 +0000
asID:                     28125
IP address blocks:        187.19.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:11:55:d2:70:ea:7f:22:bc:6b:aa:53:4a:f9:4a:84:dd:e6:1f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Apr 20 17:45:44 2023 GMT
            Not After : Apr 18 17:50:44 2024 GMT
        Subject: CN=590A143C32F257B7ABA37C0D1320307454D9427C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:41:d0:c6:de:06:c9:6c:45:19:55:2e:01:7d:
                    e8:91:35:f3:bf:a4:e9:bd:05:d3:bb:88:fc:75:82:
                    7b:8b:cf:a0:6c:b4:5e:a8:a3:3c:72:a5:0e:96:e6:
                    ee:9a:14:d6:e2:19:bc:f0:ed:aa:a0:6c:b5:3b:98:
                    25:d0:7b:b9:bd:0e:ce:1e:0f:27:7e:bf:f4:73:67:
                    c7:07:e1:39:23:e6:68:de:eb:8c:03:a2:dd:4b:1e:
                    45:92:2a:e6:65:be:0c:5c:85:ec:35:2b:28:1a:ae:
                    9a:3e:6b:bf:b3:dc:95:be:da:4d:c6:34:3d:1a:8b:
                    21:65:2f:b1:9d:e1:9b:68:6c:94:09:55:d2:b6:54:
                    67:ac:81:28:9d:81:70:e1:62:a2:d1:7f:6d:f6:bc:
                    e4:07:ef:ca:ec:3d:87:c4:83:33:38:32:56:d3:63:
                    98:af:98:00:e9:7c:34:1a:fb:b0:98:a6:fb:5c:64:
                    1d:b4:06:22:20:f9:0d:38:47:80:36:cb:17:54:e1:
                    51:52:90:f1:e3:72:d8:7e:2f:57:03:6f:4f:18:7c:
                    1d:97:ec:77:4c:0e:ac:75:a4:04:3e:d9:8f:1a:2f:
                    d6:f4:06:df:97:15:e8:59:f2:c3:de:71:73:fb:de:
                    11:ef:45:35:29:04:7c:1e:28:24:00:bc:67:3a:e4:
                    7d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0A:14:3C:32:F2:57:B7:AB:A3:7C:0D:13:20:30:74:54:D9:42:7C
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31362e302f32322d3232203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:74:e4:7e:e8:6f:94:f9:a0:60:36:38:14:bc:68:09:76:50:
         9b:79:1b:0d:75:c2:cc:87:fe:1e:5f:86:c8:3e:b8:e2:51:c9:
         a3:84:db:a2:0f:27:04:a9:97:a4:50:1b:ae:79:61:5a:21:18:
         74:85:b6:e3:05:b5:6c:f4:6a:b4:65:b2:66:d3:4f:0a:d2:96:
         cb:bb:c7:3a:e7:ff:21:fd:e0:cd:4a:fa:48:28:13:69:c9:1e:
         7e:9d:3e:a0:91:c0:f3:66:b2:96:a7:63:09:7f:a3:48:f6:8f:
         c6:f3:f3:7e:79:85:fa:df:04:d7:ac:2c:fe:80:0e:73:25:ae:
         dc:f4:ae:9a:73:5d:57:3a:52:48:1f:7b:53:fc:a9:4a:45:bf:
         d2:f2:f7:4e:b1:ac:85:86:35:99:00:ca:7a:68:65:0a:8e:c8:
         17:57:03:e6:d3:5e:1b:ec:9f:13:81:ea:c2:be:a7:87:41:a7:
         a6:8d:4a:e9:08:62:0d:8e:50:87:aa:fe:77:44:8c:03:10:ae:
         bd:f3:44:84:3e:1a:15:84:74:26:35:8b:8d:45:09:23:d1:f4:
         a8:0e:e9:b4:f7:4b:fd:ca:36:60:95:73:cf:5a:69:8a:65:f1:
         28:b2:d1:92:9a:a7:ca:b3:7e:31:6a:e0:1e:d5:0a:83:d8:ed:
         48:9c:48:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org