Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31372e302f32342d3234203d3e203238313235.roa
File:                     3138372e31392e31372e302f32342d3234203d3e203238313235.roa (raw, json)
Hash identifier:          WGq5Fq2J6VcDd7z9S0PNNCMlZTH6WF7VdUsGyaIq9xg=
Subject key identifier:   67:6B:5A:F5:C9:2C:C7:8A:3B:69:8A:A0:5C:BC:33:56:C4:DA:3F:3E
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       1B76044ED1477F098085CB823205743100F4E603
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31372e302f32342d3234203d3e203238313235.roa
Signing time:             Thu 02 Mar 2023 22:39:15 +0000
ROA not before:           Thu 02 Mar 2023 22:34:15 +0000
ROA not after:            Thu 29 Feb 2024 22:39:15 +0000
asID:                     28125
IP address blocks:        187.19.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:76:04:4e:d1:47:7f:09:80:85:cb:82:32:05:74:31:00:f4:e6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar  2 22:34:15 2023 GMT
            Not After : Feb 29 22:39:15 2024 GMT
        Subject: CN=676B5AF5C92CC78A3B698AA05CBC3356C4DA3F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:96:3d:c7:84:3e:71:c3:08:f4:10:7b:22:
                    2c:cf:38:ce:8f:3e:9c:55:97:8b:e8:3b:92:7b:21:
                    00:a2:0f:f8:4d:30:30:54:a8:0a:6e:95:a0:aa:35:
                    ff:e8:e7:f9:c7:da:5a:8b:2a:aa:6b:3a:a7:44:06:
                    d2:5e:81:9f:cd:3d:e1:db:7f:44:ca:a2:fe:24:c3:
                    72:09:be:9a:45:54:32:2a:bb:2c:85:86:38:3b:6b:
                    38:6b:77:51:c6:22:0e:44:02:84:87:58:55:0b:48:
                    ad:dd:fc:ed:97:0f:7f:18:b7:c3:6e:b0:b2:2a:64:
                    3c:6a:5d:a5:38:fc:05:2c:4c:97:08:cd:f3:c6:72:
                    5b:36:94:37:4b:98:ca:ee:4c:a0:d9:4e:bd:43:98:
                    82:b7:82:ed:e4:76:21:a0:df:63:42:96:3e:8f:1c:
                    5b:e4:22:49:9b:2a:a5:ef:fe:1e:a7:fe:7b:49:6b:
                    aa:e4:13:7c:92:f6:ab:d1:42:91:d2:41:92:e6:ae:
                    35:4e:23:ff:cd:9d:a7:d5:fb:64:7a:ec:03:a3:ea:
                    74:58:70:5e:04:94:25:d9:ff:b1:fe:cb:0a:d2:89:
                    0c:3e:91:05:f4:db:05:41:1c:0f:44:9b:d1:0e:9e:
                    e4:ac:a7:cd:08:54:c8:0b:c4:92:bf:5f:ad:0e:78:
                    8a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6B:5A:F5:C9:2C:C7:8A:3B:69:8A:A0:5C:BC:33:56:C4:DA:3F:3E
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31372e302f32342d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:93:32:00:b6:b9:d5:c9:71:46:1c:e0:b5:13:2e:f7:46:61:
         c5:11:e6:41:fe:b7:de:93:15:1c:75:43:d7:38:ae:fa:f4:cc:
         a6:64:f6:8e:04:d0:a0:74:2e:d9:38:ec:82:16:4a:cc:03:ed:
         31:d6:16:e9:c7:ec:96:06:15:74:63:fa:28:82:ef:ed:e3:91:
         db:bf:5a:96:a9:75:ac:06:24:27:d6:9c:a9:5b:8b:2b:f6:e0:
         34:21:39:c0:02:50:3e:c3:fa:a8:29:f5:78:c2:c4:a7:d9:59:
         cb:a7:fc:bd:f8:40:c0:32:a1:6d:7e:f1:9c:97:34:36:c3:d8:
         fb:06:8a:df:97:9d:f6:35:44:2b:ca:6b:8c:f3:1d:a2:c2:46:
         94:03:51:30:ea:19:65:ce:50:e3:bb:9f:c4:14:34:e6:6f:00:
         07:a8:1a:a2:f3:0b:82:8e:a4:c9:e8:0a:49:07:28:13:84:94:
         cf:26:80:e3:30:8c:7e:59:9a:28:01:74:c2:02:b6:95:b5:26:
         f6:64:cc:e7:ea:34:4b:26:83:38:99:c0:94:a5:08:ec:d7:5b:
         33:4a:32:3e:2f:cd:b4:c3:ed:60:27:21:92:59:96:cb:48:df:
         20:7a:5c:c9:ac:4d:9c:97:84:c8:b2:9d:60:d6:ea:22:a7:e7:
         94:20:41:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org