Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31392e302f32342d3234203d3e203238313235.roa
File:                     3138372e31392e31392e302f32342d3234203d3e203238313235.roa (raw, json)
Hash identifier:          5ab/NVfzQQY1qwRXaaQQ3mwfG70tQjqoga0IfA3YHk0=
Subject key identifier:   47:E3:6F:3A:3F:D5:B1:DC:A3:AE:4B:BA:B7:D5:B3:0E:6B:C1:F4:58
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       32FC0A80422BC2D1A3998FCDCE262F545E5CFAE6
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31392e302f32342d3234203d3e203238313235.roa
Signing time:             Thu 02 Mar 2023 22:39:15 +0000
ROA not before:           Thu 02 Mar 2023 22:34:15 +0000
ROA not after:            Thu 29 Feb 2024 22:39:15 +0000
asID:                     28125
IP address blocks:        187.19.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:fc:0a:80:42:2b:c2:d1:a3:99:8f:cd:ce:26:2f:54:5e:5c:fa:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar  2 22:34:15 2023 GMT
            Not After : Feb 29 22:39:15 2024 GMT
        Subject: CN=47E36F3A3FD5B1DCA3AE4BBAB7D5B30E6BC1F458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:aa:15:73:8c:2c:4e:bd:3f:05:61:4f:05:13:
                    d3:a3:b9:15:2f:28:09:35:04:da:63:ef:4d:af:9d:
                    09:47:10:65:2c:ca:e2:a5:4c:77:e3:17:92:5b:7b:
                    db:da:88:11:e5:ae:e8:7c:9a:b6:ad:31:33:f3:50:
                    7a:d5:64:72:d9:c2:df:0a:dc:33:7b:45:77:2c:c3:
                    21:43:b5:f8:4d:f1:e1:d1:64:03:cf:37:79:e3:40:
                    b6:64:26:19:9d:2d:f6:32:0a:2d:33:49:bd:6e:7e:
                    4f:27:82:07:ca:fa:47:48:58:5f:3b:c3:8a:5e:c0:
                    5a:7d:54:b0:d4:a2:7a:21:79:87:52:42:d4:60:2b:
                    6a:4b:88:b8:79:35:02:ca:b5:cc:14:50:62:a9:83:
                    a0:e4:c4:fa:3b:79:37:e1:4a:75:6a:ed:ce:e2:cd:
                    83:4d:25:7e:6c:5e:67:19:31:d5:9e:bf:ce:a6:3a:
                    73:38:10:51:97:19:c3:31:63:6c:78:69:cc:39:cd:
                    d0:ce:96:5f:5e:7f:10:23:9a:e7:cd:4d:00:36:b8:
                    fa:64:d7:1d:8c:32:07:9a:8d:91:37:c0:33:1b:05:
                    c0:af:c8:bf:9d:5d:f9:60:a8:06:a1:28:b7:d8:40:
                    2d:99:d9:02:d1:d7:d8:46:99:dc:5e:4b:70:2a:f4:
                    0d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E3:6F:3A:3F:D5:B1:DC:A3:AE:4B:BA:B7:D5:B3:0E:6B:C1:F4:58
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31392e302f32342d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:25:83:59:c9:fa:18:9f:55:2b:d1:02:2b:c4:0e:8a:3a:5d:
         37:b8:3e:e7:a8:ad:f4:3e:c7:07:0f:a9:a8:84:61:74:0a:ad:
         cb:0c:42:e2:5f:f9:b9:56:65:4d:67:fc:63:4c:fb:f3:e7:6d:
         47:8c:46:34:ed:c7:22:4e:31:5a:47:5a:81:38:60:c7:24:95:
         dc:50:35:af:d1:52:05:44:72:8a:1d:ce:f7:93:de:4b:00:49:
         4e:40:f2:cd:7d:7e:ca:95:cc:6e:76:b3:5c:7e:32:2c:55:d7:
         31:8f:0a:af:e4:40:bc:5c:25:0f:4c:68:3f:43:e5:be:1b:c1:
         1f:22:d7:49:ff:a0:0a:44:0c:46:4a:43:90:b6:3c:60:a9:86:
         24:26:8c:2c:28:03:66:04:32:5d:27:2a:f1:38:8a:8a:12:09:
         51:05:ab:95:09:1d:8e:6f:cb:40:71:d8:57:c8:58:18:81:47:
         02:57:a3:9b:2c:03:e8:c7:7d:c9:a7:7c:64:2f:d6:1d:8a:02:
         e4:52:1a:67:40:f3:0d:1c:94:69:a3:92:29:6b:18:da:d9:32:
         36:de:80:e9:6e:cf:50:39:3f:cf:e5:3c:ec:d5:54:43:7e:b9:
         ce:f3:9b:f9:ab:ce:96:aa:8b:3b:05:8b:29:39:d7:77:e6:52:
         e6:ab:fb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org