Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32302e302f32322d3232203d3e203238313235.roa
File:                     3138372e31392e32302e302f32322d3232203d3e203238313235.roa (raw, json)
Hash identifier:          ZvZhq36Fe69MPUtwC27nMCDholm4oGtr2J3+Q/eufE0=
Subject key identifier:   69:59:80:DB:52:03:02:AD:EE:2F:4E:FF:E5:9B:B7:68:5A:40:17:79
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       77098D9B96101D55CF82D06AE63851C2CF7F6E20
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32302e302f32322d3232203d3e203238313235.roa
Signing time:             Thu 20 Apr 2023 17:50:44 +0000
ROA not before:           Thu 20 Apr 2023 17:45:44 +0000
ROA not after:            Thu 18 Apr 2024 17:50:44 +0000
asID:                     28125
IP address blocks:        187.19.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:09:8d:9b:96:10:1d:55:cf:82:d0:6a:e6:38:51:c2:cf:7f:6e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Apr 20 17:45:44 2023 GMT
            Not After : Apr 18 17:50:44 2024 GMT
        Subject: CN=695980DB520302ADEE2F4EFFE59BB7685A401779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6e:99:22:a7:58:ac:13:01:ec:59:df:d4:ed:
                    6a:59:a6:77:aa:05:5a:f0:e5:b5:43:04:b7:7d:5e:
                    e5:d1:90:9b:bd:22:be:2f:f7:af:6b:1e:36:f5:4b:
                    5c:2e:bd:4b:b5:a1:a6:62:35:5e:f6:66:35:a1:3c:
                    6a:93:63:25:f5:e5:dd:94:a5:0d:93:a2:6a:85:ef:
                    bc:92:0b:ed:de:be:b9:96:b6:32:16:b7:66:24:4f:
                    bb:9d:dd:c6:6b:c8:53:08:21:90:26:de:81:0e:66:
                    cf:77:81:f9:62:0d:8b:ed:5b:fb:1f:9d:6e:c7:1c:
                    cd:0d:75:2e:8d:d5:c2:86:23:fd:b2:5d:ab:48:f5:
                    7b:b5:6e:8a:4c:5c:22:c8:de:b7:ab:4b:e2:49:08:
                    7c:98:43:88:0e:49:c0:5e:df:02:29:95:d6:a2:a8:
                    d0:e5:e1:dc:0b:b8:61:2d:58:db:a9:6b:a6:f0:ee:
                    d6:ca:06:88:0f:3f:b8:76:bd:76:cc:36:d9:16:3d:
                    18:61:d6:6a:bc:e8:d7:0f:f3:d8:d7:45:1a:cb:53:
                    34:87:c6:2b:5d:c9:ff:aa:32:b4:37:d7:18:e4:a9:
                    b6:5a:eb:d3:64:33:d1:83:1c:07:00:17:9f:08:22:
                    c2:c3:07:b5:88:9d:27:bf:4a:65:85:67:31:50:e4:
                    9b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:59:80:DB:52:03:02:AD:EE:2F:4E:FF:E5:9B:B7:68:5A:40:17:79
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32302e302f32322d3232203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:27:48:6e:d5:11:c0:f2:98:1f:11:cb:5a:cb:29:33:9f:49:
         9f:3d:94:f2:55:ef:47:dd:30:37:26:e9:22:db:82:b9:3b:02:
         d9:69:d0:63:ca:33:4a:ef:4c:76:41:1e:7e:8d:34:7a:c7:07:
         02:2a:c1:fe:1e:42:46:cf:69:47:a0:12:45:75:ee:8f:8a:47:
         aa:58:ab:cf:2f:cb:37:9a:46:66:6a:37:11:04:9d:e1:8e:3f:
         6a:8b:60:6d:60:6d:b7:62:64:59:b0:4e:d1:9e:79:d7:52:c5:
         cf:c6:93:46:4c:a4:6c:c7:62:f5:08:e9:39:5c:01:55:42:30:
         76:f1:42:7b:62:ae:4f:b9:5b:e0:cf:bc:d4:52:62:46:d4:2d:
         34:34:94:11:27:7f:a5:38:33:6f:ea:a9:58:28:80:06:54:30:
         47:6d:5f:b6:41:4f:bc:b1:79:14:f8:be:0d:fd:d7:aa:05:b8:
         9a:79:d1:0d:8e:75:91:f5:c5:03:d4:f9:b7:c1:5c:a0:4d:df:
         d7:5e:be:6c:b2:3b:0f:3a:e8:65:72:40:22:4b:32:12:0d:34:
         57:ba:45:67:23:6c:60:e8:97:bf:2d:53:b4:97:78:ab:f4:c8:
         4c:83:c0:ad:9e:80:84:bf:58:c6:53:d0:0b:0d:43:22:47:d9:
         97:38:a2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org