Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32322e302f32342d3234203d3e203238313235.roa
File:                     3138372e31392e32322e302f32342d3234203d3e203238313235.roa (raw, json)
Hash identifier:          G4KVL8bbU1GebtBdI3ML8SAc0IwC4vLgk8GbckEg0ho=
Subject key identifier:   C1:A5:AD:DA:F3:AA:D3:79:1F:9C:6C:40:7F:AC:91:6E:5E:E2:46:A3
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       4563A3D9B9385465E0FF724783D3CA4F01C30754
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32322e302f32342d3234203d3e203238313235.roa
Signing time:             Thu 02 Mar 2023 22:39:16 +0000
ROA not before:           Thu 02 Mar 2023 22:34:16 +0000
ROA not after:            Thu 29 Feb 2024 22:39:16 +0000
asID:                     28125
IP address blocks:        187.19.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:63:a3:d9:b9:38:54:65:e0:ff:72:47:83:d3:ca:4f:01:c3:07:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar  2 22:34:16 2023 GMT
            Not After : Feb 29 22:39:16 2024 GMT
        Subject: CN=C1A5ADDAF3AAD3791F9C6C407FAC916E5EE246A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:14:5b:b8:19:cb:0d:28:b2:30:8e:12:0b:35:
                    65:08:db:4c:96:88:3e:e2:b3:72:b1:49:a0:a4:01:
                    e1:f5:43:3a:ac:a3:c4:df:8c:99:50:4f:72:ab:a8:
                    fd:97:44:a0:7c:eb:a0:a0:4c:08:3a:36:88:9c:d5:
                    63:dd:26:3c:be:67:32:01:93:5b:4a:3e:2b:b8:5e:
                    dc:a9:43:13:e5:5e:5d:fc:1f:6f:70:21:49:de:a0:
                    44:0f:81:a9:41:23:4e:84:23:17:a2:87:6c:8a:00:
                    f8:6d:cb:cb:a4:0c:33:84:bd:ba:35:b8:33:15:28:
                    a1:16:01:95:36:cb:20:1a:09:38:97:4a:6d:7c:d8:
                    93:b1:5c:b2:eb:3d:56:d6:af:51:cb:2e:96:be:99:
                    3a:76:20:94:bd:25:32:84:b1:af:ca:27:d5:e6:f8:
                    0a:d5:3a:f7:8c:17:96:90:32:38:ff:02:6a:c9:40:
                    94:bc:ea:3d:88:1b:97:c4:c0:e0:27:d6:b7:36:36:
                    56:eb:c7:70:e3:68:29:a7:b2:88:a9:fe:2c:ff:b3:
                    91:18:3e:38:b2:f6:ed:9e:61:ea:aa:37:18:53:df:
                    19:43:f6:5b:91:36:94:71:b8:68:d6:16:f7:48:ed:
                    87:ff:a7:4f:36:78:d3:9b:57:dc:ac:d7:f5:9f:d0:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A5:AD:DA:F3:AA:D3:79:1F:9C:6C:40:7F:AC:91:6E:5E:E2:46:A3
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32322e302f32342d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:0b:92:57:3e:fe:fa:a7:48:84:7b:84:20:14:92:e4:a6:41:
         97:75:52:19:b3:55:bd:3b:04:45:4a:c6:94:82:1d:aa:c5:86:
         5d:01:5a:4f:d5:d2:2b:00:70:f2:45:c4:6d:df:2c:3e:18:32:
         b0:54:66:85:c5:ee:1c:90:c1:98:34:0e:2b:dc:ba:eb:8a:fc:
         c0:9b:28:37:10:30:21:76:80:8f:f6:36:8a:d1:1e:1e:93:af:
         4f:4c:16:e9:bf:f7:95:0e:c1:62:d7:81:08:43:42:ff:d1:22:
         28:5d:5e:11:e6:c1:f1:f0:be:50:6e:02:fe:3e:e9:fc:b2:e7:
         75:17:56:07:d2:02:9a:e0:82:8c:b8:c0:95:95:52:ee:41:36:
         21:9d:51:80:4f:ae:37:20:a3:26:e9:6d:49:7f:79:88:e1:f8:
         0b:37:06:27:34:c6:d5:38:03:39:76:28:08:31:c5:8f:1b:1d:
         7d:23:7c:0b:a6:91:07:25:51:40:17:f9:d7:b2:5e:54:7f:9d:
         a3:cc:7b:78:37:39:ba:90:65:83:07:44:0b:fb:de:4d:29:46:
         29:f9:2a:94:4f:1d:d3:9b:07:6f:cd:7a:fc:0b:18:b0:ea:a7:
         be:94:44:b9:1f:f2:5e:ea:a2:2b:ab:00:2c:7d:96:82:3f:66:
         0a:45:a6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org