Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32342e302f32322d3232203d3e203238313235.roa
File:                     3138372e31392e32342e302f32322d3232203d3e203238313235.roa (raw, json)
Hash identifier:          HrKH//OYtYpCTsFSgEnCZ7Qd13kW2KUratE4J4NKvbs=
Subject key identifier:   DA:52:28:69:03:35:13:F7:4E:9C:A2:E5:B4:EF:76:4E:26:13:EC:A4
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       26ED17A67BDD29B535D53260B720FA82CA04982D
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32342e302f32322d3232203d3e203238313235.roa
Signing time:             Thu 20 Apr 2023 17:50:44 +0000
ROA not before:           Thu 20 Apr 2023 17:45:44 +0000
ROA not after:            Thu 18 Apr 2024 17:50:44 +0000
asID:                     28125
IP address blocks:        187.19.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ed:17:a6:7b:dd:29:b5:35:d5:32:60:b7:20:fa:82:ca:04:98:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Apr 20 17:45:44 2023 GMT
            Not After : Apr 18 17:50:44 2024 GMT
        Subject: CN=DA522869033513F74E9CA2E5B4EF764E2613ECA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:11:91:2c:5e:48:df:1d:a1:0d:bb:1b:02:51:
                    1c:46:d1:dd:75:f8:b0:36:42:b5:2e:da:48:fc:e4:
                    de:8d:56:c5:6c:94:eb:fc:09:c2:87:9c:57:be:3a:
                    9b:da:cf:72:1d:52:54:a5:13:95:cd:22:3f:a8:da:
                    6e:05:58:af:f6:ea:01:7c:06:85:8c:fe:29:af:ec:
                    47:2b:9f:82:13:e7:cb:56:8f:4c:36:ff:cf:0e:20:
                    1d:1a:0b:92:f2:1e:c0:7a:a9:a8:5d:fe:30:06:a3:
                    f3:8d:4d:ec:1f:0d:23:47:d3:ed:65:a0:1d:9b:41:
                    46:00:5c:05:a5:04:30:86:b4:14:84:88:f3:39:ed:
                    fb:e4:3c:de:e0:38:41:d1:72:5c:43:02:1e:1a:4e:
                    70:e3:71:eb:d4:b8:b1:97:33:0c:f4:2a:5b:9b:a6:
                    d9:e7:8c:90:86:fb:8e:f6:8b:99:a3:2c:73:fc:54:
                    f9:e8:22:2a:82:6e:2b:37:41:97:48:1d:c8:5d:a6:
                    e8:5e:52:c4:b5:d1:09:54:da:62:31:50:d3:28:a8:
                    53:e5:3e:d2:55:b1:78:2d:b0:a9:56:68:f9:8d:18:
                    17:ac:8c:16:4f:e0:77:9e:70:ef:67:71:0a:1f:e5:
                    e2:ff:c6:1a:dc:9d:cb:ef:0a:52:0c:35:f8:d4:cb:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:52:28:69:03:35:13:F7:4E:9C:A2:E5:B4:EF:76:4E:26:13:EC:A4
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32342e302f32322d3232203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:24:a6:dc:ec:61:0a:45:39:22:a3:29:62:bc:73:d2:b8:21:
         fa:10:bd:a1:08:00:a4:b6:c9:ee:71:fa:02:3d:54:b1:26:e0:
         56:30:37:dc:40:32:b9:05:6c:be:fc:b4:0a:6b:1b:6f:97:35:
         8d:c1:1d:ae:c0:79:9b:5c:2b:d3:d3:b9:11:10:89:c4:c7:1e:
         57:ef:4a:b4:95:8f:cb:6f:c3:62:29:67:6e:4a:25:ff:66:17:
         63:6d:ce:e9:3a:bb:37:1e:8e:15:70:86:c1:dd:8b:a6:32:bf:
         70:f1:af:3e:68:8b:58:e0:5b:68:35:66:f8:af:d3:d3:9a:e9:
         27:3e:b7:70:56:fe:22:72:1a:ba:f0:84:cc:95:c7:6d:6c:fc:
         e2:59:a1:a7:30:10:24:4f:61:10:07:be:69:6a:57:3c:57:21:
         af:81:78:63:0c:09:0f:fa:9a:19:dd:c6:f1:9b:cb:52:f2:09:
         e3:df:99:56:d6:56:5b:ca:6b:17:d9:10:a1:88:9e:df:6a:21:
         4b:05:fa:7b:49:99:f0:09:4f:49:56:03:85:3c:3f:e8:fc:1c:
         6c:2f:4f:d5:e1:c4:9b:56:bc:b2:b0:06:c3:2c:6a:3d:e2:1c:
         65:15:0a:ff:f9:be:23:f5:93:b0:da:bc:72:0f:ce:0d:1d:76:
         c2:1f:55:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org