Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32342e302f32322d3234203d3e203238313235.roa
File:                     3138372e31392e32342e302f32322d3234203d3e203238313235.roa (raw, json)
Hash identifier:          X8MYCagLG8ibbxKx/JlUk82WdtcpdFSiuiBp2+K3ES4=
Subject key identifier:   8E:B7:14:C2:A1:C8:3F:87:E9:1B:A8:91:A1:C0:2E:CC:C5:42:34:AD
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       1615710421C743DF7DAAFAF600FCF855889A914B
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32342e302f32322d3234203d3e203238313235.roa
Signing time:             Tue 26 Mar 2024 13:15:35 +0000
ROA not before:           Tue 26 Mar 2024 13:10:35 +0000
ROA not after:            Tue 25 Mar 2025 13:15:35 +0000
asID:                     28125
IP address blocks:        187.19.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:15:71:04:21:c7:43:df:7d:aa:fa:f6:00:fc:f8:55:88:9a:91:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar 26 13:10:35 2024 GMT
            Not After : Mar 25 13:15:35 2025 GMT
        Subject: CN=8EB714C2A1C83F87E91BA891A1C02ECCC54234AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:07:0d:92:5d:b2:dc:b8:39:0a:f9:b0:b3:
                    39:f9:69:a7:e6:ba:43:5e:53:4e:5c:90:f0:96:e5:
                    71:7b:d7:ac:08:53:6c:a7:53:5c:fb:05:be:4a:7b:
                    1e:52:d9:e0:f5:44:16:99:40:5a:b2:d1:5a:82:b7:
                    f0:8c:37:29:89:bb:7e:35:b6:4f:01:2e:64:5b:2e:
                    1b:44:0a:61:37:b0:76:56:68:26:a5:ee:15:b2:63:
                    b6:25:64:99:b0:3d:38:19:fb:77:23:d7:91:78:18:
                    21:dc:55:e7:fd:a6:c2:fe:c9:e2:56:7a:da:d0:fe:
                    5f:11:82:7c:fc:ff:47:df:ed:2b:f9:41:8e:b9:2e:
                    53:17:ae:52:06:88:ea:ee:a8:08:27:8b:fb:d8:f0:
                    c0:0f:18:0f:1a:5e:d3:9a:d6:06:9b:0a:73:f8:4a:
                    fa:2d:0a:04:e6:2b:02:24:4c:c0:82:70:29:34:bc:
                    b2:e2:35:ad:ea:a3:70:bd:d1:bf:92:00:50:ed:80:
                    b8:d7:5c:7e:3f:c5:fd:21:29:f2:2e:1b:21:24:84:
                    ec:ce:59:5b:01:03:fe:67:5a:60:73:8a:bf:87:8b:
                    02:40:fe:b1:60:05:b9:cf:cf:8f:70:57:4e:15:28:
                    a4:e0:54:c1:64:6f:6e:04:6e:1a:5c:b9:32:07:b9:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B7:14:C2:A1:C8:3F:87:E9:1B:A8:91:A1:C0:2E:CC:C5:42:34:AD
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32342e302f32322d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:53:fa:d2:51:6e:44:4b:10:0c:66:05:28:b9:76:70:bc:2e:
         db:30:d6:65:90:c1:24:51:48:9c:4a:53:b9:3a:cb:48:19:08:
         ca:2c:ef:b7:23:4e:e6:30:1f:1a:2c:7a:3c:65:ce:7b:08:b3:
         a5:64:1b:84:33:23:c5:e7:54:5b:30:ce:a6:1b:69:d6:24:21:
         71:5c:d6:7b:94:38:de:cb:5d:c4:1d:ea:6c:5a:9f:8a:11:16:
         d4:89:6d:01:15:10:f3:da:4e:9a:a5:85:1a:04:c2:31:f0:b6:
         e9:03:96:fe:66:70:49:13:58:28:10:c2:7d:78:0a:3b:30:35:
         80:24:e5:96:0f:e1:a0:18:93:a4:71:17:4f:f6:ca:eb:4e:9b:
         b8:cb:53:46:63:d5:ee:32:92:0f:a4:25:d1:bc:4e:ce:69:32:
         01:66:93:eb:95:e7:86:07:74:1a:18:02:d2:1f:d0:17:8e:7f:
         b4:ef:d4:24:70:80:f3:f7:20:b3:2b:05:d4:59:be:66:15:a7:
         ef:7a:3d:89:3f:4f:b3:c4:e3:23:6e:02:95:6e:af:e4:cc:46:
         9b:b8:37:f8:20:95:03:99:ce:a1:65:7c:89:7b:4f:11:7a:ac:
         e8:b7:b2:18:38:bc:1a:dd:ed:00:24:56:bb:c5:bf:0a:d8:86:
         5f:b8:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org