Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32372e302f32342d3234203d3e203238313235.roa
File:                     3138372e31392e32372e302f32342d3234203d3e203238313235.roa (raw, json)
Hash identifier:          lShBpEoDiM6HlPJfNiX2wXoTdBbyomPDN7RIn5fyxP4=
Subject key identifier:   06:8C:D7:BA:F6:92:16:26:3E:E2:6D:69:CB:87:DE:AE:65:26:7E:5E
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       5F97E6ECB1D72338C2C9D0EF25333F4FB7AE27
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32372e302f32342d3234203d3e203238313235.roa
Signing time:             Thu 02 Mar 2023 22:36:20 +0000
ROA not before:           Thu 02 Mar 2023 22:31:20 +0000
ROA not after:            Thu 29 Feb 2024 22:36:20 +0000
asID:                     28125
IP address blocks:        187.19.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:97:e6:ec:b1:d7:23:38:c2:c9:d0:ef:25:33:3f:4f:b7:ae:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar  2 22:31:20 2023 GMT
            Not After : Feb 29 22:36:20 2024 GMT
        Subject: CN=068CD7BAF69216263EE26D69CB87DEAE65267E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ff:c0:5f:31:94:21:2f:40:19:bc:ba:e2:57:
                    c4:12:8e:d1:99:b4:a3:13:04:16:23:9a:cd:b2:fc:
                    17:c1:e7:c7:ab:1c:75:90:20:c8:ff:03:44:f6:3f:
                    b0:03:c6:4d:a5:f2:8b:4f:59:50:ff:52:f7:a1:13:
                    5f:35:15:f8:a9:61:9d:de:cb:29:10:64:6f:39:c0:
                    4f:82:f7:30:da:ef:2b:c8:58:a9:72:ca:a0:3e:66:
                    da:78:ef:0b:54:a8:06:f5:78:2f:73:e5:86:f4:58:
                    30:d2:fb:ce:a9:a7:08:6a:41:71:57:48:a9:31:72:
                    99:b0:ed:c0:34:4b:0c:08:51:f2:35:0b:04:4b:db:
                    25:55:1d:32:11:d7:c2:b5:29:98:19:4c:c9:79:20:
                    3d:03:b1:86:ab:46:38:eb:cc:9a:91:ce:8a:86:fd:
                    bc:52:f9:05:d9:3e:be:43:0c:ac:1c:1b:65:85:f1:
                    62:0d:fa:49:06:4b:2d:6e:60:a5:8c:98:56:e7:82:
                    d0:06:c7:3f:dd:52:7d:c7:41:44:0d:bf:d9:10:6f:
                    52:1d:44:3d:84:25:4e:40:44:e8:bf:47:ee:c0:b8:
                    de:22:df:d5:5b:cc:02:cb:0a:cc:14:c4:8d:a3:2f:
                    bf:3a:79:af:b4:9f:9a:b7:c4:09:53:7b:83:54:63:
                    5a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8C:D7:BA:F6:92:16:26:3E:E2:6D:69:CB:87:DE:AE:65:26:7E:5E
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32372e302f32342d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:e1:fa:a9:d7:2a:aa:01:f9:8c:75:f4:9d:1d:5a:eb:36:dd:
         4b:0b:a2:51:7f:c7:33:df:10:b7:11:72:d4:a6:c7:cc:89:ad:
         0e:62:4b:af:f2:fc:54:e1:b0:74:8f:6e:93:aa:85:64:7f:43:
         f1:5a:50:d7:2b:e9:f5:fc:17:94:9c:f5:59:11:9f:cf:2c:72:
         f1:ce:0f:79:c6:0b:c7:ef:98:08:db:31:0f:e2:59:8b:d1:3c:
         97:31:28:75:49:4b:cd:f3:e0:53:c1:26:a5:ca:f2:32:57:ee:
         9a:a7:70:20:3e:1c:92:fc:e8:47:36:cc:01:1a:c4:16:34:b3:
         29:fb:b3:b8:cb:72:69:85:7b:e6:13:96:22:ae:a5:fe:75:ce:
         2e:88:26:fe:95:4d:85:c2:1c:3d:40:67:6e:9c:c6:ff:85:f8:
         0e:3e:02:fc:07:9a:55:e4:ab:89:94:db:22:2c:66:15:eb:6d:
         a3:99:60:4a:c4:72:58:4b:58:60:01:e2:85:95:6d:2a:7d:3b:
         58:0a:bb:92:32:fc:6f:c7:75:c9:b6:93:80:1b:c1:b5:83:5a:
         82:9a:33:0b:9e:28:c2:c3:9f:60:6d:80:9b:60:0a:fa:ee:f9:
         c3:3f:1f:99:c1:b5:e1:da:54:4a:ff:78:26:63:4d:e6:08:28:
         e7:b5:87:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org