Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32382e302f32322d3232203d3e203238313235.roa
File:                     3138372e31392e32382e302f32322d3232203d3e203238313235.roa (raw, json)
Hash identifier:          w6gjaixxIGQ43lViJyleuDWfQb5QJTrvVq/XtJpLwS4=
Subject key identifier:   A0:1F:D5:AE:94:B6:9A:8E:76:D5:85:17:65:9C:AC:FE:13:F3:95:4F
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       2C2F70D061A7FEE29A7D4E6DC8025F555A4E2C17
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32382e302f32322d3232203d3e203238313235.roa
Signing time:             Thu 20 Apr 2023 17:50:44 +0000
ROA not before:           Thu 20 Apr 2023 17:45:44 +0000
ROA not after:            Thu 18 Apr 2024 17:50:44 +0000
asID:                     28125
IP address blocks:        187.19.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2f:70:d0:61:a7:fe:e2:9a:7d:4e:6d:c8:02:5f:55:5a:4e:2c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Apr 20 17:45:44 2023 GMT
            Not After : Apr 18 17:50:44 2024 GMT
        Subject: CN=A01FD5AE94B69A8E76D58517659CACFE13F3954F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:2e:0e:89:b7:0f:5d:b4:30:f3:c3:50:ab:
                    48:ec:36:91:12:ef:ea:0a:8a:85:e8:6d:fa:d5:a6:
                    62:69:bb:c5:49:6a:4a:a2:a2:0c:28:3b:b8:b5:d7:
                    e3:22:7f:be:83:55:cd:76:49:bd:47:5b:f1:bd:80:
                    0d:64:62:3f:24:09:6d:dd:c0:42:36:ff:ea:6d:95:
                    43:52:25:fb:ba:ac:7b:d6:b7:f9:e3:d0:c8:23:80:
                    e7:41:00:5c:24:2b:de:10:8e:ee:1f:50:fe:69:42:
                    7d:bf:76:62:0b:72:fd:e1:32:b1:2f:d0:73:ee:03:
                    ab:f8:cb:6b:72:6a:36:89:64:11:6f:a2:44:96:55:
                    49:3e:e8:c1:98:af:01:14:4f:26:a2:fe:8e:0c:02:
                    00:a9:d4:76:32:f1:44:da:ae:26:9a:ef:0d:ea:cb:
                    98:99:87:03:4b:05:5c:b3:1e:fe:b2:ac:3f:cb:c9:
                    a2:ee:f6:3d:bf:ce:bc:32:fa:68:e6:ae:6e:8a:bf:
                    66:4d:d0:cf:c2:1e:e4:cf:26:10:49:84:98:06:3b:
                    90:52:fa:0d:7e:cd:91:d7:08:e3:e2:64:2a:c6:a3:
                    13:9b:7b:78:01:bf:49:ec:28:2e:5a:99:e4:42:9e:
                    72:2c:a5:31:ed:b2:db:ad:eb:71:2e:6d:65:41:8f:
                    7a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1F:D5:AE:94:B6:9A:8E:76:D5:85:17:65:9C:AC:FE:13:F3:95:4F
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32382e302f32322d3232203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:04:d2:32:8e:32:c3:80:85:35:f9:91:c4:c3:98:f0:04:1a:
         97:92:5b:d1:7a:50:20:b2:d1:41:bd:f4:d1:14:55:cd:14:5d:
         bc:49:f3:48:98:8f:e8:0c:dd:14:28:e0:e3:4a:55:15:51:96:
         09:9c:de:38:49:f7:cb:9f:c4:eb:ca:89:a6:12:e3:ed:0f:1d:
         74:4d:aa:e9:b1:9c:36:c4:70:4e:9a:31:99:71:be:58:1a:db:
         59:c2:dd:5a:b4:82:8e:10:e2:ad:e5:f3:12:eb:3d:9b:be:5c:
         d2:fa:ba:af:3c:6d:fa:3e:14:ef:9d:3f:8d:aa:67:c2:da:dd:
         7b:d0:01:f1:c6:5f:9f:45:4a:29:3c:91:01:25:78:c3:8a:4d:
         1d:68:b1:29:a4:00:ee:b6:f0:bc:da:1d:77:f9:6f:b3:84:71:
         a1:80:e2:d3:eb:92:1e:42:71:ce:42:49:bd:9a:d7:f1:0d:b5:
         31:c6:27:14:cb:7d:c8:c2:58:29:cf:11:6c:1c:8b:e4:e1:a3:
         d2:cd:7f:f5:bc:f9:7b:d9:46:af:d4:07:96:19:3c:85:fe:ca:
         87:08:1e:3e:3d:7b:b8:48:8a:c4:51:8d:fd:1e:b9:8b:c1:3c:
         af:13:ff:12:04:1f:6c:81:cc:53:1d:5a:98:4e:4e:5c:30:c3:
         54:08:01:2f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIULC9w0GGn/uKafU5tyAJfVVpOLBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFBMEYzM0EwMkQyNDBFOUE1RTY2MDAwMUM5RTU3NDFE
QzEyQUNDQjAeFw0yMzA0MjAxNzQ1NDRaFw0yNDA0MTgxNzUwNDRaMDMxMTAvBgNV
BAMTKEEwMUZENUFFOTRCNjlBOEU3NkQ1ODUxNzY1OUNBQ0ZFMTNGMzk1NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC90i4OibcPXbQw88NQq0jsNpES
7+oKioXobfrVpmJpu8VJakqiogwoO7i11+Mif76DVc12Sb1HW/G9gA1kYj8kCW3d
wEI2/+ptlUNSJfu6rHvWt/nj0MgjgOdBAFwkK94Qju4fUP5pQn2/dmILcv3hMrEv
0HPuA6v4y2tyajaJZBFvokSWVUk+6MGYrwEUTyai/o4MAgCp1HYy8UTariaa7w3q
y5iZhwNLBVyzHv6yrD/LyaLu9j2/zrwy+mjmrm6Kv2ZN0M/CHuTPJhBJhJgGO5BS
+g1+zZHXCOPiZCrGoxObe3gBv0nsKC5ameRCnnIspTHtstut63EubWVBj3q/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUoB/VrpS2mo521YUXZZys/hPzlU8wHwYDVR0j
BBgwFoAUUaDzOgLSQOml5mAAHJ5XQdwSrMswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkJYeDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRl
aE4vMC81MUEwRjMzQTAyRDI0MEU5QTVFNjYwMDAxQzlFNTc0MURDMTJBQ0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUxQTBGMzNBMDJEMjQwRTlB
NUU2NjAwMDFDOUU1NzQxREMxMkFDQ0IuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCWHgxbVpiUmd3RHExd0I5OUpCY0Zkc1lSWThhSjZhTEtYeDJXcTZ0ZWhOLzAv
MzEzODM3MmUzMTM5MmUzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODMx
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArsTHDANBgkqhkiG9w0BAQsFAAOCAQEAfwTSMo4yw4CF
NfmRxMOY8AQal5Jb0XpQILLRQb300RRVzRRdvEnzSJiP6AzdFCjg40pVFVGWCZze
OEn3y5/E68qJphLj7Q8ddE2q6bGcNsRwTpoxmXG+WBrbWcLdWrSCjhDireXzEus9
m75c0vq6rzxt+j4U750/japnwtrde9AB8cZfn0VKKTyRASV4w4pNHWixKaQA7rbw
vNodd/lvs4RxoYDi0+uSHkJxzkJJvZrX8Q21McYnFMt9yMJYKc8RbByL5OGj0s1/
9bz5e9lGr9QHlhk8hf7KhwgePj17uEiKxFGN/R65i8E8rxP/EgQfbIHMUx1amE5O
XDDDVAgBLw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org