Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32382e302f32342d3234203d3e203238313235.roa
File:                     3138372e31392e32382e302f32342d3234203d3e203238313235.roa (raw, json)
Hash identifier:          4HmXbSQxXaBoykbqxfn7PTph1E8Zq+YZnus2QgdwTKk=
Subject key identifier:   E0:83:6B:45:FC:98:4E:9F:F0:C9:11:2C:53:9B:F3:BF:5D:D2:C7:12
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       423D590BB5AAD6A094A89EB62BF145170BCFFE29
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32382e302f32342d3234203d3e203238313235.roa
Signing time:             Thu 02 Mar 2023 22:36:05 +0000
ROA not before:           Thu 02 Mar 2023 22:31:05 +0000
ROA not after:            Thu 29 Feb 2024 22:36:05 +0000
asID:                     28125
IP address blocks:        187.19.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3d:59:0b:b5:aa:d6:a0:94:a8:9e:b6:2b:f1:45:17:0b:cf:fe:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar  2 22:31:05 2023 GMT
            Not After : Feb 29 22:36:05 2024 GMT
        Subject: CN=E0836B45FC984E9FF0C9112C539BF3BF5DD2C712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:13:c9:56:45:0f:ab:39:8c:75:59:32:92:
                    88:89:08:ea:59:7d:a5:4b:7d:cb:ab:fe:ba:37:fe:
                    aa:d2:66:a5:c0:bf:80:93:97:bd:4b:e9:61:77:76:
                    a4:93:56:ad:61:ec:86:60:45:99:46:b2:55:39:17:
                    4d:ce:37:9c:f3:e0:f6:c2:e3:cc:ff:04:ae:f0:24:
                    51:57:69:7a:66:ee:b6:13:73:30:b2:01:37:84:00:
                    41:ff:dd:73:96:1b:23:5b:fc:3a:6c:29:cb:7a:b5:
                    e5:ee:99:74:4d:3d:08:36:38:16:df:87:7d:6a:ed:
                    e5:a1:81:e7:99:76:5b:1b:e9:3b:4f:c9:25:2c:c1:
                    c3:4c:14:af:46:c7:fb:1c:9b:8f:a1:e9:dd:34:f2:
                    96:d2:cf:31:ba:66:c8:de:76:92:06:fc:30:f1:35:
                    c0:21:cc:fb:5d:01:61:7f:1e:6a:3e:01:26:10:72:
                    73:f3:24:f4:d6:2e:c5:16:3b:a8:b1:ba:b7:af:7e:
                    f2:c4:91:cb:7e:e1:a5:eb:45:68:3c:bf:b9:28:73:
                    9c:e2:80:ba:f3:95:e8:57:2d:47:7a:d9:a5:99:f9:
                    ea:38:78:aa:83:8f:f5:20:82:ca:ae:cb:f6:7d:d0:
                    b6:5e:ac:4b:f3:77:b7:d5:90:30:66:00:ef:f1:77:
                    d8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:83:6B:45:FC:98:4E:9F:F0:C9:11:2C:53:9B:F3:BF:5D:D2:C7:12
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32382e302f32342d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:fa:8e:47:17:c5:3c:03:82:ca:a3:36:14:a1:17:22:e2:5f:
         76:4b:0d:c7:f6:6a:e1:47:fb:71:36:9a:af:0a:df:ab:f8:98:
         c3:e1:d7:cd:77:87:94:99:fb:22:50:ac:f0:85:3f:a0:24:c6:
         de:1d:8a:28:2f:31:f9:c2:cd:57:c4:1f:ac:75:c2:9b:f0:46:
         68:50:3a:b9:db:04:f9:7c:67:64:25:97:76:1f:cd:f5:00:40:
         cd:61:1f:c6:f8:29:dd:65:66:32:11:51:3e:dc:f3:ca:23:9d:
         e6:fe:a5:95:5c:bc:5e:74:3d:d4:f4:e2:d7:d7:05:d1:b1:c7:
         14:34:9e:d7:88:a4:4a:8b:4a:82:66:44:79:84:5d:23:6f:b2:
         db:66:d7:e6:71:41:1e:4b:cc:7f:18:ef:0a:53:49:ee:53:13:
         e6:14:ed:dd:42:d4:a7:ac:a4:4b:e2:d2:1c:35:57:f7:f7:4a:
         c2:f5:4b:b6:ca:36:58:d1:8e:5b:2b:75:3f:df:d9:c0:8c:1a:
         69:d6:7f:4e:5e:1a:94:2b:14:9b:4d:36:dc:35:a3:1e:78:d2:
         b4:9a:a0:33:9c:c9:0e:eb:34:10:08:6c:8c:e5:9d:6f:93:79:
         2e:36:02:06:23:83:4b:d6:ae:2e:6b:ee:79:1e:fa:b3:f1:f9:
         44:a2:d7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org