Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e33302e302f32342d3234203d3e203238313235.roa
File:                     3138372e31392e33302e302f32342d3234203d3e203238313235.roa (raw, json)
Hash identifier:          jCbHWTFiY74ztU4qFfLvCHmr/8UXM2WgJqd/PO32+/w=
Subject key identifier:   A1:7E:74:ED:52:E9:E0:25:50:5C:AB:0B:F2:E5:93:A8:8E:7C:EE:AD
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       5E1DFC3B3418611A5CD9DD02138AB901037FDD2C
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e33302e302f32342d3234203d3e203238313235.roa
Signing time:             Thu 02 Mar 2023 22:36:00 +0000
ROA not before:           Thu 02 Mar 2023 22:31:00 +0000
ROA not after:            Thu 29 Feb 2024 22:36:00 +0000
asID:                     28125
IP address blocks:        187.19.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1d:fc:3b:34:18:61:1a:5c:d9:dd:02:13:8a:b9:01:03:7f:dd:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar  2 22:31:00 2023 GMT
            Not After : Feb 29 22:36:00 2024 GMT
        Subject: CN=A17E74ED52E9E025505CAB0BF2E593A88E7CEEAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cc:90:50:48:be:85:33:6f:bd:48:96:d3:a0:
                    ce:67:00:43:f5:ee:87:8e:30:dd:62:04:3d:c6:95:
                    2e:02:63:91:39:9e:69:c1:34:d0:94:25:32:f1:6b:
                    ec:de:c8:09:0d:3c:5a:d7:b6:e7:99:86:e1:5c:ad:
                    90:a6:3a:4c:6c:a6:f8:2d:bf:e1:38:23:ef:6b:f0:
                    06:9f:4a:da:83:1a:37:02:b3:1d:2d:55:f4:b4:85:
                    b5:23:ca:1e:54:f6:5b:91:51:05:a2:9d:84:6f:24:
                    48:65:dc:24:8d:9d:bb:9d:c3:a3:71:e9:87:9e:cd:
                    a9:41:74:1c:52:eb:40:f5:6e:1d:bf:f4:6d:5e:c5:
                    a8:19:69:ac:51:b8:7e:31:6c:33:8c:23:01:f9:e3:
                    f6:76:4c:af:e2:c2:95:b5:34:65:67:79:91:55:a7:
                    5a:cb:a8:bc:fe:25:34:a2:e1:33:17:f8:dd:6f:f4:
                    32:49:9f:02:08:f3:93:23:a6:cd:bf:fc:9d:d6:6a:
                    82:b7:bf:a8:38:14:c5:b0:61:9c:d2:33:0b:c8:f6:
                    a9:5e:8c:77:5d:92:85:4a:12:48:13:de:d2:26:ff:
                    cd:30:58:b4:bf:1d:4a:61:9b:41:8f:f5:c4:a1:94:
                    b2:d6:28:63:39:d4:b8:26:7a:25:94:63:00:43:fd:
                    ce:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7E:74:ED:52:E9:E0:25:50:5C:AB:0B:F2:E5:93:A8:8E:7C:EE:AD
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e33302e302f32342d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:a2:9b:c6:32:f3:13:dd:5e:b9:6b:43:4f:d8:c3:fd:02:4c:
         5d:ba:7b:41:f1:af:c4:d9:17:a1:58:41:61:b8:a3:91:df:c0:
         8e:23:73:59:b7:f5:81:02:7f:fd:67:2e:42:75:cc:1d:63:b9:
         b5:a7:13:3c:92:6e:b9:49:3a:82:0e:61:e1:06:64:6e:d6:e4:
         0e:ab:82:50:e9:46:64:0a:29:87:1a:2a:37:17:d6:6f:41:4d:
         b7:fe:44:ad:e6:9d:e3:21:74:de:29:f5:7f:80:b1:d3:8d:40:
         0f:e9:fe:f8:5d:a9:dc:ff:be:7e:8a:58:15:03:09:7c:ce:48:
         6d:2d:0b:a6:ed:26:1f:6c:2a:b7:86:2b:22:34:83:fb:84:9f:
         8a:7f:ee:43:43:84:58:b8:0b:2a:aa:90:a7:5a:96:07:e4:37:
         7f:65:ec:fc:55:c6:ea:11:a4:55:95:b7:51:21:57:fe:68:21:
         f1:01:24:fc:2e:c8:50:a4:a1:91:5a:4b:6b:c7:b4:b9:76:02:
         8b:42:28:d3:d0:83:ec:ea:e5:e8:82:18:75:f3:f0:0a:e1:32:
         af:91:09:a3:bf:ae:3c:cb:5e:1d:66:a0:37:b2:1d:5c:03:02:
         a1:de:84:5b:09:29:ff:e0:76:bd:3b:13:9e:16:c8:dc:77:e3:
         e8:e9:56:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org