Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136302e302f32312d3231203d3e203238313235.roa
File:                     3139312e33362e3136302e302f32312d3231203d3e203238313235.roa (raw, json)
Hash identifier:          W3S2CUVkxuH7ZwrSUC2jE5QoO910b7xJjhx3Yk6Z5fU=
Subject key identifier:   88:17:6A:0F:36:F4:96:77:41:80:65:6E:A8:A7:EE:CC:B9:EC:FB:EE
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       4CBB08AF03CAB8D536D7CD108DB6DD3690C6E5F8
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136302e302f32312d3231203d3e203238313235.roa
Signing time:             Thu 21 Mar 2024 17:57:09 +0000
ROA not before:           Thu 21 Mar 2024 17:52:09 +0000
ROA not after:            Thu 20 Mar 2025 17:57:09 +0000
asID:                     28125
IP address blocks:        191.36.160.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:bb:08:af:03:ca:b8:d5:36:d7:cd:10:8d:b6:dd:36:90:c6:e5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar 21 17:52:09 2024 GMT
            Not After : Mar 20 17:57:09 2025 GMT
        Subject: CN=88176A0F36F496774180656EA8A7EECCB9ECFBEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:d0:02:d6:07:f4:3a:5c:86:6b:18:98:a6:
                    99:40:2a:85:7c:1c:e8:c7:35:bc:49:7b:02:36:eb:
                    28:13:2e:8a:c0:df:63:57:4c:b5:10:d0:18:bc:3e:
                    70:7f:59:67:10:29:6d:2b:18:e4:b9:e9:ce:00:37:
                    10:2e:b8:54:bf:91:bc:ee:2b:ef:df:0b:92:93:a9:
                    b3:d7:8a:24:0c:52:e4:61:a3:bb:28:cc:93:7b:1e:
                    b6:04:b3:5f:37:15:3c:e7:05:9f:25:f2:f2:96:06:
                    1f:da:2e:7b:9d:43:ac:33:fd:2c:bb:16:c5:c9:00:
                    be:a3:48:b3:a4:f9:26:cc:10:ee:57:40:08:52:1f:
                    97:f2:40:b1:fe:1d:84:9a:26:8b:74:81:79:ec:ea:
                    e4:99:3c:5a:67:55:21:e9:da:75:3f:d8:c6:2a:24:
                    60:65:ae:df:14:04:d4:f4:ac:f8:5a:b3:6f:54:a4:
                    67:6a:70:57:be:23:4f:57:d9:9f:0b:67:ff:4e:56:
                    0b:7d:b0:48:1d:a5:79:d2:9c:8d:a5:a3:a5:d0:0c:
                    80:d5:98:52:96:db:6c:0a:8e:f0:1e:bc:b7:5a:aa:
                    05:41:ce:7a:64:39:bd:73:8c:45:97:15:be:b8:7c:
                    bc:85:29:65:b0:f7:61:8f:e4:79:5c:d6:69:7a:75:
                    62:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:17:6A:0F:36:F4:96:77:41:80:65:6E:A8:A7:EE:CC:B9:EC:FB:EE
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136302e302f32312d3231203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:8d:44:c8:ae:c4:28:87:da:33:a4:95:c3:03:b4:31:16:70:
         e3:87:38:d4:52:c8:d0:d4:88:49:37:c0:62:a2:99:a2:f1:3b:
         b1:6d:69:4f:6d:b1:f2:de:09:ff:f5:4b:3d:0f:58:76:47:8a:
         09:02:ce:0f:cb:ba:fc:07:a9:93:97:1c:b7:6b:a2:68:4f:f0:
         0b:ee:91:31:70:d8:d3:c1:cb:70:0c:91:5a:37:b8:99:f8:aa:
         59:43:a2:f0:5c:d0:98:30:af:e8:18:92:6f:70:bf:ab:c7:c9:
         2b:38:8d:01:2c:42:f9:5e:84:c3:a4:b5:ee:5c:98:b2:2d:39:
         00:23:e7:22:76:82:cc:72:8c:19:80:bd:71:da:b8:d7:33:ad:
         79:26:49:a3:30:cd:0d:fb:8d:9f:88:c3:b5:a0:8e:6f:61:43:
         65:fd:d1:91:08:c1:d9:b6:db:03:43:12:0e:d6:83:e5:08:8a:
         9d:a1:83:21:c0:15:32:77:ca:db:56:6d:44:3a:f8:a4:1a:65:
         02:e1:cf:44:63:b6:42:86:58:c7:ca:23:27:0a:03:e3:b4:04:
         58:4e:7a:3e:8b:9a:a4:90:12:f9:db:48:1b:d9:fe:a3:23:2b:
         51:6f:29:8d:45:8f:3a:ed:43:05:20:d5:f9:18:b0:2f:4e:a3:
         27:c1:23:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org