Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136302e302f32312d3234203d3e203238313235.roa
File:                     3139312e33362e3136302e302f32312d3234203d3e203238313235.roa (raw, json)
Hash identifier:          lmbBUvUTUd6D7KUn9gInKe4O2N32ZrTNHKn1XvhYUmc=
Subject key identifier:   54:C8:1F:53:A9:E7:B4:B9:E1:0A:A2:C6:35:3D:F1:62:D1:C4:53:10
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       04B5A5AE5659A70DBBC8B3C33A5219448C0E78BB
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136302e302f32312d3234203d3e203238313235.roa
Signing time:             Wed 01 Mar 2023 14:43:32 +0000
ROA not before:           Wed 01 Mar 2023 14:38:32 +0000
ROA not after:            Wed 28 Feb 2024 14:43:32 +0000
asID:                     28125
IP address blocks:        191.36.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b5:a5:ae:56:59:a7:0d:bb:c8:b3:c3:3a:52:19:44:8c:0e:78:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar  1 14:38:32 2023 GMT
            Not After : Feb 28 14:43:32 2024 GMT
        Subject: CN=54C81F53A9E7B4B9E10AA2C6353DF162D1C45310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:69:b6:49:df:0a:99:6e:a1:a2:f1:2f:02:
                    65:03:fc:da:92:75:7e:ff:94:b3:1c:f8:31:fb:58:
                    51:b6:d8:3e:d2:2e:be:3d:2b:3d:85:1a:d9:3f:6c:
                    53:f9:60:d1:e1:a2:98:f4:7f:05:d3:1e:3e:7d:0c:
                    66:0f:26:44:4d:14:f9:86:2f:b3:53:95:09:05:d6:
                    19:82:98:42:e3:f2:48:aa:15:13:62:b1:4a:cd:52:
                    d0:eb:6e:c4:9e:3e:5f:08:8e:19:b2:30:66:99:8f:
                    3b:9d:b4:73:f5:2c:b2:3e:da:fe:6d:d3:c4:53:bc:
                    00:a9:a1:e4:fd:41:a2:a3:00:86:3f:8e:a4:41:e0:
                    38:7f:c2:3b:e9:60:d0:76:09:5c:96:8f:39:de:43:
                    da:3f:c0:6f:a1:e2:32:16:c1:a4:90:68:a2:93:ed:
                    92:62:ba:2d:5b:8b:4d:32:fb:97:fa:97:21:80:4d:
                    77:d0:69:0d:61:92:f6:f6:42:a3:98:a2:6c:8f:57:
                    07:0e:08:26:d3:4a:44:1b:d0:45:55:3a:23:40:af:
                    02:27:d7:0e:ac:f1:88:e7:06:89:7d:e4:0a:44:15:
                    28:7e:8f:76:c6:c5:d6:2f:27:be:2d:f0:e1:49:93:
                    e7:9a:84:ec:c4:e3:26:66:ef:e3:78:4d:a9:fb:26:
                    dd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C8:1F:53:A9:E7:B4:B9:E1:0A:A2:C6:35:3D:F1:62:D1:C4:53:10
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136302e302f32312d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:df:69:7b:a0:62:2a:5c:b6:96:3b:37:8f:6e:d6:67:9e:e2:
         85:c9:d5:f4:de:63:41:3c:70:cb:ec:52:c9:05:05:0b:b0:5c:
         2c:33:87:ad:ca:f7:99:23:c2:a9:59:45:51:c7:37:6b:b7:ce:
         45:dc:f6:e2:2f:5f:be:8e:55:8e:2b:d6:ee:42:9d:60:2a:e5:
         96:ce:5a:94:8e:80:1f:9a:3a:2f:46:22:54:a2:ee:0b:f4:06:
         22:4b:91:86:b2:e9:5c:b3:eb:d9:12:30:f2:0a:81:f1:6b:f3:
         f6:11:dd:82:43:32:37:4f:35:4c:73:4e:6c:f9:a9:89:fe:6d:
         88:ec:e5:8a:5a:e2:22:0c:a3:5b:02:88:a1:14:c5:c9:28:ac:
         8b:b5:eb:90:56:9c:1d:2c:6a:1e:12:78:d6:ee:1f:b4:3b:62:
         a1:53:9e:52:f1:27:6f:87:05:64:a0:06:36:84:c8:12:da:f8:
         88:a8:03:d0:6d:3d:39:6b:f1:03:2c:0e:7d:e8:0f:0f:8b:24:
         68:37:e1:53:3f:b9:6e:62:c0:69:93:5d:8f:17:fe:8e:06:12:
         a0:a3:e2:e3:47:91:74:3d:a9:1b:0b:e9:ff:55:b9:3a:e8:0c:
         64:a7:94:5b:6b:b9:9a:4f:ba:a4:24:de:44:f6:d7:b0:81:b7:
         9a:7b:59:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org