Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136302e302f32322d3234203d3e203238313235.roa
File:                     3139312e33362e3136302e302f32322d3234203d3e203238313235.roa (raw, json)
Hash identifier:          vaSmUlTiLn8zFkkuirLNrHWXNIZ01NCivN+nHzUeZlA=
Subject key identifier:   DE:51:83:43:61:C4:A7:9B:A2:1D:56:71:94:20:30:E0:60:5D:6D:17
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       6AE51BC1B25560D93EDCCDBDD7B20BB1DE71D587
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136302e302f32322d3234203d3e203238313235.roa
Signing time:             Tue 26 Mar 2024 13:15:35 +0000
ROA not before:           Tue 26 Mar 2024 13:10:35 +0000
ROA not after:            Tue 25 Mar 2025 13:15:35 +0000
asID:                     28125
IP address blocks:        191.36.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e5:1b:c1:b2:55:60:d9:3e:dc:cd:bd:d7:b2:0b:b1:de:71:d5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar 26 13:10:35 2024 GMT
            Not After : Mar 25 13:15:35 2025 GMT
        Subject: CN=DE51834361C4A79BA21D5671942030E0605D6D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:14:03:c6:eb:8a:be:7d:7f:fd:06:f8:a8:7e:
                    a6:33:93:b7:70:ef:88:9f:43:9b:fe:aa:86:22:d9:
                    99:39:01:9c:ce:8b:35:9c:81:e4:c2:ee:63:76:c7:
                    a2:f1:8e:44:26:0d:d5:81:d1:f6:90:e0:ef:e3:e2:
                    de:eb:42:d1:fe:1c:fe:00:44:e7:ab:bb:41:2f:58:
                    06:b6:c1:58:b9:71:d2:50:eb:a1:aa:cb:6f:6f:f1:
                    81:ee:5a:d0:84:f7:9a:66:2e:21:16:74:9b:0c:b3:
                    d0:c7:d6:f6:d6:6a:fe:c1:17:e6:07:c4:63:65:02:
                    38:98:0e:e9:a6:a3:a0:0b:47:f1:18:d1:a5:99:97:
                    a4:99:59:82:4d:62:83:99:68:98:47:c6:f5:f3:a3:
                    ae:5a:9e:52:78:bc:36:ff:b2:95:e1:97:03:c4:33:
                    1a:58:d6:fd:0f:ec:92:40:e1:b0:6f:89:49:11:1d:
                    3e:9f:3e:ea:ff:77:fa:97:e7:10:88:1d:a2:22:5d:
                    80:fe:20:e0:ba:5d:4f:f4:b7:7c:33:24:c2:9d:2d:
                    8e:30:77:74:45:0d:38:25:6a:f0:10:dd:7f:f2:7c:
                    f6:29:39:ea:59:a0:1a:6b:de:41:ec:83:7e:70:41:
                    37:5b:14:b5:1f:34:a8:76:28:07:93:52:fa:36:32:
                    42:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:51:83:43:61:C4:A7:9B:A2:1D:56:71:94:20:30:E0:60:5D:6D:17
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136302e302f32322d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:dd:66:ab:f9:4f:13:46:7c:cd:2c:9d:5d:86:4f:4d:24:13:
         9c:48:a0:a4:d9:19:21:fe:d1:72:fd:c2:e8:36:41:75:16:02:
         a8:67:c4:7a:22:57:d3:30:46:cb:8e:c8:9c:8d:d0:a1:fd:da:
         2c:db:05:ec:f7:5d:18:49:9c:27:36:ab:44:af:ff:56:39:a5:
         ea:bc:d6:26:74:79:fb:a0:99:0c:cc:66:55:7e:ee:b4:c2:55:
         42:6f:ee:c1:90:03:09:0e:60:23:5a:f3:99:4f:2f:ab:ab:62:
         bb:5a:81:a6:84:ed:6a:ac:bf:34:8a:17:31:cf:b7:72:e0:85:
         f5:66:7f:d9:38:37:a1:61:d7:21:8c:fc:c8:ec:56:fd:ad:b9:
         68:43:cc:9f:15:46:af:d2:8e:16:63:fc:d8:27:08:b8:55:89:
         61:2b:d1:e6:59:21:13:e2:ae:4b:3c:57:cb:0b:cf:44:f2:ef:
         bf:a7:eb:aa:7f:12:a7:45:7a:59:cf:f4:7f:4f:22:a9:0c:66:
         df:65:a4:79:d9:c7:56:ba:bc:7a:f4:11:fa:de:2b:9c:a9:08:
         b7:76:ed:81:a6:a5:39:37:7e:e3:9a:1f:f1:7c:b3:b3:c1:3f:
         f5:aa:d0:6c:d3:7a:21:b2:e4:4b:69:2c:45:c2:5b:4a:94:78:
         30:40:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org