Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136302e302f32342d3234203d3e203238313235.roa
File:                     3139312e33362e3136302e302f32342d3234203d3e203238313235.roa (raw, json)
Hash identifier:          cG87KL1LAuy9QzsvaVcm8HT6aLk1Yydl+TAN/keRdFw=
Subject key identifier:   D7:B5:05:EA:42:7A:4C:7F:DD:B1:74:0A:10:A7:C0:27:3C:5F:93:9E
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       4807D80AB6C41DB152BEA40DEE565883B2A5EE81
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136302e302f32342d3234203d3e203238313235.roa
Signing time:             Thu 02 Mar 2023 22:39:16 +0000
ROA not before:           Thu 02 Mar 2023 22:34:16 +0000
ROA not after:            Thu 29 Feb 2024 22:39:16 +0000
asID:                     28125
IP address blocks:        191.36.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:07:d8:0a:b6:c4:1d:b1:52:be:a4:0d:ee:56:58:83:b2:a5:ee:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar  2 22:34:16 2023 GMT
            Not After : Feb 29 22:39:16 2024 GMT
        Subject: CN=D7B505EA427A4C7FDDB1740A10A7C0273C5F939E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:44:28:47:ae:56:02:fe:af:51:37:f4:cd:a2:
                    de:0b:1c:0e:d5:65:4f:1c:a5:83:df:c7:06:5a:1f:
                    fa:02:62:3a:7e:a4:34:08:57:60:9a:76:d0:60:e8:
                    68:48:9f:69:79:59:07:d0:a6:e3:e7:32:0d:a7:df:
                    a3:74:5e:0d:e4:08:c0:e8:e1:1f:d6:ea:e5:81:9d:
                    35:9e:00:97:1f:7a:27:ca:89:5c:9a:83:7d:22:0d:
                    e3:4d:44:35:5d:88:f5:72:bd:2d:d1:1c:43:4c:33:
                    d1:81:3d:d9:59:d6:d1:32:77:0e:7a:12:86:b4:95:
                    5e:63:1c:77:79:cf:4f:a5:ad:e3:6a:d8:dc:4f:af:
                    19:88:e6:30:54:86:47:6c:19:ae:a3:cd:8a:c7:62:
                    84:9d:e9:bd:ed:8b:61:20:bb:5d:23:dc:d6:b0:15:
                    d2:31:d4:f3:c4:92:11:61:90:09:b6:23:11:ad:18:
                    09:94:eb:59:3f:67:40:b8:73:5d:b2:45:8c:f7:9d:
                    a9:94:10:3e:7b:71:c3:61:36:4e:fc:55:e2:1f:9b:
                    08:09:bf:08:76:28:c2:45:9d:e1:fd:d2:0e:4c:a3:
                    a7:08:58:c7:aa:30:e3:cf:06:3e:8d:3f:74:15:70:
                    fb:56:a8:8c:e6:91:99:51:4c:33:c0:3c:67:c0:68:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B5:05:EA:42:7A:4C:7F:DD:B1:74:0A:10:A7:C0:27:3C:5F:93:9E
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136302e302f32342d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:4f:42:37:bc:fb:20:aa:bd:0d:bf:79:89:c6:01:85:57:5f:
         93:dd:f3:ef:56:19:9e:2d:28:65:49:c5:00:06:e1:53:35:9a:
         22:84:56:07:be:23:30:3b:59:b1:dc:8e:28:c7:9b:86:98:91:
         80:57:a7:6c:b4:0d:57:c5:60:8a:98:8d:a4:3f:34:76:24:c0:
         70:6b:46:9e:ee:c2:7b:ac:17:41:4f:fd:f0:3f:97:85:39:dc:
         3d:dc:1a:cd:9e:cd:21:5b:ce:a5:57:d3:10:f9:3a:b4:c8:8f:
         b9:3b:35:e7:27:3b:ac:72:37:1e:ca:a1:f6:91:3b:fa:06:d6:
         ef:74:35:15:61:39:0c:83:0a:97:1b:a5:26:cb:01:f3:60:64:
         d2:12:d8:98:b1:9c:49:62:c9:20:1e:24:ef:6f:89:ef:69:0f:
         f2:30:dc:50:31:ee:19:2f:16:9d:bd:e8:dc:f1:10:d4:a0:13:
         68:fd:4f:5c:97:ea:8f:47:eb:d2:fe:9a:c4:dc:17:7c:b4:07:
         5d:16:f3:6a:09:7a:c1:ec:93:5f:55:bc:6c:43:bf:33:ab:ed:
         43:06:4a:3b:0a:81:c5:26:0c:ea:78:7f:95:7a:65:ac:33:2d:
         60:d3:d6:4c:09:29:bf:36:d2:bf:8e:5d:97:23:75:5e:0f:c1:
         7e:33:da:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org