Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136312e302f32342d3234203d3e203238313235.roa
File:                     3139312e33362e3136312e302f32342d3234203d3e203238313235.roa (raw, json)
Hash identifier:          CsNy/FUw81NMhrZMxVL/xe+D7xueh7udMrSSqNyRXcE=
Subject key identifier:   3C:2A:1D:BA:2F:7D:EB:E7:CC:0E:0F:74:3C:5D:E9:0E:A4:30:BD:64
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       78DD873BC4ACDDD9F20D9A0104324FAED5559B45
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136312e302f32342d3234203d3e203238313235.roa
Signing time:             Thu 02 Mar 2023 22:39:16 +0000
ROA not before:           Thu 02 Mar 2023 22:34:16 +0000
ROA not after:            Thu 29 Feb 2024 22:39:16 +0000
asID:                     28125
IP address blocks:        191.36.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:dd:87:3b:c4:ac:dd:d9:f2:0d:9a:01:04:32:4f:ae:d5:55:9b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar  2 22:34:16 2023 GMT
            Not After : Feb 29 22:39:16 2024 GMT
        Subject: CN=3C2A1DBA2F7DEBE7CC0E0F743C5DE90EA430BD64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:64:91:33:29:6b:f1:7e:f1:67:be:42:2e:bf:
                    b8:73:6a:02:d6:4e:c3:23:42:bd:c6:d1:c4:fa:0b:
                    01:4a:97:1e:e6:aa:78:89:23:44:10:12:cd:53:cd:
                    bd:4e:9e:b1:7c:02:0d:ba:a8:1e:18:9b:20:49:39:
                    4a:5d:c6:0b:1a:9d:e7:73:27:9b:98:07:27:36:a3:
                    82:e9:26:44:6c:8a:78:32:09:56:24:ff:37:4c:63:
                    e2:cc:42:4f:2f:a6:8f:d5:fd:2c:1d:93:3c:98:cb:
                    ab:fe:30:cd:69:b7:d0:43:b4:7f:d4:f8:a0:45:6d:
                    c7:c2:e4:2b:cd:5c:72:5f:c8:65:b2:6b:cb:37:0c:
                    11:bd:06:f2:ab:94:d4:cd:c9:56:51:9b:93:73:fa:
                    9e:5e:88:4f:6f:02:7c:99:62:7e:5a:cc:f1:2e:36:
                    24:9f:0a:fb:d9:c8:f7:a3:d8:d8:70:a3:f6:6b:7c:
                    74:c7:35:a7:aa:5c:1e:8b:92:da:a8:6d:a4:36:54:
                    0c:62:6f:a4:44:2a:8e:ca:94:c0:3a:f6:97:a4:d4:
                    ba:3e:57:dc:51:a7:ca:67:ae:ba:a8:69:d2:83:c4:
                    4d:b5:a2:ce:da:42:c9:57:9d:c1:c7:51:02:24:15:
                    c2:18:26:49:4e:1f:d5:c8:29:72:43:7c:04:fc:bd:
                    3b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2A:1D:BA:2F:7D:EB:E7:CC:0E:0F:74:3C:5D:E9:0E:A4:30:BD:64
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136312e302f32342d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:5b:5b:4c:73:45:0b:c0:b0:1b:be:10:ef:e1:9f:4f:53:70:
         8d:8d:ed:3c:34:63:fe:93:7e:86:6a:58:a0:78:98:fa:76:2e:
         54:75:4e:61:75:a2:bd:fe:1e:a5:e1:b9:b3:01:fe:be:c2:8a:
         2c:14:d7:e7:5b:a4:dd:d7:9f:cd:10:2b:54:33:08:6b:fa:7a:
         46:76:9b:4d:ce:dd:64:30:79:c4:10:09:99:8b:5e:5b:23:16:
         62:3f:74:52:c4:67:79:43:a6:b2:a8:0b:53:9d:80:ef:36:d2:
         30:57:33:5e:2c:9e:9b:53:d2:45:e3:88:c3:0a:73:f4:5e:8a:
         01:79:38:3a:4e:be:9d:ea:90:ff:65:25:08:72:ed:90:e7:e5:
         d5:f9:a9:58:8e:15:a2:87:8d:c5:78:66:f4:cc:79:73:24:3d:
         83:aa:51:7d:a3:67:07:a7:57:14:b8:1b:f9:ca:45:6c:77:13:
         91:a3:8c:b3:cc:0e:c8:33:a0:e8:2c:1a:a1:00:30:5f:4b:82:
         6f:8a:48:7e:4c:52:0d:89:0a:e0:8b:ff:8f:58:f6:1b:77:6f:
         4b:47:74:72:a9:6e:d5:88:fd:cd:00:06:51:44:c5:58:c8:9c:
         f2:ec:06:06:e7:3e:90:a6:7a:18:6d:3b:06:da:2d:a7:33:91:
         9b:08:21:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org