Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136342e302f32322d3232203d3e203238313235.roa
File:                     3139312e33362e3136342e302f32322d3232203d3e203238313235.roa (raw, json)
Hash identifier:          A8s3TUiq9JBfOaQfXbxFNPTPB1UVQ1yX4LAGBPrWSoo=
Subject key identifier:   BF:6E:6D:A2:D4:F6:7E:72:4E:30:BF:5C:F5:A9:05:1B:A2:44:93:17
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       65707B4E0CFBAFB2A155AA1600CB962B8318DBB5
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136342e302f32322d3232203d3e203238313235.roa
Signing time:             Thu 20 Apr 2023 17:50:44 +0000
ROA not before:           Thu 20 Apr 2023 17:45:44 +0000
ROA not after:            Thu 18 Apr 2024 17:50:44 +0000
asID:                     28125
IP address blocks:        191.36.164.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:70:7b:4e:0c:fb:af:b2:a1:55:aa:16:00:cb:96:2b:83:18:db:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Apr 20 17:45:44 2023 GMT
            Not After : Apr 18 17:50:44 2024 GMT
        Subject: CN=BF6E6DA2D4F67E724E30BF5CF5A9051BA2449317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:19:cd:62:fd:20:57:4c:27:a5:64:87:42:
                    d0:15:16:f4:da:af:20:8b:6d:62:91:b1:de:3b:2c:
                    8b:96:4a:b7:34:3c:54:f2:9d:2c:52:99:f1:2f:b2:
                    64:98:24:6b:0a:1f:76:71:c9:33:15:be:2a:3e:32:
                    b3:42:11:65:5f:ca:c9:f1:8f:82:ff:93:10:15:29:
                    e4:74:32:c6:75:af:f1:e1:1f:6d:ad:5b:58:b3:d2:
                    6a:09:6b:ef:74:1d:5e:34:a9:f9:27:cd:ca:3b:e5:
                    a2:a2:60:ab:74:df:62:f2:60:7c:91:50:e6:8c:a0:
                    c8:8e:2b:5b:8e:a2:10:f6:e9:64:4b:40:be:ea:d8:
                    90:ed:96:d2:fe:03:ee:9f:c7:f9:96:ee:d2:f2:2f:
                    de:c2:12:0f:e7:24:de:96:9b:12:cf:5f:d4:c4:d2:
                    be:94:78:96:e3:ca:39:43:e3:5a:9e:30:74:ce:e2:
                    6d:f9:20:42:ad:0d:d5:9a:90:2d:9e:e2:9c:b4:05:
                    9b:5a:fa:d7:29:3e:9a:f6:e6:6f:4d:d8:28:64:94:
                    cb:40:49:df:1e:76:58:a8:c0:41:2e:ac:36:b1:85:
                    72:87:a1:a7:f0:c5:22:07:0c:01:34:fa:96:8a:48:
                    c1:56:61:ba:81:9f:63:5e:5e:a5:f3:e7:50:77:f8:
                    a6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6E:6D:A2:D4:F6:7E:72:4E:30:BF:5C:F5:A9:05:1B:A2:44:93:17
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136342e302f32322d3232203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:2c:d7:27:13:cf:13:3d:42:40:7d:1e:b0:e3:78:b1:b0:76:
         1a:74:b8:0a:3d:bc:36:1f:67:ec:a1:05:71:25:5b:cb:6b:11:
         07:9b:bd:75:ec:af:c8:70:2b:e5:4d:61:9e:d8:e6:0b:8d:2c:
         e5:7c:ab:fb:ac:7a:2a:66:cd:43:51:db:03:6e:c9:ae:65:70:
         e7:a3:43:f3:f4:b5:21:55:fb:5c:c8:b7:07:b1:a6:fe:76:6a:
         15:6f:a5:2c:41:85:09:69:15:24:a6:1e:22:8b:d5:c7:6c:52:
         71:a7:34:55:a6:68:9c:3b:fb:8e:b9:5e:de:13:a4:8c:c0:ba:
         95:a4:03:6e:91:d2:3a:78:14:80:57:f4:cf:0e:8d:a7:f4:cb:
         0a:86:29:c1:dc:71:41:90:be:a8:9f:5c:83:7a:24:e3:10:08:
         87:04:cd:98:61:9a:89:b8:79:58:ea:68:18:f9:43:6d:0e:76:
         3b:06:6c:06:fc:a3:ee:5b:66:ab:77:a9:62:ca:c3:ec:b8:1f:
         e6:4c:b6:d7:33:8d:60:e8:7a:9c:37:49:ca:fe:8f:de:97:2f:
         1e:1b:1e:08:70:86:02:3e:85:1e:61:0b:bd:b9:99:d6:c4:3a:
         ed:80:15:6a:a0:b8:dc:08:ff:18:ad:64:a7:a9:e7:e0:97:03:
         22:1f:1c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org