Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136342e302f32322d3234203d3e203238313235.roa
File:                     3139312e33362e3136342e302f32322d3234203d3e203238313235.roa (raw, json)
Hash identifier:          Ld2rXvrh0fIwoZWKVfbDhAapC0d2kxX9/3qQ3K6DxKY=
Subject key identifier:   67:85:A5:4D:DA:84:73:98:DF:6A:32:C1:BF:66:EE:CC:C5:06:D0:B3
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       77EBAAFEF8FF0D5D055ABF6C15B2C8E198290C84
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136342e302f32322d3234203d3e203238313235.roa
Signing time:             Tue 26 Mar 2024 13:15:35 +0000
ROA not before:           Tue 26 Mar 2024 13:10:35 +0000
ROA not after:            Tue 25 Mar 2025 13:15:35 +0000
asID:                     28125
IP address blocks:        191.36.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:eb:aa:fe:f8:ff:0d:5d:05:5a:bf:6c:15:b2:c8:e1:98:29:0c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar 26 13:10:35 2024 GMT
            Not After : Mar 25 13:15:35 2025 GMT
        Subject: CN=6785A54DDA847398DF6A32C1BF66EECCC506D0B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9b:f0:1a:15:36:41:d6:92:70:3a:30:c3:68:
                    14:65:17:11:f7:07:1a:24:e1:f0:d9:e1:8f:e3:d3:
                    94:ad:c0:ac:2d:59:e7:1a:fb:be:3a:29:93:8f:c6:
                    e3:20:0e:e1:1c:83:12:2f:a3:fd:ae:e8:8e:ac:02:
                    ba:a3:d0:58:87:94:4c:a2:86:93:b7:49:86:b0:fe:
                    55:e2:49:b1:29:fc:2a:76:77:d6:d4:02:b9:28:1d:
                    65:37:56:65:e3:ca:e4:f7:77:07:1c:54:35:b9:94:
                    a2:8f:ef:80:c8:28:a9:1e:be:09:62:a6:24:48:7a:
                    61:b0:15:63:cf:0e:ef:14:ab:16:a0:82:e5:8c:ed:
                    1a:0c:71:41:31:7d:51:4b:e4:73:a1:8e:c8:8a:5a:
                    1b:17:28:e6:fd:49:45:06:d3:8b:07:c2:37:a2:49:
                    0c:9d:55:37:b4:65:e0:14:18:74:d1:02:f4:c4:7d:
                    9a:b6:40:74:90:ef:de:7f:bd:b4:05:9a:0b:04:10:
                    2d:78:8e:7e:85:df:71:97:fd:9f:65:95:4a:27:b8:
                    73:d6:3c:58:52:c7:ae:a0:da:6b:8b:59:b4:7c:69:
                    05:21:d5:88:3f:76:85:98:84:b6:d9:6f:ec:b2:12:
                    e0:87:18:30:77:e9:b5:dc:dc:04:42:21:a3:fd:01:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:85:A5:4D:DA:84:73:98:DF:6A:32:C1:BF:66:EE:CC:C5:06:D0:B3
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136342e302f32322d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:d5:19:0f:33:3f:fd:8f:7d:8b:36:67:24:54:16:21:24:8f:
         41:64:a7:1b:f7:7a:d0:66:a8:07:04:1f:3b:17:0f:b0:62:d0:
         9b:be:a5:1d:78:0b:8b:9a:a5:90:f9:0a:58:a7:76:eb:5e:57:
         ee:0e:39:0e:19:33:0d:5a:cb:13:f8:35:4e:fc:2d:35:7b:1d:
         92:27:e3:7e:11:fc:fa:6f:fa:a8:30:a0:7c:65:d4:72:f1:0b:
         8f:27:65:07:07:e6:3b:4b:5e:77:7a:a9:9d:d3:94:3c:87:6a:
         6b:88:70:17:1d:99:ab:f4:c9:a9:d5:a5:8e:1e:aa:a7:41:93:
         13:31:e2:91:21:d2:61:cd:3d:b9:4c:73:3b:99:40:8e:0d:15:
         d6:3d:53:13:d7:85:c8:c3:80:b7:4a:ec:ba:29:6e:f5:62:37:
         7b:90:db:b3:18:28:bf:67:89:0c:c4:74:77:4f:04:69:41:9d:
         cb:2d:05:32:f8:7b:e2:c9:d9:aa:0d:85:75:ec:91:b6:13:fb:
         de:48:79:eb:1b:d3:26:c3:cb:5f:c6:5b:9b:f2:d7:1a:2c:ca:
         0f:47:73:f6:60:c1:74:8b:38:20:45:9d:32:fc:66:a6:86:84:
         f5:4b:dc:c8:89:bf:59:60:84:47:68:b4:63:ed:b1:fd:d1:2f:
         2f:bf:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org