Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136352e302f32342d3234203d3e203238313235.roa
File:                     3139312e33362e3136352e302f32342d3234203d3e203238313235.roa (raw, json)
Hash identifier:          YLaZ6eYkD/1XeD+H/NMrP7LHW70x9CKwZlEj8Bgbqwc=
Subject key identifier:   DA:EF:B6:89:73:DD:E4:4D:4E:7C:ED:9D:4F:C0:3D:07:43:E8:08:ED
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       5901E84573C580B037D4392B7D1B9FFBEBA2E7AF
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136352e302f32342d3234203d3e203238313235.roa
Signing time:             Thu 02 Mar 2023 22:39:16 +0000
ROA not before:           Thu 02 Mar 2023 22:34:16 +0000
ROA not after:            Thu 29 Feb 2024 22:39:16 +0000
asID:                     28125
IP address blocks:        191.36.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:01:e8:45:73:c5:80:b0:37:d4:39:2b:7d:1b:9f:fb:eb:a2:e7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Mar  2 22:34:16 2023 GMT
            Not After : Feb 29 22:39:16 2024 GMT
        Subject: CN=DAEFB68973DDE44D4E7CED9D4FC03D0743E808ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f8:bc:f4:87:78:10:b7:03:9d:d6:ee:25:eb:
                    dd:01:1e:c4:0e:f1:ff:2f:63:80:42:a3:9a:1c:82:
                    1c:eb:42:ef:fe:37:69:e6:fa:c5:2b:7e:01:cf:73:
                    43:a8:d5:73:b5:70:1e:5a:d8:2d:e4:2c:e0:16:cf:
                    31:84:4e:c5:58:b5:fb:33:a5:5d:25:cf:cc:32:93:
                    92:ca:b6:0f:90:d4:66:32:4a:9c:cd:e5:c8:82:81:
                    fa:c8:21:a9:ff:31:80:20:f2:08:99:5f:07:67:3b:
                    64:7e:2a:0b:5d:ef:23:59:54:c7:7c:20:a8:2c:b5:
                    bc:ce:ad:99:ee:40:bc:b2:93:d6:89:46:2b:a3:20:
                    6f:6b:a6:ba:2b:b6:ab:9b:ef:a9:fe:8e:7e:68:30:
                    4f:87:6e:36:18:68:84:03:85:51:ed:4e:01:0f:38:
                    40:89:92:d2:7e:a2:b4:e5:87:d5:a4:cd:a1:d0:59:
                    dc:0b:a4:77:f9:83:1f:99:17:fd:80:f9:3d:13:ba:
                    b8:f4:84:7a:57:25:2b:30:e6:76:ec:01:ba:70:ea:
                    64:70:24:a2:7b:e6:df:09:02:69:16:eb:29:13:f4:
                    1b:db:c0:30:fd:33:d6:d9:22:0c:cc:a4:eb:31:f9:
                    b9:35:31:92:2a:39:a5:6b:f4:e8:cf:4c:d9:f9:1b:
                    39:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EF:B6:89:73:DD:E4:4D:4E:7C:ED:9D:4F:C0:3D:07:43:E8:08:ED
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136352e302f32342d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:df:0f:2e:28:28:94:3a:45:8b:c6:ca:a0:f6:cc:19:38:8a:
         ee:95:a8:c9:1b:87:25:2d:66:82:45:9b:bb:32:28:86:5d:e1:
         03:be:83:50:75:cf:e0:c5:d4:a5:43:13:06:f2:35:fe:7a:3d:
         a4:d5:64:b8:74:bf:5c:54:0e:7f:f7:bf:92:8b:1a:9e:0f:e9:
         0b:91:49:1b:83:fa:e4:de:64:8a:9e:1f:92:4b:02:c8:dc:67:
         cb:dc:95:cb:d1:37:c6:b9:85:44:8b:a7:20:50:a5:7f:9e:da:
         e0:5e:b4:5a:ea:7e:9f:02:61:f3:cf:9a:df:48:c4:f3:ea:c4:
         41:bd:08:71:f3:bd:2c:3d:c4:20:e2:8e:ab:76:cd:f2:f2:a9:
         43:c4:d9:f1:5a:0a:50:f9:c4:ab:0f:e8:de:6e:7e:db:02:0c:
         30:a4:46:67:ac:83:45:d8:b2:62:b7:20:bf:8d:b5:60:fe:06:
         b3:b7:47:24:b8:60:30:c8:13:99:c0:3a:ae:4e:c9:d1:92:f5:
         e9:00:6d:06:48:24:d1:d9:6a:87:5a:df:e6:4a:8d:f2:b2:57:
         1c:99:25:a1:ac:04:ed:e6:12:f9:0e:42:8f:31:61:72:61:7d:
         bf:91:d6:58:f3:22:86:04:f2:fa:67:33:1a:ce:4e:cb:a3:3e:
         8b:d0:46:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org