Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133322e302f32342d3234203d3e20323637343234.roa
File:                     3138312e3139312e3133322e302f32342d3234203d3e20323637343234.roa (raw, json)
Hash identifier:          SPyqiHvOK4GzhOhA0qzkgHpVVSib0FNfhHzcGFIxIxE=
Subject key identifier:   E3:7B:AC:AF:B6:35:02:F5:54:AF:9A:5B:B3:E8:B4:EF:FD:C5:30:90
Certificate issuer:       /CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
Certificate serial:       59AC7579CD08D3A66C79300B5EBAD63B1FE48246
Authority key identifier: A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133322e302f32342d3234203d3e20323637343234.roa
Signing time:             Mon 25 Sep 2023 21:44:01 +0000
ROA not before:           Mon 25 Sep 2023 21:39:01 +0000
ROA not after:            Mon 23 Sep 2024 21:44:01 +0000
asID:                     267424
IP address blocks:        181.191.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ac:75:79:cd:08:d3:a6:6c:79:30:0b:5e:ba:d6:3b:1f:e4:82:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
        Validity
            Not Before: Sep 25 21:39:01 2023 GMT
            Not After : Sep 23 21:44:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:7f:68:ab:ff:df:be:b9:fe:4f:6e:56:66:
                    60:b3:68:ee:b9:9d:89:9a:55:a1:76:a0:33:4a:49:
                    a6:1e:b6:80:59:04:2b:f0:19:e6:e1:76:ec:ec:a6:
                    39:0b:d7:66:75:71:25:28:4a:b0:4f:15:3e:31:75:
                    34:c2:58:2e:e5:e3:fe:fc:93:ac:7d:46:55:3f:01:
                    11:b9:e9:21:85:b7:e9:aa:5b:ac:6c:f4:9b:d4:eb:
                    ef:09:e5:e5:d6:ce:05:46:d3:55:15:9a:3b:74:cf:
                    07:90:23:a3:f0:4d:21:13:c2:0a:23:95:08:77:9a:
                    f1:aa:f3:1b:52:ca:34:62:a0:24:25:9a:fd:6c:6b:
                    4e:a2:4d:1b:8d:00:f5:b9:3c:38:94:79:02:b1:18:
                    44:de:19:5a:22:37:9d:fd:bc:32:16:ae:82:0c:af:
                    0b:c7:95:04:5b:d2:38:cf:73:6b:fd:6a:44:8c:51:
                    f8:5b:d6:3a:e6:2d:6a:0e:c5:1d:a2:c6:88:52:da:
                    5c:02:8e:3e:15:53:0a:b0:b1:48:6c:42:d3:fd:dc:
                    13:52:f0:be:3c:ef:ac:29:1f:97:aa:c0:ca:21:0d:
                    b9:0b:0b:34:03:62:45:1c:ef:46:de:85:f9:0b:70:
                    2d:27:11:f2:07:de:64:c1:18:39:4a:52:2d:ab:b5:
                    74:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7B:AC:AF:B6:35:02:F5:54:AF:9A:5B:B3:E8:B4:EF:FD:C5:30:90
            X509v3 Authority Key Identifier:
                keyid:A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133322e302f32342d3234203d3e20323637343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:4f:53:87:47:24:c3:e1:38:b2:a1:2a:eb:41:a0:03:20:6b:
         7d:1d:78:63:8f:8c:81:20:a6:30:ea:8d:8b:95:df:71:94:20:
         49:2a:7a:41:f4:98:a4:92:fd:d1:31:15:0e:72:c0:d7:9e:1a:
         15:90:fc:e8:f3:6b:c0:8b:57:cb:b5:ef:f3:69:4f:c7:59:1d:
         19:1a:6d:08:a2:93:01:f2:74:ca:01:89:b2:01:8f:be:64:30:
         bd:9e:71:1f:21:c3:90:14:de:ec:b5:af:ba:26:84:48:77:97:
         4c:b4:bb:b8:4a:04:67:87:60:d7:bc:36:a4:b4:6b:50:f6:f5:
         7a:2c:3d:9a:8d:14:15:c8:6f:23:ad:3c:cb:e6:28:11:df:8d:
         b3:fa:6a:46:5b:79:66:f0:33:32:84:f4:07:be:a5:b1:52:74:
         53:2b:1c:e9:6e:67:58:e2:08:f2:15:2c:36:f8:8a:76:71:69:
         c3:60:4e:20:16:20:68:f3:15:ee:5f:7b:7f:d6:8f:1e:47:b7:
         b9:fd:bc:d5:8f:07:2b:0b:f1:c4:1b:81:16:38:01:db:b5:69:
         7a:de:de:77:c7:ff:e7:e3:1b:61:93:51:75:e6:df:e4:be:50:
         ec:a5:1f:73:0c:26:82:5f:df:94:19:64:dd:9f:ab:ab:c5:85:
         fd:69:25:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org