Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133332e302f32342d3234203d3e20323637343234.roa
File:                     3138312e3139312e3133332e302f32342d3234203d3e20323637343234.roa (raw, json)
Hash identifier:          CBa5X8OiWp2OwvcOL2hLhzSEHtZZM92kzi5SoUpz+7s=
Subject key identifier:   E6:00:36:75:11:A2:DA:3A:56:EF:01:E8:F5:89:9E:9D:C4:E1:F4:1E
Certificate issuer:       /CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
Certificate serial:       503EF88F906C9BC6BEC472BFB62906EB2C13E49C
Authority key identifier: A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133332e302f32342d3234203d3e20323637343234.roa
Signing time:             Mon 25 Sep 2023 21:42:01 +0000
ROA not before:           Mon 25 Sep 2023 21:37:01 +0000
ROA not after:            Mon 23 Sep 2024 21:42:01 +0000
asID:                     267424
IP address blocks:        181.191.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3e:f8:8f:90:6c:9b:c6:be:c4:72:bf:b6:29:06:eb:2c:13:e4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
        Validity
            Not Before: Sep 25 21:37:01 2023 GMT
            Not After : Sep 23 21:42:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:49:48:f8:b4:7a:f6:d8:85:df:dc:40:81:
                    07:83:c4:f0:13:70:c0:6a:bc:46:d6:45:d1:51:7d:
                    e6:90:43:8a:14:a9:53:94:6e:6f:8e:75:ab:ee:aa:
                    36:d8:51:ba:d8:2a:ac:4b:07:0e:4c:f3:3c:17:db:
                    47:9a:0e:d1:f8:04:12:4e:7c:ee:08:3a:9f:ca:c4:
                    28:a3:ec:ec:e8:ad:ff:6d:9b:53:69:d8:0d:59:cf:
                    5b:c5:9f:41:40:e7:3e:e6:4c:c1:4a:ce:b3:7c:7f:
                    28:47:57:7c:f8:9d:61:24:bd:3e:94:39:db:db:8f:
                    26:ff:97:a3:5b:f7:b8:26:f2:67:e2:6b:40:6f:cf:
                    28:c3:9c:9a:41:0f:b4:95:63:4b:7e:32:86:ad:1d:
                    2d:98:d7:03:14:78:a7:36:60:d7:61:39:4b:5b:4f:
                    c0:ac:64:7d:69:c8:57:81:40:ca:a8:ee:e4:32:33:
                    2e:bd:b5:5b:8f:07:55:68:31:68:67:37:3e:24:e0:
                    b4:ed:33:af:53:d6:84:0b:ad:09:01:d9:9c:ee:c3:
                    1c:05:b0:34:e4:38:6a:af:7f:a6:1d:4b:7a:65:21:
                    af:04:8f:6c:b4:03:33:81:78:f9:ba:9a:cf:57:74:
                    03:05:4f:21:59:db:8c:1d:29:5a:ae:8d:3d:9f:d3:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:00:36:75:11:A2:DA:3A:56:EF:01:E8:F5:89:9E:9D:C4:E1:F4:1E
            X509v3 Authority Key Identifier:
                keyid:A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133332e302f32342d3234203d3e20323637343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:b0:c7:29:76:a2:04:f8:c0:37:2a:09:05:13:1c:18:dd:81:
         76:6e:d8:35:e0:5f:1c:03:3e:38:8f:0b:23:06:b0:b3:08:70:
         8a:8f:83:f0:38:2d:75:d0:55:40:7c:41:52:a9:a2:23:27:a6:
         19:83:99:76:80:bc:b6:67:af:7b:05:9c:45:a8:2d:72:06:6a:
         4d:c0:6e:2b:c2:ea:89:bc:e1:50:04:f2:d4:39:9a:1b:ea:5a:
         20:c7:0b:60:24:f4:a2:c9:7d:7a:2d:19:16:ec:0b:92:1e:23:
         5a:6f:6c:d0:e3:f6:47:9c:0c:5c:87:86:96:13:32:be:6e:e2:
         09:4b:db:9c:7a:23:87:58:b3:8c:fc:50:94:81:2c:f9:0a:05:
         79:1a:b5:3c:03:5a:41:ae:4e:2f:a6:74:ad:54:60:af:bb:80:
         e0:70:a7:d7:b2:ac:a5:ef:31:80:10:af:cc:81:99:48:75:fc:
         61:c3:32:c0:e8:83:0a:91:6e:bb:71:2e:52:91:83:49:ce:14:
         48:4e:c1:53:6e:a4:97:14:cb:34:49:d8:60:81:40:2e:57:5e:
         7b:cd:e6:fe:b8:41:b0:55:51:33:95:a1:b1:b3:95:60:c3:37:
         a2:29:dc:f1:b4:48:cc:e8:00:ce:31:65:25:77:8b:e1:4f:42:
         8c:8b:0f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org