Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32342d3234203d3e20323637343236.roa
File:                     3138312e3139312e3136302e302f32342d3234203d3e20323637343236.roa (raw, json)
Hash identifier:          ePbbdAUrF3f6zyfUuPXgBwgBxfFGIQcncAAKo1sZmoY=
Subject key identifier:   C0:50:4F:B1:EA:11:4E:6F:00:CF:70:FF:A8:9E:38:32:DF:F7:9B:A0
Certificate issuer:       /CN=959F004623105A3C7B4F85C41B8104B26D38122E
Certificate serial:       3CBB5F528B506ABAA5C0432DAFA7491417817088
Authority key identifier: 95:9F:00:46:23:10:5A:3C:7B:4F:85:C4:1B:81:04:B2:6D:38:12:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/959F004623105A3C7B4F85C41B8104B26D38122E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32342d3234203d3e20323637343236.roa
Signing time:             Wed 29 Nov 2023 22:18:37 +0000
ROA not before:           Wed 29 Nov 2023 22:13:37 +0000
ROA not after:            Wed 27 Nov 2024 22:18:37 +0000
asID:                     267426
IP address blocks:        181.191.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:bb:5f:52:8b:50:6a:ba:a5:c0:43:2d:af:a7:49:14:17:81:70:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=959F004623105A3C7B4F85C41B8104B26D38122E
        Validity
            Not Before: Nov 29 22:13:37 2023 GMT
            Not After : Nov 27 22:18:37 2024 GMT
        Subject: CN=C0504FB1EA114E6F00CF70FFA89E3832DFF79BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:26:9c:c4:5c:db:d9:16:7b:3b:32:66:09:a6:
                    8a:67:71:98:83:13:1b:2e:dc:11:a0:7d:52:28:52:
                    81:0a:75:ec:39:e2:00:4e:f2:5e:1a:d5:3b:9b:7a:
                    c4:81:65:bf:41:30:eb:10:00:3a:bd:93:2a:5a:67:
                    ad:91:d0:53:98:ec:13:0b:50:bf:8f:b7:66:c7:d8:
                    df:bb:f0:01:e8:da:df:ba:0a:23:fd:d7:71:50:cb:
                    ef:48:a5:cc:45:53:17:69:61:79:c3:34:49:23:bd:
                    23:bc:39:cf:df:df:7b:09:c8:2b:70:58:97:fb:ba:
                    57:ff:96:96:ce:0f:7f:bb:12:ce:e4:f8:b4:3d:2e:
                    0d:ab:c3:84:58:fc:9e:79:39:37:d6:e7:80:6d:49:
                    2c:71:e1:29:5d:f6:d2:8c:2b:e2:50:5a:86:9c:9e:
                    90:32:f6:83:e4:00:43:1b:27:0c:0c:8a:40:22:9a:
                    aa:b2:01:c4:50:a9:3a:5a:d1:df:c3:16:e5:e6:cf:
                    67:36:34:5a:1e:92:e3:59:ec:6a:86:ab:a6:f4:bf:
                    b4:81:e1:25:98:44:32:56:4d:f6:ce:d0:70:35:1a:
                    07:92:9d:ff:19:93:0a:90:32:58:51:0b:dc:6e:59:
                    82:00:27:ae:0f:04:07:0c:c4:9e:5b:88:84:2e:5a:
                    7a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:50:4F:B1:EA:11:4E:6F:00:CF:70:FF:A8:9E:38:32:DF:F7:9B:A0
            X509v3 Authority Key Identifier:
                keyid:95:9F:00:46:23:10:5A:3C:7B:4F:85:C4:1B:81:04:B2:6D:38:12:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/959F004623105A3C7B4F85C41B8104B26D38122E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/959F004623105A3C7B4F85C41B8104B26D38122E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32342d3234203d3e20323637343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:be:a2:99:61:14:de:56:e0:cf:f5:71:1e:0e:e7:20:be:e0:
         11:66:d2:ac:97:64:2a:66:4f:51:95:75:11:f9:75:49:d7:cc:
         61:f0:28:5f:f2:dc:88:a0:7a:02:13:86:b8:f4:a3:f0:cf:2c:
         01:8c:00:ac:7e:24:9d:c3:a1:49:3c:05:63:96:b0:79:b9:30:
         6e:af:2e:58:db:86:35:7d:7f:2c:b3:0b:e1:d7:b6:cf:bf:9b:
         56:94:bc:a4:87:ed:f9:4b:77:a6:57:bc:dd:6e:20:73:a2:1f:
         3a:33:6a:76:50:1b:c4:2f:86:87:40:ba:79:06:b6:8a:d9:40:
         25:b9:3d:ab:32:a7:40:98:d3:9a:bb:ac:da:89:ae:17:ae:8c:
         45:8c:44:a7:82:08:b7:de:14:94:42:18:25:41:b1:66:3f:dd:
         3e:ae:80:5d:81:fd:e9:5f:32:98:fe:99:1d:a9:03:d7:79:9b:
         ce:ef:90:e5:69:67:5f:52:be:5c:20:a2:d9:02:83:15:12:39:
         d8:8e:2b:9e:9d:3f:58:83:11:21:4a:40:4e:77:aa:bf:e2:df:
         b6:41:e5:a5:ca:a9:45:ed:a2:22:16:9d:dd:06:66:05:ea:f9:
         b6:51:28:42:27:68:a1:df:6f:e7:51:9c:ed:e2:dd:ea:2e:a6:
         51:c1:e5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org