Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136312e302f32342d3234203d3e20323637343236.roa
File:                     3138312e3139312e3136312e302f32342d3234203d3e20323637343236.roa (raw, json)
Hash identifier:          oAYZsVaatC5MobvaFQ8CDxicslIq3I6ykGFsyWptQLA=
Subject key identifier:   E1:6A:65:4D:E3:B5:68:DD:A0:D2:B6:58:82:0D:93:0D:94:FA:94:3A
Certificate issuer:       /CN=959F004623105A3C7B4F85C41B8104B26D38122E
Certificate serial:       18FAA666784A90E5A9ED9AFE2171F31F6B3CEF97
Authority key identifier: 95:9F:00:46:23:10:5A:3C:7B:4F:85:C4:1B:81:04:B2:6D:38:12:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/959F004623105A3C7B4F85C41B8104B26D38122E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136312e302f32342d3234203d3e20323637343236.roa
Signing time:             Wed 29 Nov 2023 22:18:37 +0000
ROA not before:           Wed 29 Nov 2023 22:13:37 +0000
ROA not after:            Wed 27 Nov 2024 22:18:37 +0000
asID:                     267426
IP address blocks:        181.191.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fa:a6:66:78:4a:90:e5:a9:ed:9a:fe:21:71:f3:1f:6b:3c:ef:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=959F004623105A3C7B4F85C41B8104B26D38122E
        Validity
            Not Before: Nov 29 22:13:37 2023 GMT
            Not After : Nov 27 22:18:37 2024 GMT
        Subject: CN=E16A654DE3B568DDA0D2B658820D930D94FA943A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:17:b8:e9:7e:69:43:32:2f:eb:74:36:b8:3a:
                    32:51:27:0b:b6:7b:ca:1a:08:68:db:2e:37:75:ab:
                    18:fb:ac:04:e3:81:dd:43:a4:ed:ab:2d:cc:d5:d1:
                    dd:63:0c:d0:fa:87:5a:c5:d5:f9:90:63:aa:28:5b:
                    69:c9:4f:2d:e3:0b:08:6b:73:27:37:21:e9:df:32:
                    fe:06:f9:99:d9:85:c2:ad:5d:86:31:6f:f3:c2:ee:
                    60:8e:a1:ab:30:4e:4f:2a:bc:f3:db:2e:8c:b7:df:
                    32:9d:37:95:60:05:ef:87:f8:e0:b4:b6:ca:80:bb:
                    b0:c7:c9:b9:33:9c:15:0c:e3:42:da:e3:31:bd:15:
                    e1:8a:e4:a3:d6:6d:22:e8:93:d3:ba:22:31:14:fe:
                    2e:26:be:29:67:d4:1b:2a:8e:92:60:31:fc:99:c4:
                    85:4c:40:18:e0:bd:c8:89:39:e7:fe:b0:88:f3:fd:
                    d8:8f:e4:63:c6:d8:1c:e7:2c:30:07:55:24:61:8f:
                    21:75:38:a2:88:39:51:8a:bd:b5:38:0f:00:00:82:
                    d6:3c:dd:f0:2b:14:21:8b:e1:69:6c:21:12:43:ee:
                    8b:b1:eb:03:ea:0a:94:f8:e0:35:a3:d0:ae:40:f9:
                    63:6f:70:12:70:dd:ac:56:ed:5f:52:9d:fa:85:60:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6A:65:4D:E3:B5:68:DD:A0:D2:B6:58:82:0D:93:0D:94:FA:94:3A
            X509v3 Authority Key Identifier:
                keyid:95:9F:00:46:23:10:5A:3C:7B:4F:85:C4:1B:81:04:B2:6D:38:12:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/959F004623105A3C7B4F85C41B8104B26D38122E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/959F004623105A3C7B4F85C41B8104B26D38122E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136312e302f32342d3234203d3e20323637343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:e9:57:38:49:15:e8:bf:ad:bd:5d:af:cd:a3:fd:c0:c7:23:
         f2:0d:8c:0c:61:79:ad:e0:f5:bc:e8:30:de:65:f0:c1:6b:d2:
         6e:8b:4c:2b:34:23:d1:93:80:7b:90:ae:2c:5a:2b:63:ef:e2:
         a7:d3:b0:e4:a9:4f:e3:0e:d6:40:b7:bb:5e:ce:2e:87:a3:33:
         c3:15:b4:5e:5c:a2:55:e1:35:f4:08:51:ce:c1:28:9a:1a:94:
         a9:91:0e:09:86:63:17:f8:21:66:87:05:bc:2c:b0:68:9c:27:
         94:b5:4a:08:9c:91:cb:d8:9a:f7:a4:52:f6:e2:3c:7f:2f:7e:
         37:00:43:cd:f1:9b:d6:e7:0e:20:10:31:f6:22:cb:5b:7f:72:
         0c:6f:d7:27:83:cb:ae:bd:cb:d9:1a:47:2a:4e:cb:54:ed:59:
         e9:37:a8:d7:a9:45:6f:ba:6e:c3:3c:3d:e7:49:f1:01:9e:93:
         83:82:7e:3b:f8:2b:81:54:07:b2:88:da:ce:f9:aa:a6:21:ef:
         2a:12:e1:cb:f7:1f:7f:21:63:bc:31:97:48:d2:9b:09:f4:d1:
         c5:7b:f7:c2:9c:e5:a6:6e:45:31:dd:ad:cd:d8:d3:9c:13:d1:
         b8:f3:3a:0e:6d:07:72:3e:12:8a:1d:da:98:44:4a:11:dc:8c:
         79:d0:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org