Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/1/3138312e3139312e3136322e302f32342d3234203d3e20323637343236.roa
File:                     3138312e3139312e3136322e302f32342d3234203d3e20323637343236.roa (raw, json)
Hash identifier:          OSPBDMBecyHCckjxI+SkQx9Fc0KMxvr3wmm7Wc+xEyY=
Subject key identifier:   19:B6:7B:BF:F3:3C:8E:4E:95:C2:0B:C6:33:92:95:21:EC:9F:E1:60
Certificate issuer:       /CN=99860D8BD99F614FD480F6A6BA21C433A2269699
Certificate serial:       06E38076EF9560F9377C7F4C4F1A9FFC15E450C0
Authority key identifier: 99:86:0D:8B:D9:9F:61:4F:D4:80:F6:A6:BA:21:C4:33:A2:26:96:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99860D8BD99F614FD480F6A6BA21C433A2269699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/1/3138312e3139312e3136322e302f32342d3234203d3e20323637343236.roa
Signing time:             Thu 02 Jan 2025 21:05:06 +0000
ROA not before:           Thu 02 Jan 2025 21:00:06 +0000
ROA not after:            Thu 01 Jan 2026 21:05:06 +0000
asID:                     267426
IP address blocks:        181.191.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e3:80:76:ef:95:60:f9:37:7c:7f:4c:4f:1a:9f:fc:15:e4:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99860D8BD99F614FD480F6A6BA21C433A2269699
        Validity
            Not Before: Jan  2 21:00:06 2025 GMT
            Not After : Jan  1 21:05:06 2026 GMT
        Subject: CN=19B67BBFF33C8E4E95C20BC633929521EC9FE160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5c:06:98:92:6a:af:77:93:af:59:74:2e:7d:
                    d4:d1:bf:ef:44:7f:5b:0e:25:e4:13:48:74:54:55:
                    16:b3:17:c3:71:80:84:18:b0:87:1e:25:6a:79:ef:
                    16:cf:0d:77:a2:cc:4d:74:85:50:68:a2:76:f6:f6:
                    4a:e1:64:74:f9:b8:20:c6:cf:19:f7:31:3f:06:ca:
                    1e:a8:62:80:db:b8:cc:b7:40:cc:97:ce:b8:2a:45:
                    04:f8:ae:79:2a:30:64:3e:f4:33:c5:aa:ec:66:8e:
                    61:f0:6d:82:26:02:d8:94:ab:86:00:4a:f4:7f:b3:
                    10:8b:d4:da:b0:a6:bb:0b:d5:30:54:36:c7:b0:63:
                    e3:19:90:a8:c0:56:7d:46:94:00:1b:89:3a:03:27:
                    b3:d9:6c:e7:fe:a2:9c:bd:f5:1c:bb:a4:f7:dd:a1:
                    98:eb:7c:60:8b:ee:96:ee:13:34:02:f5:15:b7:ee:
                    72:d1:94:35:a2:1f:91:6b:45:cd:80:4c:47:06:de:
                    f7:e9:01:80:ed:1a:82:b6:91:63:1c:9f:86:f9:3d:
                    7a:73:c7:0a:13:4a:e2:0c:5f:b9:c8:7f:1d:74:01:
                    5b:5b:b3:4c:51:0d:58:c6:e5:7b:b5:fa:b8:87:32:
                    dd:40:de:48:6d:f5:08:ec:72:f2:16:80:8e:b3:60:
                    85:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B6:7B:BF:F3:3C:8E:4E:95:C2:0B:C6:33:92:95:21:EC:9F:E1:60
            X509v3 Authority Key Identifier:
                keyid:99:86:0D:8B:D9:9F:61:4F:D4:80:F6:A6:BA:21:C4:33:A2:26:96:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/1/99860D8BD99F614FD480F6A6BA21C433A2269699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99860D8BD99F614FD480F6A6BA21C433A2269699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/1/3138312e3139312e3136322e302f32342d3234203d3e20323637343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:a9:92:0a:c5:e0:20:e4:94:5e:fc:2c:e5:c4:81:06:55:ff:
         69:e5:4a:7f:e7:36:04:21:64:f5:9f:e2:de:1b:1e:93:47:ea:
         bf:93:d6:0b:6d:49:7a:8d:5c:7f:3f:ed:49:55:01:ec:2e:85:
         94:ea:b6:f6:37:11:62:1e:ed:bd:14:be:d6:d6:b6:95:13:e7:
         65:78:a5:5a:5f:db:9f:8b:14:5d:ae:f4:9e:39:0a:30:9f:bb:
         28:32:49:0f:6c:44:60:12:c7:40:8c:fd:87:32:80:75:2a:55:
         16:cb:ce:a5:be:3e:72:ce:64:95:7b:b2:7b:04:c9:c2:5e:9f:
         77:7e:17:3f:7d:9a:90:87:a3:05:a7:27:b5:4f:d6:bb:fa:93:
         02:1a:4b:ce:6e:7b:ef:07:c3:32:6b:3c:c3:08:0b:c5:3b:6c:
         91:e5:5e:9d:91:2c:ff:a8:2f:97:cc:c8:46:d8:06:06:45:25:
         26:c0:94:de:d5:5a:aa:1c:85:82:8f:77:15:44:5a:33:e1:d9:
         1d:cb:74:62:db:cc:9d:ce:56:d2:29:cc:06:5f:29:51:6d:10:
         df:96:cd:ec:eb:a7:40:4c:b0:d1:fb:7e:68:06:42:9c:ea:32:
         a3:3a:d5:f1:55:cb:b9:b7:19:30:b7:1f:1a:b8:38:57:51:82:
         74:f4:59:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:05:57 2025 by rpki-client