Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/3136382e3139342e34312e302f32342d3234203d3e203631363934.roa
File:                     3136382e3139342e34312e302f32342d3234203d3e203631363934.roa (raw, json)
Hash identifier:          gsGtQpLO7X5Pa+cEUSxaX+DcTPHQDVNGUq3FQ6TsZZA=
Subject key identifier:   D8:92:04:ED:59:5A:4A:28:B8:C2:CF:79:92:71:0D:2C:E4:3E:8A:51
Certificate issuer:       /CN=4954164C92FA51462EBE84A75D28E2891F0752CF
Certificate serial:       221311BC62AC7696497B7BCF374492192D2F21A6
Authority key identifier: 49:54:16:4C:92:FA:51:46:2E:BE:84:A7:5D:28:E2:89:1F:07:52:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4954164C92FA51462EBE84A75D28E2891F0752CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/3136382e3139342e34312e302f32342d3234203d3e203631363934.roa
Signing time:             Wed 23 Aug 2023 16:24:33 +0000
ROA not before:           Wed 23 Aug 2023 16:19:33 +0000
ROA not after:            Wed 21 Aug 2024 16:24:33 +0000
asID:                     61694
IP address blocks:        168.194.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:13:11:bc:62:ac:76:96:49:7b:7b:cf:37:44:92:19:2d:2f:21:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4954164C92FA51462EBE84A75D28E2891F0752CF
        Validity
            Not Before: Aug 23 16:19:33 2023 GMT
            Not After : Aug 21 16:24:33 2024 GMT
        Subject: CN=D89204ED595A4A28B8C2CF7992710D2CE43E8A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:03:d2:75:f8:35:bd:75:2c:3c:07:df:29:09:
                    1e:1f:15:df:4a:22:27:c3:07:8c:f4:69:f3:74:7a:
                    96:bc:06:21:cc:c5:55:db:0c:61:ee:76:91:79:e4:
                    e5:f3:46:f5:ef:aa:d8:0a:00:63:be:b3:23:87:c8:
                    50:a7:e7:50:6d:f7:9a:56:75:78:09:21:2b:8f:04:
                    74:a1:23:1f:56:92:9a:32:3a:8a:14:91:31:84:16:
                    ff:31:59:25:37:5e:86:5e:ac:36:b2:ab:ad:07:a1:
                    36:7a:dc:bc:26:a7:50:3a:f8:cc:fa:24:19:fe:f0:
                    a3:60:3c:c3:cc:d9:84:7f:a3:94:df:e7:08:af:25:
                    63:da:24:07:b7:7f:5a:24:b2:5f:06:13:75:c7:5e:
                    b0:ae:73:1c:b8:c5:11:eb:3e:f4:8f:42:43:b3:af:
                    62:da:bc:84:bd:68:0e:2d:cf:cb:e0:e2:c7:47:26:
                    01:9c:6d:03:f6:50:b6:24:ce:7f:84:02:24:7b:0d:
                    b0:16:70:da:80:17:aa:b0:97:ca:76:32:b1:bd:1a:
                    98:a8:3a:bf:96:ec:e6:a2:13:3d:52:9e:f6:f8:37:
                    fa:42:01:2f:da:43:61:26:c9:68:1f:08:18:d8:54:
                    0a:bc:42:30:f0:44:ac:81:82:a6:5e:f4:84:76:7d:
                    b3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:92:04:ED:59:5A:4A:28:B8:C2:CF:79:92:71:0D:2C:E4:3E:8A:51
            X509v3 Authority Key Identifier:
                keyid:49:54:16:4C:92:FA:51:46:2E:BE:84:A7:5D:28:E2:89:1F:07:52:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/4954164C92FA51462EBE84A75D28E2891F0752CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4954164C92FA51462EBE84A75D28E2891F0752CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/3136382e3139342e34312e302f32342d3234203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:2c:77:e9:87:fb:e2:09:2d:6a:d9:a0:fb:05:b6:60:b5:7a:
         be:2a:9b:d7:bb:e1:83:68:e2:7b:3e:39:f0:b1:6f:3f:98:af:
         d2:0c:24:56:e1:95:ae:bd:49:92:94:6e:69:ad:ce:33:d5:c1:
         c4:4e:7d:3a:bd:f6:b5:28:86:fc:30:d1:15:36:7c:ac:c2:3a:
         c3:76:2c:4f:d8:d9:8d:02:3c:18:08:07:76:6a:c1:ff:3e:56:
         29:8c:e8:58:dc:7d:d7:bc:37:36:9a:dd:c2:66:ed:2d:8d:86:
         ca:c9:df:23:c1:f4:22:dd:c5:8e:98:4b:4f:83:49:a6:f2:df:
         7c:a2:2e:76:a8:eb:b0:95:5a:53:f1:8e:c9:fb:60:6c:dd:ae:
         0a:d4:ee:c6:b3:99:a9:97:c3:36:6f:f0:85:47:98:37:4e:30:
         6a:8c:47:c6:85:89:ee:75:53:3a:69:c1:6d:4b:74:20:51:25:
         78:23:60:0f:a1:58:80:c9:b8:60:ad:58:26:87:02:aa:b1:c3:
         4c:f3:7e:4a:ac:c0:29:19:bb:5f:8e:31:bd:c4:c2:40:95:2a:
         41:da:8e:c9:9b:39:48:eb:39:2c:ef:a3:1f:70:36:df:7c:82:
         18:0c:e2:03:62:f0:70:bf:7b:ff:9b:58:a4:0d:73:59:ca:bd:
         3c:98:5a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org