Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/3138312e3139312e34322e302f32332d3233203d3e20323636303030.roa
File:                     3138312e3139312e34322e302f32332d3233203d3e20323636303030.roa (raw, json)
Hash identifier:          HYa35m7aIvtkB0hflyc5B7lJRe4yGsMs6QaYbV1/4IY=
Subject key identifier:   6B:78:6B:A1:48:76:14:7E:B3:30:77:7B:A0:21:2D:CE:D0:E5:C4:ED
Certificate issuer:       /CN=D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D
Certificate serial:       1A61BC0038DB4FC6683076C5323BCA024B9B4558
Authority key identifier: D2:B3:DC:1F:04:CF:1B:73:2C:D3:DE:30:36:5D:DA:1E:05:B5:DF:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/3138312e3139312e34322e302f32332d3233203d3e20323636303030.roa
Signing time:             Mon 18 Dec 2023 16:15:46 +0000
ROA not before:           Mon 18 Dec 2023 16:10:46 +0000
ROA not after:            Mon 16 Dec 2024 16:15:46 +0000
asID:                     266000
IP address blocks:        181.191.42.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:61:bc:00:38:db:4f:c6:68:30:76:c5:32:3b:ca:02:4b:9b:45:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D
        Validity
            Not Before: Dec 18 16:10:46 2023 GMT
            Not After : Dec 16 16:15:46 2024 GMT
        Subject: CN=6B786BA14876147EB330777BA0212DCED0E5C4ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:26:33:31:d0:e1:51:2d:d3:17:ad:f1:7b:d1:
                    bf:ce:4e:fe:ad:5e:d5:bf:60:ef:7c:0f:c1:9a:1e:
                    be:ba:01:39:bb:61:8a:20:c0:39:8d:43:99:f5:99:
                    92:9e:be:ca:c1:ba:3c:47:e4:b1:e7:00:0f:38:f3:
                    78:5b:81:57:f1:57:3c:81:7e:3d:3b:65:99:57:8a:
                    36:99:1c:fe:8f:48:3e:ff:35:61:c9:28:79:8c:75:
                    16:b4:e6:81:0f:5c:9a:54:c2:11:c0:b6:0b:2d:21:
                    92:8b:08:fb:5c:33:49:88:6c:b6:a9:03:2b:ea:13:
                    f7:77:ea:bb:83:e6:46:b3:1b:a5:17:f3:f0:5c:6f:
                    44:61:80:17:cc:19:28:21:9d:41:a5:fb:be:7c:50:
                    0c:90:f2:55:87:62:00:b9:d1:b8:d6:36:14:f8:3c:
                    3f:51:db:16:ac:7b:19:2c:be:cd:55:e2:55:50:aa:
                    b9:d4:d4:39:fb:99:c8:b1:f2:1a:87:22:d8:5e:c8:
                    a9:fa:3c:09:92:e7:02:14:35:8c:40:c1:c0:75:76:
                    1f:12:3a:bb:d1:a8:7f:d2:70:10:27:d5:72:88:b0:
                    71:32:6f:df:af:3e:22:9c:1d:bd:dc:6c:d3:ea:b8:
                    d8:50:81:90:df:33:8f:44:f2:84:fa:3a:94:8d:4f:
                    d0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:78:6B:A1:48:76:14:7E:B3:30:77:7B:A0:21:2D:CE:D0:E5:C4:ED
            X509v3 Authority Key Identifier:
                keyid:D2:B3:DC:1F:04:CF:1B:73:2C:D3:DE:30:36:5D:DA:1E:05:B5:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/3138312e3139312e34322e302f32332d3233203d3e20323636303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:2c:75:a8:02:43:97:33:8b:70:ff:29:f1:b7:6f:06:0e:f8:
         1b:0e:70:10:ca:1d:ad:36:c1:86:3a:51:57:6d:c2:ce:d2:97:
         c1:93:94:7c:e1:87:ae:af:19:48:7f:a7:fb:4e:43:75:30:3f:
         4c:b6:91:2f:9b:c7:ce:c9:ab:9d:8e:66:e5:dc:f3:39:a3:ff:
         cc:cf:1e:29:41:46:9a:12:fb:3c:28:3a:74:7b:63:0c:24:fb:
         76:24:8b:3f:7a:fb:c6:ac:b1:0b:06:cd:4a:d1:fa:df:40:c3:
         56:34:14:ec:0e:3d:84:ef:83:ee:29:35:8b:c8:86:27:f3:a3:
         98:37:95:07:fd:33:e7:e1:0d:67:ce:c1:f5:69:2c:0c:ae:61:
         e2:54:4a:8c:51:f3:2e:15:a0:a9:5f:77:8f:ab:f0:83:11:9c:
         c1:74:63:fa:44:99:0d:1c:56:6c:0c:50:e4:16:f8:68:24:e3:
         7b:25:aa:63:9e:d0:aa:d3:13:19:5f:1d:42:0e:3e:f0:c1:9b:
         c1:a3:29:83:a7:7d:dc:76:53:e1:a6:a3:8e:f1:e3:7e:e2:11:
         5b:9c:0b:e4:88:ed:fc:64:57:a7:fa:6d:00:37:8c:bf:43:de:
         f8:85:02:dc:85:af:5f:87:a7:6d:c8:8c:32:58:a6:f4:28:c1:
         09:aa:52:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:30 2025 by rpki-client