Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/3138312e3139312e34322e302f32342d3234203d3e20323636303030.roa
File:                     3138312e3139312e34322e302f32342d3234203d3e20323636303030.roa (raw, json)
Hash identifier:          YKkow/q5vNRuQLJ7Nt2mtmFLaaA4rhRmq221vZ7Jjvw=
Subject key identifier:   A5:41:01:6B:E2:F6:83:10:CA:7A:28:58:E4:1D:47:22:48:C8:A2:38
Certificate issuer:       /CN=D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D
Certificate serial:       10691FC27B7E18C37CCECBBC4E7750893479F959
Authority key identifier: D2:B3:DC:1F:04:CF:1B:73:2C:D3:DE:30:36:5D:DA:1E:05:B5:DF:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/3138312e3139312e34322e302f32342d3234203d3e20323636303030.roa
Signing time:             Mon 18 Dec 2023 16:15:54 +0000
ROA not before:           Mon 18 Dec 2023 16:10:54 +0000
ROA not after:            Mon 16 Dec 2024 16:15:54 +0000
asID:                     266000
IP address blocks:        181.191.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:69:1f:c2:7b:7e:18:c3:7c:ce:cb:bc:4e:77:50:89:34:79:f9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D
        Validity
            Not Before: Dec 18 16:10:54 2023 GMT
            Not After : Dec 16 16:15:54 2024 GMT
        Subject: CN=A541016BE2F68310CA7A2858E41D472248C8A238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:59:0f:89:2b:39:0a:eb:bb:79:4a:79:0c:a3:
                    37:21:9e:0b:f9:8c:0e:b0:fa:13:8c:ae:51:74:95:
                    cb:87:f2:12:d8:c6:19:e8:4d:08:50:47:6d:36:37:
                    1f:7a:e4:eb:c2:8c:3b:a8:59:c0:55:bb:5c:c7:87:
                    a8:9f:db:7c:36:74:9e:e0:06:6e:9f:b8:6a:76:a0:
                    92:90:ea:40:dd:35:cf:70:7a:d0:b9:e0:b6:04:a4:
                    e6:c2:48:0a:3e:3d:c7:30:50:ad:26:48:c7:3d:3e:
                    7a:13:ca:e8:29:73:51:76:16:28:a2:99:82:5b:79:
                    27:28:4e:f0:05:3d:e3:76:62:47:ab:95:c3:2d:a0:
                    32:3a:0f:a0:ff:68:3a:9e:a6:d1:51:fd:3d:fe:8e:
                    88:f4:2b:7a:11:b9:4a:02:96:34:de:c8:fe:0d:3c:
                    18:80:e0:fb:08:1c:3d:5c:74:61:b8:4c:0e:d1:55:
                    9a:97:24:a1:17:67:7f:c3:8a:3a:c3:82:f0:f7:0f:
                    55:d6:91:6e:26:b7:ce:72:0c:d6:fd:b0:5c:84:00:
                    6e:ea:0e:46:e5:13:49:ac:fc:80:3a:9f:07:cb:9d:
                    9e:bb:b4:67:b6:ef:1e:ce:f1:54:23:c7:8e:27:38:
                    1f:37:c7:19:0e:a0:c0:65:fb:77:7f:c1:5e:4e:0c:
                    38:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:41:01:6B:E2:F6:83:10:CA:7A:28:58:E4:1D:47:22:48:C8:A2:38
            X509v3 Authority Key Identifier:
                keyid:D2:B3:DC:1F:04:CF:1B:73:2C:D3:DE:30:36:5D:DA:1E:05:B5:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/3138312e3139312e34322e302f32342d3234203d3e20323636303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:a4:2b:a2:b1:b3:61:ea:3c:02:7b:0c:98:0e:53:47:74:6e:
         9d:50:10:da:67:f6:59:8b:08:a2:48:6a:91:f3:65:81:55:b9:
         00:13:4f:de:d9:02:58:bb:70:3a:90:a8:15:24:47:41:7a:90:
         e7:b0:72:b0:5d:5c:64:12:db:c7:fb:a7:c0:3c:6b:12:8b:fc:
         be:ce:64:38:0b:7e:58:b4:42:39:a3:c5:ed:9d:0a:3d:09:c7:
         f8:44:59:f0:93:30:00:7a:3e:b3:24:e1:c8:79:fe:d7:02:2f:
         83:97:e9:58:27:59:2e:e9:aa:67:eb:77:e8:0e:82:87:6c:76:
         f0:7e:6a:03:b5:25:7f:6c:93:af:14:2a:a3:cc:54:8b:d8:9b:
         d5:85:e9:cf:40:0c:ec:f2:22:1f:41:ba:69:25:f7:0e:1c:a1:
         53:1d:ec:95:64:45:a3:09:dd:ff:15:1b:29:40:12:38:b8:cc:
         f4:a3:0d:48:0e:b6:c7:2a:03:65:c7:63:92:6a:74:df:74:be:
         27:cc:6e:d4:de:4e:68:ed:21:73:1e:10:71:3b:42:08:2b:84:
         de:2f:d0:56:9f:d8:98:f1:51:d6:28:c4:02:1f:40:e9:cb:a6:
         6e:ef:ee:e4:67:4d:d6:2c:9d:61:dd:6d:61:13:82:78:0e:0f:
         3a:9e:19:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org