Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/3136382e3138312e33362e302f32342d3234203d3e20323638313932.roa
File:                     3136382e3138312e33362e302f32342d3234203d3e20323638313932.roa (raw, json)
Hash identifier:          Td8iB241zRjqkggoZV6A8evhCriVlcfag/D4qoAk14E=
Subject key identifier:   BC:4D:70:08:61:B6:AC:B3:96:70:70:B2:70:84:7F:61:1F:A1:59:CF
Certificate issuer:       /CN=9196DD3555A3B15AB662F32F036A015CAC7C79A1
Certificate serial:       5D3F867E3B124B22F7446570E0E08899EDC8113C
Authority key identifier: 91:96:DD:35:55:A3:B1:5A:B6:62:F3:2F:03:6A:01:5C:AC:7C:79:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/3136382e3138312e33362e302f32342d3234203d3e20323638313932.roa
Signing time:             Sun 27 Nov 2022 05:23:16 +0000
ROA not before:           Sun 27 Nov 2022 05:18:16 +0000
ROA not after:            Sun 26 Nov 2023 05:23:16 +0000
asID:                     268192
IP address blocks:        168.181.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3f:86:7e:3b:12:4b:22:f7:44:65:70:e0:e0:88:99:ed:c8:11:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9196DD3555A3B15AB662F32F036A015CAC7C79A1
        Validity
            Not Before: Nov 27 05:18:16 2022 GMT
            Not After : Nov 26 05:23:16 2023 GMT
        Subject: CN=BC4D700861B6ACB3967070B270847F611FA159CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:52:e5:d9:86:97:05:76:a1:0f:19:5c:16:
                    66:ff:46:71:20:73:69:55:49:56:89:f6:e9:4d:e4:
                    a7:1a:7a:9d:77:3d:2d:00:97:c7:e1:64:12:95:69:
                    de:e5:fc:03:73:cf:9e:72:27:83:50:6d:4e:9a:bc:
                    60:3a:9c:36:6d:04:c9:f4:9e:f4:cf:4f:09:f8:64:
                    63:10:0f:39:db:b8:33:36:f3:37:4d:4a:bc:bb:be:
                    bd:58:b3:0b:2d:51:d6:d8:af:27:3b:ed:de:48:20:
                    ff:71:b6:94:d0:d7:ed:0b:de:16:a9:15:4e:27:bc:
                    81:08:68:15:a9:c0:14:2c:54:8a:6e:e9:7b:d1:3e:
                    be:f5:41:66:92:e4:d5:54:ee:36:bb:fd:17:58:5f:
                    0d:67:00:05:4a:49:99:8f:9c:df:85:b3:ec:7b:ef:
                    de:64:48:3b:93:e7:a5:e3:67:d1:1b:2e:85:41:4a:
                    2c:bb:9e:76:07:6a:f6:20:ce:96:e4:3d:2d:2d:65:
                    6c:78:fa:80:3a:36:a3:85:15:96:b9:cc:1f:ca:8d:
                    f8:7e:88:44:c0:ba:e6:4c:bb:f7:82:bf:06:40:bf:
                    2f:f3:46:ab:2a:3e:70:5f:10:05:cb:20:ee:bf:af:
                    4e:ef:db:17:d8:bb:16:ec:a2:6a:af:5c:90:5e:21:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4D:70:08:61:B6:AC:B3:96:70:70:B2:70:84:7F:61:1F:A1:59:CF
            X509v3 Authority Key Identifier:
                keyid:91:96:DD:35:55:A3:B1:5A:B6:62:F3:2F:03:6A:01:5C:AC:7C:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/3136382e3138312e33362e302f32342d3234203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:5b:67:59:09:31:08:a5:73:7c:82:d5:6a:b9:b7:74:81:20:
         d3:44:3b:70:ef:3c:dd:ff:01:a5:97:72:0d:c6:d9:e7:19:60:
         0b:21:21:21:07:89:83:16:c5:4f:cc:1f:5d:24:68:69:e1:bc:
         25:88:77:57:87:a5:67:8a:b4:3f:90:b1:54:f1:bc:4c:7c:5d:
         74:57:63:2c:b6:41:49:5d:38:22:57:94:cb:68:18:e2:3c:a1:
         38:d6:0b:da:8c:75:be:7f:e3:97:b9:81:56:0c:ab:cc:46:d0:
         0b:ea:b3:bf:b1:54:96:00:f2:6f:56:52:cb:fd:33:2e:cc:6f:
         fc:80:d4:99:92:33:50:ad:1d:b2:16:8b:16:a3:f1:80:c6:bd:
         80:7b:f0:d6:85:28:86:35:2d:62:67:40:38:83:96:a2:2a:32:
         6e:62:73:ec:5a:3d:d2:3c:8c:8d:7c:c3:0d:be:2a:14:aa:b9:
         1b:ab:cf:89:98:1b:e4:1f:b2:85:8e:06:91:b9:52:8a:af:e8:
         c9:a0:86:d0:18:2c:0d:5b:6b:91:c4:12:c3:a0:46:e1:75:f7:
         1b:a9:69:bd:81:95:0a:d0:fb:e3:fe:ec:9a:a9:4c:68:b5:3b:
         b1:de:29:96:52:8c:51:a6:30:57:4f:4c:13:47:71:0d:5a:64:
         e2:d3:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:30 2023 by rpki-client on console.sobornost.net