Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135362e302f32342d3234203d3e20323633343231.roa
File:                     3136382e3132312e3135362e302f32342d3234203d3e20323633343231.roa (raw, json)
Hash identifier:          BZMZvipw/Hq4wxriL0n+G/ysLBG0fS3o2nDtEHrNZA4=
Subject key identifier:   49:EE:F9:3F:BC:F0:19:57:E0:1D:0B:B8:B4:73:C5:89:EA:6A:FC:23
Certificate issuer:       /CN=411194BD84722FD252C79F3307A7C3ACFDC84782
Certificate serial:       779BF313D2E7B4D828A807E585569872972DCA91
Authority key identifier: 41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135362e302f32342d3234203d3e20323633343231.roa
Signing time:             Thu 13 Apr 2023 20:21:48 +0000
ROA not before:           Thu 13 Apr 2023 20:16:48 +0000
ROA not after:            Thu 11 Apr 2024 20:21:48 +0000
asID:                     263421
IP address blocks:        168.121.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9b:f3:13:d2:e7:b4:d8:28:a8:07:e5:85:56:98:72:97:2d:ca:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411194BD84722FD252C79F3307A7C3ACFDC84782
        Validity
            Not Before: Apr 13 20:16:48 2023 GMT
            Not After : Apr 11 20:21:48 2024 GMT
        Subject: CN=49EEF93FBCF01957E01D0BB8B473C589EA6AFC23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:52:e0:01:a4:0d:82:53:a6:91:b6:f2:4f:
                    16:ae:c5:06:ab:78:47:c7:80:a6:c4:f7:39:76:db:
                    f1:85:f2:2e:fe:f5:e7:1d:a7:45:a8:10:f6:0a:56:
                    ef:e0:97:a0:0d:06:48:cf:2a:33:42:3f:0b:d0:18:
                    44:8b:f6:0e:b0:d9:3d:fc:2d:21:45:6b:8b:ee:30:
                    be:17:65:15:20:72:74:c5:37:8f:b2:8a:d4:4f:97:
                    15:17:09:bb:22:83:e0:fe:04:e7:40:f2:aa:ef:4d:
                    5c:f7:cd:15:cc:c7:b9:74:b9:a5:52:f7:b7:8b:b0:
                    61:33:46:4e:54:d6:e5:dd:62:0d:61:40:04:37:5a:
                    d6:46:8f:0d:37:c5:eb:59:dd:50:ca:27:c5:46:93:
                    48:4f:4a:fe:61:fd:c3:ce:ce:18:6c:18:6d:eb:c9:
                    52:b8:e2:bf:ca:44:02:38:19:67:d9:6e:7a:a0:97:
                    2d:56:82:61:56:2f:ed:dc:f1:97:f4:1d:bc:79:6f:
                    f3:fa:25:50:15:fa:33:2e:3d:c8:37:da:96:9a:8b:
                    23:0f:7f:b5:de:3e:57:b2:3e:c9:d7:06:62:17:88:
                    d1:ef:d0:f9:ad:b8:0a:f9:71:4f:03:10:d8:24:bf:
                    74:a6:c8:fd:60:be:61:36:04:56:b1:c3:b4:29:d4:
                    91:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EE:F9:3F:BC:F0:19:57:E0:1D:0B:B8:B4:73:C5:89:EA:6A:FC:23
            X509v3 Authority Key Identifier:
                keyid:41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/411194BD84722FD252C79F3307A7C3ACFDC84782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135362e302f32342d3234203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e7:0b:f6:7f:c2:c7:23:55:5c:5e:d0:8c:64:fa:3e:26:51:28:
         99:8f:6b:68:f0:b7:96:aa:e1:12:95:65:e4:bc:34:43:c6:ac:
         15:68:12:97:05:b2:42:ad:68:7e:38:e7:4f:08:f4:4b:12:4c:
         ef:c5:cb:df:c4:21:a8:bc:99:77:46:b2:4f:04:26:2f:ba:8e:
         96:a9:df:fe:00:31:5c:cf:cf:06:1c:0b:d3:53:50:4c:46:fc:
         fc:13:4d:46:b7:11:24:bd:f0:d1:e1:90:55:2f:35:08:2a:b4:
         31:ad:93:29:14:f8:28:98:45:b8:36:61:d7:d8:e2:75:36:81:
         ae:d4:83:e1:ed:9f:07:22:36:1f:d1:ac:5b:b8:ad:2b:33:df:
         23:5c:1b:cc:c4:60:7d:6f:56:ce:6d:a8:5d:5a:42:59:9a:6e:
         e4:a0:4e:46:0b:d1:c7:c1:d3:74:81:58:a7:8e:84:a4:60:d0:
         a7:fc:c0:94:93:ae:7d:e5:aa:51:0d:a4:7f:d3:f7:0c:2a:06:
         ee:96:3b:3b:f1:e9:15:17:05:51:37:48:b6:26:6b:0f:00:d4:
         ae:8f:ea:40:37:fc:fe:54:4f:6f:55:6b:de:d3:78:7c:96:50:
         c5:52:6d:d1:96:57:ad:fc:e6:c0:2d:bb:e3:e5:1a:01:31:64:
         0a:b1:c1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:30 2023 by rpki-client on console.sobornost.net