Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135372e302f32342d3234203d3e20323633343231.roa
File:                     3136382e3132312e3135372e302f32342d3234203d3e20323633343231.roa (raw, json)
Hash identifier:          wA2EjS0VljFl9ucXZQk5RBzT6JPQMGm1klgVMy/M0Ss=
Subject key identifier:   CD:91:4D:2E:A8:04:3E:97:92:F0:B2:08:E1:89:78:82:F4:D4:8E:56
Certificate issuer:       /CN=411194BD84722FD252C79F3307A7C3ACFDC84782
Certificate serial:       37EBC446470E280F7E83F21F3FB38D1FF9C292AF
Authority key identifier: 41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135372e302f32342d3234203d3e20323633343231.roa
Signing time:             Thu 13 Apr 2023 20:21:48 +0000
ROA not before:           Thu 13 Apr 2023 20:16:48 +0000
ROA not after:            Thu 11 Apr 2024 20:21:48 +0000
asID:                     263421
IP address blocks:        168.121.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:eb:c4:46:47:0e:28:0f:7e:83:f2:1f:3f:b3:8d:1f:f9:c2:92:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411194BD84722FD252C79F3307A7C3ACFDC84782
        Validity
            Not Before: Apr 13 20:16:48 2023 GMT
            Not After : Apr 11 20:21:48 2024 GMT
        Subject: CN=CD914D2EA8043E9792F0B208E1897882F4D48E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:87:56:2a:17:b8:99:b1:8b:d3:ec:6c:9c:
                    54:d1:68:ad:f3:d9:69:d0:2c:0a:a4:46:ed:82:32:
                    db:6f:dd:d5:6e:62:cb:34:0a:35:f9:d8:1b:c6:57:
                    1e:d7:4d:b9:e5:15:06:b3:50:17:40:8c:11:54:e9:
                    2e:c4:fb:62:12:d0:42:8c:4d:f2:9c:e0:7d:05:e5:
                    6a:d1:e9:36:fa:b1:2f:0c:15:b0:b0:40:67:24:91:
                    25:6a:7f:39:3b:4d:d1:27:92:fd:2f:91:44:54:34:
                    02:87:f2:ec:2c:bb:2d:2c:fc:9e:07:e2:18:1b:3a:
                    3e:39:dc:1d:70:d2:f1:83:0f:87:50:5d:cb:17:2e:
                    71:b1:d4:b7:8c:1f:bf:4e:86:0a:8e:77:d6:61:8e:
                    c8:9c:03:a4:3d:b9:fd:07:76:9c:65:1f:3b:c9:c2:
                    71:bb:f5:7f:af:db:5e:1d:c6:0d:88:d8:04:15:8f:
                    1c:34:5e:00:9c:89:4d:38:17:46:32:50:96:42:a9:
                    e9:8d:af:49:e1:57:6f:39:ad:24:37:f2:89:ad:c5:
                    3c:cb:8f:9e:ec:c8:da:83:96:cb:1a:f1:3b:d4:1f:
                    96:4a:26:fa:b8:a7:c5:97:cf:2f:07:38:8b:80:48:
                    5f:3e:af:df:50:12:74:1f:5b:06:10:7e:64:8e:86:
                    4e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:91:4D:2E:A8:04:3E:97:92:F0:B2:08:E1:89:78:82:F4:D4:8E:56
            X509v3 Authority Key Identifier:
                keyid:41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/411194BD84722FD252C79F3307A7C3ACFDC84782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135372e302f32342d3234203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:13:c3:28:8c:1c:ae:69:8b:2d:7e:2e:d1:be:ed:ab:33:3e:
         92:20:61:13:c8:db:c3:6b:0b:d9:f1:52:66:9c:fc:32:8b:f8:
         2d:a5:63:c1:47:01:ef:36:83:e9:ba:79:c1:53:d8:a7:e1:f5:
         b7:28:6b:a1:82:6e:70:d3:5a:89:05:d9:15:76:0f:4b:2a:b5:
         70:cc:01:9b:6b:c8:14:a1:dd:b4:bb:26:4b:8f:a8:e2:30:0e:
         31:8e:ed:18:e9:75:00:af:24:c5:04:64:65:f3:4c:87:54:60:
         f2:30:7a:ad:a3:a8:f9:e2:5e:7a:01:0e:c6:e5:4e:88:35:f0:
         7b:1f:0b:2e:33:6f:e2:67:1c:db:5a:78:e6:e3:fb:75:03:f4:
         dc:24:57:9b:06:bb:0d:db:b2:6b:b4:85:fb:16:a8:41:13:4c:
         6f:2a:c5:89:49:96:6d:64:53:1f:24:f7:2b:f4:08:1a:ac:29:
         91:4c:86:33:51:28:e3:66:9d:ed:e5:51:c5:b8:fc:5c:93:bb:
         5b:62:96:87:ff:5c:cd:f3:05:c9:de:ef:bc:ab:3d:c8:30:31:
         de:a9:de:fc:12:6e:57:5c:d2:ef:53:52:1e:2d:c1:6f:31:80:
         1b:e5:a7:cf:bd:55:54:e2:de:58:30:b9:b6:aa:df:0d:b5:f5:
         c1:98:55:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:30 2023 by rpki-client on console.sobornost.net