Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135392e302f32342d3234203d3e20323633343231.roa
File:                     3136382e3132312e3135392e302f32342d3234203d3e20323633343231.roa (raw, json)
Hash identifier:          AtvvvB3B4GqsEuLRetNdK6DoKOD9mAKXuNhjcwyZaQg=
Subject key identifier:   4B:29:68:68:E5:C4:1B:8D:7B:9D:A4:7B:88:56:DB:24:D0:42:6E:FB
Certificate issuer:       /CN=411194BD84722FD252C79F3307A7C3ACFDC84782
Certificate serial:       2BFE96FEE5A3B32B824ACDB1DF548BC1DE3EA0C1
Authority key identifier: 41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135392e302f32342d3234203d3e20323633343231.roa
Signing time:             Wed 19 Apr 2023 13:07:47 +0000
ROA not before:           Wed 19 Apr 2023 13:02:47 +0000
ROA not after:            Wed 17 Apr 2024 13:07:47 +0000
asID:                     263421
IP address blocks:        168.121.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fe:96:fe:e5:a3:b3:2b:82:4a:cd:b1:df:54:8b:c1:de:3e:a0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411194BD84722FD252C79F3307A7C3ACFDC84782
        Validity
            Not Before: Apr 19 13:02:47 2023 GMT
            Not After : Apr 17 13:07:47 2024 GMT
        Subject: CN=4B296868E5C41B8D7B9DA47B8856DB24D0426EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:54:ac:b1:22:1f:de:a0:1c:7b:e6:35:b5:
                    02:23:fd:c0:37:d3:7b:39:04:ea:da:c6:a1:a1:72:
                    fd:bb:76:88:7e:7e:52:8a:e6:84:ec:a3:3f:69:bf:
                    27:8b:7c:02:9c:f7:66:4b:09:25:d4:1a:92:25:57:
                    a6:a0:92:fe:62:44:9a:44:6f:ce:a0:cc:ff:d6:b2:
                    da:7b:8f:1b:f0:01:2b:ea:35:d6:57:d1:e9:f8:51:
                    0f:cf:06:ea:5a:93:3d:9d:ee:75:75:92:24:f1:3a:
                    5d:33:a4:5e:6f:bf:a5:0b:7b:03:8d:6a:e1:bd:3b:
                    a0:80:50:05:21:93:12:dc:0f:06:42:95:2a:19:c0:
                    01:2e:e0:89:6e:d6:af:3a:12:67:24:85:1f:7d:1a:
                    e1:ef:74:be:89:a0:45:b4:e5:af:f1:de:6c:fb:78:
                    25:63:30:bc:b9:d7:14:ed:a6:06:a0:25:cf:8d:14:
                    c2:60:dc:3d:af:9a:6c:7c:30:68:70:c1:5c:b0:bb:
                    e3:0c:95:0f:0a:52:b4:8e:05:8c:1e:bf:a7:b5:12:
                    de:1c:f5:0c:65:f0:0f:79:80:7b:bd:f1:29:ff:27:
                    f0:ec:f4:91:a4:7b:1b:49:7a:10:18:e4:12:97:71:
                    96:ac:3e:a8:41:b6:57:fb:8e:75:3b:38:5e:2d:d1:
                    08:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:29:68:68:E5:C4:1B:8D:7B:9D:A4:7B:88:56:DB:24:D0:42:6E:FB
            X509v3 Authority Key Identifier:
                keyid:41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/411194BD84722FD252C79F3307A7C3ACFDC84782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135392e302f32342d3234203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:b6:53:00:95:7b:f4:b5:86:83:88:6f:0e:d0:d0:b2:32:91:
         f1:1b:cf:d1:f5:de:1b:6f:4d:97:90:31:88:c9:40:23:59:e5:
         31:1a:30:43:e1:08:05:e3:3f:1b:51:f9:d9:4c:1b:60:8d:32:
         9a:ff:2c:db:9e:df:87:c2:c7:79:5f:04:10:bc:30:eb:4e:c8:
         d4:a6:de:8b:22:01:26:19:44:9e:51:01:44:65:b6:d3:86:45:
         d3:af:11:62:df:5f:d5:34:13:96:78:3f:d3:b9:02:ac:35:78:
         3b:3d:6b:06:0d:65:0e:eb:53:84:05:c7:76:e0:ae:c8:e4:d5:
         fb:e3:23:c6:6e:b3:e9:f2:d9:07:a7:30:29:67:a6:0b:a9:71:
         ae:ce:b2:24:7b:ed:e9:67:61:38:9b:d6:c3:99:63:04:e4:42:
         f0:71:21:ec:ba:b7:27:44:cf:89:d1:19:55:3d:54:66:bf:c4:
         fd:cf:c0:d8:54:aa:f4:2d:39:3a:ea:44:5c:ae:49:1b:99:03:
         07:a0:bc:9f:51:bf:64:48:f4:c4:1e:4f:ea:f3:0e:83:cb:04:
         4c:dc:18:ab:59:8c:c8:b9:b9:77:0d:7a:14:95:0d:6a:9c:66:
         c2:c8:12:e0:fb:e1:88:3a:0d:2c:43:0e:25:97:2a:c7:dd:9c:
         63:31:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:30 2023 by rpki-client on console.sobornost.net