Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/3138312e3139312e302e302f32322d3232203d3e20323637343336.roa
File:                     3138312e3139312e302e302f32322d3232203d3e20323637343336.roa (raw, json)
Hash identifier:          Zdg3ZxRJ4UwFTb9m8URSVw8k1qwz456FNSyhL3+sP/c=
Subject key identifier:   98:06:5B:1A:A6:48:64:8F:9E:6A:C2:A5:38:58:12:6D:99:F0:6A:1F
Certificate issuer:       /CN=7E95EBEE3456D4BC4E5DEFBA84FFDD0D3DC39AC5
Certificate serial:       031057412FAC5E7F6419A7A8AF4BF7209A25CA98
Authority key identifier: 7E:95:EB:EE:34:56:D4:BC:4E:5D:EF:BA:84:FF:DD:0D:3D:C3:9A:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E95EBEE3456D4BC4E5DEFBA84FFDD0D3DC39AC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/3138312e3139312e302e302f32322d3232203d3e20323637343336.roa
Signing time:             Wed 16 Nov 2022 21:07:44 +0000
ROA not before:           Wed 16 Nov 2022 21:02:44 +0000
ROA not after:            Wed 15 Nov 2023 21:07:44 +0000
asID:                     267436
IP address blocks:        181.191.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:10:57:41:2f:ac:5e:7f:64:19:a7:a8:af:4b:f7:20:9a:25:ca:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E95EBEE3456D4BC4E5DEFBA84FFDD0D3DC39AC5
        Validity
            Not Before: Nov 16 21:02:44 2022 GMT
            Not After : Nov 15 21:07:44 2023 GMT
        Subject: CN=98065B1AA648648F9E6AC2A53858126D99F06A1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b7:ec:10:be:cf:e7:dc:58:ea:01:5b:cc:a9:
                    3d:80:ee:c5:39:9f:14:70:bd:b5:bd:7d:5d:96:4d:
                    16:9a:12:7f:bd:7b:14:d3:27:18:cd:19:d4:ee:1d:
                    e4:b3:95:97:8e:0e:98:55:0c:80:e6:d9:9d:c5:de:
                    b3:bc:0c:2b:fb:01:9d:2f:9b:96:40:e9:0c:0d:84:
                    99:d8:a2:8e:3a:d3:6e:db:db:3c:4c:cc:99:31:44:
                    df:35:98:d2:75:ae:fb:9d:45:3f:ac:ad:b2:e6:a3:
                    a9:91:3d:ca:b6:4c:97:d0:01:7e:f9:44:73:24:60:
                    1c:55:f6:50:2e:80:2a:78:4c:12:85:2e:4a:db:99:
                    08:14:84:1f:f7:c6:90:53:30:0b:eb:53:46:b9:37:
                    bd:d6:a5:d8:4e:7c:4a:84:13:10:48:28:a5:a1:b9:
                    3f:75:ce:a4:ad:20:43:fa:bd:13:3c:5c:38:03:83:
                    32:18:92:02:d5:8e:ba:30:f3:84:5a:72:34:d7:6c:
                    80:ad:55:2f:60:a1:27:72:1e:17:30:d2:d6:f4:ac:
                    8c:c0:24:32:a6:1f:d0:af:2f:f8:26:0f:9b:16:dd:
                    36:04:8c:51:15:a1:8f:99:fd:5a:ff:5c:42:db:92:
                    06:29:eb:aa:25:18:93:b3:ff:a7:77:48:7f:f5:1f:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:06:5B:1A:A6:48:64:8F:9E:6A:C2:A5:38:58:12:6D:99:F0:6A:1F
            X509v3 Authority Key Identifier:
                keyid:7E:95:EB:EE:34:56:D4:BC:4E:5D:EF:BA:84:FF:DD:0D:3D:C3:9A:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/7E95EBEE3456D4BC4E5DEFBA84FFDD0D3DC39AC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E95EBEE3456D4BC4E5DEFBA84FFDD0D3DC39AC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/3138312e3139312e302e302f32322d3232203d3e20323637343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:02:d1:5e:ac:5f:e9:25:2f:93:38:4c:0c:84:03:7f:38:02:
         d4:0a:25:c7:2b:2b:96:cc:0b:4a:30:d0:da:a5:d7:7c:04:02:
         d8:ec:d7:7f:f8:de:6b:55:21:4b:6b:ef:d5:1d:ed:bd:8e:c3:
         1a:cb:7e:bb:cc:54:f3:db:ea:31:8d:cd:f2:d2:ac:c5:9a:ee:
         c0:60:ab:23:7a:63:fd:15:4c:c6:04:fa:53:91:7a:aa:d7:06:
         8c:42:6f:0c:a5:ed:da:6e:c2:ee:61:97:09:7f:8b:6c:75:1e:
         75:0c:e4:56:73:36:61:b9:2b:a1:9c:f9:73:bf:08:44:3b:3e:
         01:f9:4d:ce:5f:e1:f9:4d:d4:2e:bb:ff:ca:75:0e:0e:50:5d:
         90:55:6c:58:c5:41:e1:19:50:6f:42:82:09:d0:a8:b1:d4:f9:
         83:30:22:a9:7f:c8:87:40:17:8e:f1:ce:42:34:a2:d4:d4:40:
         c5:93:8f:e6:b5:c1:c2:16:1c:49:48:b1:25:d8:46:f1:78:88:
         31:09:ce:a4:50:63:d2:27:14:f9:09:4b:e7:5a:6e:18:a4:cc:
         9e:5e:f0:1a:1a:e5:80:ad:23:a2:e9:f2:ea:6a:3c:be:ac:c2:
         f4:84:56:05:4a:89:a7:92:4a:ef:57:84:69:f9:f9:9a:f8:8d:
         cf:87:74:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-fra.rpki-client.org