Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130342e302f32322d3232203d3e20323731333930.roa
File:                     3138312e3138392e3130342e302f32322d3232203d3e20323731333930.roa (raw, json)
Hash identifier:          OWMl++r7yFxivZnRCHDTner70kb/4eqUmC+WlB3uJRs=
Subject key identifier:   12:6F:07:C1:1E:1B:2C:D6:59:C7:38:D3:F2:96:B3:CF:A5:67:92:E3
Certificate issuer:       /CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
Certificate serial:       43F5A3BE79ECD6190546E104730CC71214E2A3B1
Authority key identifier: 4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130342e302f32322d3232203d3e20323731333930.roa
Signing time:             Fri 12 Apr 2024 16:19:57 +0000
ROA not before:           Fri 12 Apr 2024 16:14:57 +0000
ROA not after:            Fri 11 Apr 2025 16:19:57 +0000
asID:                     271390
IP address blocks:        181.189.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f5:a3:be:79:ec:d6:19:05:46:e1:04:73:0c:c7:12:14:e2:a3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
        Validity
            Not Before: Apr 12 16:14:57 2024 GMT
            Not After : Apr 11 16:19:57 2025 GMT
        Subject: CN=126F07C11E1B2CD659C738D3F296B3CFA56792E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fd:fa:19:6f:ef:73:dc:41:50:16:d1:97:ca:
                    31:ff:49:68:17:72:5c:33:09:e4:14:ae:02:ae:49:
                    8f:38:fa:9e:8a:36:6c:54:89:d3:41:ac:e2:11:4c:
                    5b:54:11:a1:03:11:18:27:fa:69:3d:3d:5d:f2:c6:
                    99:0c:71:36:6f:30:2d:72:d6:35:a9:df:f5:d7:51:
                    64:3c:ea:09:71:dc:57:1c:a7:0b:c8:4a:08:5a:2e:
                    02:c2:9e:dc:40:87:26:70:ea:85:ef:93:ec:93:16:
                    5b:1b:ae:7b:50:56:74:a5:25:ab:5f:e3:6e:45:4f:
                    d5:34:72:b2:9d:ac:8a:be:1e:60:48:bd:26:e6:e4:
                    91:05:6a:52:1b:29:99:d2:9d:98:44:81:db:e7:3f:
                    ad:4d:12:01:ab:e9:3f:93:96:b7:42:a2:83:23:95:
                    b7:a5:48:68:d2:0d:d7:05:ad:92:ec:df:f0:ca:d5:
                    a9:91:a6:15:8f:08:63:81:86:31:d8:19:c9:16:9e:
                    27:ac:8c:e1:ce:12:28:e9:2c:f2:6a:6a:ac:22:57:
                    e2:0f:99:a7:78:5b:f1:6e:9d:f3:73:fe:7e:c1:9d:
                    3c:26:4a:b0:f1:76:95:0c:26:8c:84:58:91:90:c2:
                    ce:d6:3d:22:7d:54:fc:d5:86:fd:b9:11:35:78:89:
                    ae:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6F:07:C1:1E:1B:2C:D6:59:C7:38:D3:F2:96:B3:CF:A5:67:92:E3
            X509v3 Authority Key Identifier:
                keyid:4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130342e302f32322d3232203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:99:49:81:5b:fa:ed:5f:55:24:8f:ca:5b:84:e3:61:80:bf:
         8f:ec:9c:71:e9:4b:7f:cf:dd:19:f1:2c:a5:29:95:75:2e:84:
         80:4f:c4:ed:4d:34:85:a3:19:4f:5d:9d:1a:af:f1:80:e2:50:
         76:da:f3:f8:65:14:9a:78:f5:14:80:eb:f1:3f:9c:83:09:48:
         13:63:72:f2:ba:34:dc:d2:df:df:e7:a1:bd:c6:f5:48:3f:2b:
         04:69:71:39:8d:dd:d8:fc:c1:b8:85:c8:68:cd:5d:83:ce:6f:
         70:9b:dd:49:58:18:3a:8f:dc:6e:96:39:e7:58:61:4b:c3:61:
         87:23:00:04:16:48:d5:b4:61:6c:7f:53:33:27:9f:c2:00:43:
         f1:1a:ca:c5:b5:77:01:d4:a7:73:48:0b:d4:9d:bd:7c:e6:d5:
         5f:54:c3:2c:53:04:4c:d6:ee:25:a1:28:cb:fc:87:b3:2c:43:
         fb:ee:41:ad:62:38:84:b0:58:d1:f6:6a:e8:af:15:b5:39:80:
         a5:7d:51:40:43:98:25:ea:c4:8c:0d:31:c8:90:ae:bd:e3:4f:
         ad:b7:d3:b0:2f:d8:dd:c5:1c:0e:be:7e:41:86:0c:70:f1:3e:
         7e:eb:e3:72:b0:f0:b9:04:7f:ac:2f:42:34:3d:35:30:b8:73:
         cb:63:c8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org