Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/3138312e3233322e3136352e302f32342d3234203d3e20323731333131.roa
File:                     3138312e3233322e3136352e302f32342d3234203d3e20323731333131.roa (raw, json)
Hash identifier:          gRSnTnfh9HjK6huYgrM7cea/kcm/i9mJd3wxC9a6tmw=
Subject key identifier:   29:6B:EF:22:8E:30:3A:84:DE:AD:1E:0E:29:40:94:99:05:6D:29:3D
Certificate issuer:       /CN=9C212610E4B3678AE5982482A8BB9594A109BDE1
Certificate serial:       065C46940234B881857E6AEE1B85A3B203A3F6E9
Authority key identifier: 9C:21:26:10:E4:B3:67:8A:E5:98:24:82:A8:BB:95:94:A1:09:BD:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/3138312e3233322e3136352e302f32342d3234203d3e20323731333131.roa
Signing time:             Wed 20 Mar 2024 11:45:36 +0000
ROA not before:           Wed 20 Mar 2024 11:40:36 +0000
ROA not after:            Wed 19 Mar 2025 11:45:36 +0000
asID:                     271311
IP address blocks:        181.232.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5c:46:94:02:34:b8:81:85:7e:6a:ee:1b:85:a3:b2:03:a3:f6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C212610E4B3678AE5982482A8BB9594A109BDE1
        Validity
            Not Before: Mar 20 11:40:36 2024 GMT
            Not After : Mar 19 11:45:36 2025 GMT
        Subject: CN=296BEF228E303A84DEAD1E0E29409499056D293D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:db:5c:ce:cd:6c:b2:69:af:c8:8c:2b:a0:
                    7d:47:8c:68:e2:62:ec:b8:28:36:39:e5:b3:08:20:
                    f6:1e:3d:24:75:89:1e:61:3d:09:38:fc:bd:90:96:
                    b4:62:09:b5:22:ac:06:64:10:7c:74:1f:b9:36:ef:
                    70:81:41:99:c3:a4:34:d2:a0:17:84:9c:7d:00:8a:
                    db:02:3a:80:38:bb:9e:f2:13:dd:2f:3a:28:74:6b:
                    94:ff:f8:7a:fb:1e:7b:68:1b:ff:98:c3:cb:24:94:
                    06:c8:a1:58:66:ca:13:f6:8d:0c:87:3e:6d:e2:cb:
                    cc:de:59:e8:d6:9c:98:de:78:20:a1:68:89:11:7a:
                    a6:6c:ec:12:56:a5:29:33:aa:64:e8:ce:ba:c4:fa:
                    e9:d7:89:a4:ff:4c:3e:20:42:40:e7:68:23:e2:9d:
                    e7:f4:5e:6c:8d:bb:9c:8d:3b:65:99:54:7b:56:b6:
                    88:94:7b:68:e4:22:f3:69:df:99:cf:1e:71:5b:5b:
                    71:92:49:78:95:1a:31:8a:f1:a4:eb:2d:bc:1c:be:
                    cd:b5:1b:65:d3:50:25:d8:e0:49:9b:f3:cf:19:96:
                    65:9a:c0:2f:2e:07:98:e5:c7:05:53:9c:db:1a:a2:
                    cd:f8:f9:2d:08:e4:f6:3e:0e:dc:b5:16:76:1c:7f:
                    37:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6B:EF:22:8E:30:3A:84:DE:AD:1E:0E:29:40:94:99:05:6D:29:3D
            X509v3 Authority Key Identifier:
                keyid:9C:21:26:10:E4:B3:67:8A:E5:98:24:82:A8:BB:95:94:A1:09:BD:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/3138312e3233322e3136352e302f32342d3234203d3e20323731333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:2a:8a:fb:04:77:ff:43:1f:cc:c2:ff:b6:0f:b8:ea:90:45:
         fe:81:39:7a:8b:b3:58:31:3f:11:88:f5:34:e9:dd:c1:af:54:
         57:77:80:1b:bd:63:d9:f5:8f:22:53:c5:8f:9e:a7:9a:a2:42:
         f0:3a:d0:dd:c3:8b:7d:80:14:6c:84:d0:9d:ec:a8:93:52:b1:
         fd:60:91:28:76:84:f8:e3:7c:8f:2e:0d:b9:c0:ad:d9:db:3e:
         d4:ab:81:d7:79:8d:1a:16:d7:8e:26:41:f0:b1:0c:9c:c2:d4:
         45:6c:27:b3:59:50:bc:25:1b:37:2e:0a:93:d4:24:fc:79:c2:
         70:70:11:9c:9f:3b:34:c5:fb:46:dc:27:97:5a:2a:ac:3e:da:
         7e:84:8d:3e:a9:97:98:d6:9c:cb:72:c6:cf:29:ad:d3:8f:6a:
         84:f6:cd:5d:09:f0:fc:a7:63:22:43:1d:81:29:4b:42:bb:73:
         28:4b:78:fc:6e:16:d2:e4:44:76:85:61:4b:73:64:70:b8:3d:
         77:77:94:fd:d5:14:5e:c6:97:41:70:3f:44:97:ef:39:7a:f3:
         30:0c:82:a3:35:d7:a0:9a:83:93:4a:b8:a4:f5:b4:39:f9:d9:
         61:5c:72:36:d6:fc:22:ee:50:62:67:5b:88:75:3a:c1:3e:6b:
         cb:b8:ac:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org