Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/3138312e3233322e3136362e302f32332d3233203d3e20323731333131.roa
File:                     3138312e3233322e3136362e302f32332d3233203d3e20323731333131.roa (raw, json)
Hash identifier:          VbO50PTOIzzXFYijbQB0i4NheYMPCx70y4WuDhlghTU=
Subject key identifier:   EC:6C:4F:92:CF:BB:68:3A:A0:A2:CB:DF:F5:07:03:98:23:B7:EF:A0
Certificate issuer:       /CN=9C212610E4B3678AE5982482A8BB9594A109BDE1
Certificate serial:       7210B4344F9B836B7D2DA2EAE67B8DF784AF5371
Authority key identifier: 9C:21:26:10:E4:B3:67:8A:E5:98:24:82:A8:BB:95:94:A1:09:BD:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/3138312e3233322e3136362e302f32332d3233203d3e20323731333131.roa
Signing time:             Wed 20 Mar 2024 11:45:36 +0000
ROA not before:           Wed 20 Mar 2024 11:40:36 +0000
ROA not after:            Wed 19 Mar 2025 11:45:36 +0000
asID:                     271311
IP address blocks:        181.232.166.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:10:b4:34:4f:9b:83:6b:7d:2d:a2:ea:e6:7b:8d:f7:84:af:53:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C212610E4B3678AE5982482A8BB9594A109BDE1
        Validity
            Not Before: Mar 20 11:40:36 2024 GMT
            Not After : Mar 19 11:45:36 2025 GMT
        Subject: CN=EC6C4F92CFBB683AA0A2CBDFF507039823B7EFA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:76:99:94:1f:63:b5:66:b3:cd:38:07:bf:4f:
                    77:c8:56:26:9a:60:17:07:18:2f:69:24:f0:6b:eb:
                    a4:24:4c:03:e4:7d:91:b2:fd:65:50:cb:36:82:13:
                    66:99:75:97:97:1b:fb:58:3e:6d:ef:1c:65:79:77:
                    87:1b:c1:c8:3b:8a:6b:34:21:bd:f7:d8:d3:70:ac:
                    8c:a6:4f:2f:55:16:ba:cd:a0:ec:f4:5b:57:22:2e:
                    4e:b7:22:ad:1c:cc:50:1c:f2:d2:ce:80:0c:ba:a2:
                    95:f5:d1:7e:b0:df:27:20:c4:c9:91:4b:f2:2e:63:
                    2d:c9:c6:67:b4:6e:46:86:a9:74:58:22:8d:d8:71:
                    79:23:ac:6b:1b:4a:ae:a3:98:2c:d2:c1:ee:58:5e:
                    2f:ca:f0:4c:bb:b4:0f:54:7c:9a:d9:1f:ba:d7:8f:
                    23:84:74:27:e5:44:9d:8b:e9:bc:4d:22:9b:85:b8:
                    06:4f:e3:dc:61:8b:59:e3:59:a5:84:fd:c3:f0:cb:
                    56:32:99:8f:40:18:7e:ee:bb:d7:16:53:71:df:39:
                    07:56:68:a5:c0:b5:c1:3b:52:6a:c2:04:84:6b:e3:
                    d2:e2:ea:43:c7:de:04:ea:ca:da:48:7c:4d:20:df:
                    e1:54:1f:b8:81:e9:bf:c3:08:40:28:47:0c:a0:fb:
                    2e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6C:4F:92:CF:BB:68:3A:A0:A2:CB:DF:F5:07:03:98:23:B7:EF:A0
            X509v3 Authority Key Identifier:
                keyid:9C:21:26:10:E4:B3:67:8A:E5:98:24:82:A8:BB:95:94:A1:09:BD:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/3138312e3233322e3136362e302f32332d3233203d3e20323731333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:27:10:a8:16:1d:05:dd:d0:8b:2f:1e:70:90:a5:13:85:22:
         61:5d:05:49:51:60:a3:89:19:d1:bc:eb:41:3c:a0:35:b4:63:
         ea:80:0f:56:8d:1c:79:21:58:c7:d1:92:af:ae:df:ca:9c:f5:
         60:a8:6b:77:d9:f7:92:de:16:e0:8b:3d:15:0c:3d:22:45:89:
         e7:ca:32:17:f3:5e:f0:88:4e:12:11:83:2a:f1:ce:fd:f9:19:
         57:76:72:b9:b6:eb:cf:ad:71:e4:77:26:d1:f3:d2:b0:f8:a0:
         11:63:e4:35:4e:e5:19:3e:7c:3a:bd:fe:cf:53:45:6b:e8:85:
         c9:9a:3f:04:1a:6a:17:fb:60:18:1f:f9:ab:62:ca:ea:58:b7:
         30:d1:12:8f:56:13:06:ae:a2:e1:33:9e:38:c5:13:67:0d:fc:
         26:80:8f:6f:52:fc:cb:96:7d:a1:e4:26:4f:d4:9a:0b:dd:af:
         7f:e7:b0:a1:39:a1:7d:00:a9:83:af:0f:16:d6:a2:87:a0:9b:
         a1:82:03:83:50:f1:27:5b:69:fb:df:33:59:00:70:86:b7:76:
         95:7d:14:5b:b0:36:d4:9c:f7:7c:6a:31:8e:0d:1a:c6:1b:9a:
         c8:23:4b:67:d1:99:07:02:a8:f1:9a:3c:49:6c:14:e9:0d:cb:
         6d:fe:33:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org