Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/0/3138312e3233332e36382e302f32322d3234203d3e20323731343530.roa
File:                     3138312e3233332e36382e302f32322d3234203d3e20323731343530.roa (raw, json)
Hash identifier:          yrFCGff0KcOagkm0YMDtNCCCG8urJs30kggWp4Ij1qY=
Subject key identifier:   2A:C6:3E:5D:17:C6:67:C7:E5:F0:68:3D:30:50:29:5A:C9:E3:56:52
Certificate issuer:       /CN=54E1A721A2A2D3AB874E1E6DE191640E9F76D6EE
Certificate serial:       3E4B45D6BC72E2B9A3BF0E355994F8D040714DFE
Authority key identifier: 54:E1:A7:21:A2:A2:D3:AB:87:4E:1E:6D:E1:91:64:0E:9F:76:D6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54E1A721A2A2D3AB874E1E6DE191640E9F76D6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/0/3138312e3233332e36382e302f32322d3234203d3e20323731343530.roa
Signing time:             Fri 29 Dec 2023 15:31:01 +0000
ROA not before:           Fri 29 Dec 2023 15:26:01 +0000
ROA not after:            Fri 27 Dec 2024 15:31:01 +0000
asID:                     271450
IP address blocks:        181.233.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4b:45:d6:bc:72:e2:b9:a3:bf:0e:35:59:94:f8:d0:40:71:4d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E1A721A2A2D3AB874E1E6DE191640E9F76D6EE
        Validity
            Not Before: Dec 29 15:26:01 2023 GMT
            Not After : Dec 27 15:31:01 2024 GMT
        Subject: CN=2AC63E5D17C667C7E5F0683D3050295AC9E35652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:fd:2c:07:24:5b:8b:40:ee:33:35:4e:c2:
                    07:d1:13:cb:cd:3e:c0:cf:0f:a0:cb:32:3f:ab:64:
                    96:fb:31:9d:94:a6:f5:15:19:65:bf:02:a1:50:1a:
                    f9:2a:02:40:d4:65:50:77:20:01:bd:7a:b4:9b:bb:
                    1d:93:1c:db:87:d8:f5:92:5e:6a:b6:9e:fb:36:38:
                    8b:dc:7e:b0:43:4d:52:a7:f2:3a:f1:f2:b3:a7:bb:
                    af:99:40:ed:89:23:80:e1:22:6d:46:61:e2:09:4c:
                    e1:fe:8d:99:8b:44:c7:b0:1f:9b:52:b8:e7:2b:48:
                    9c:57:a3:4c:d4:1d:d8:6e:ee:11:fd:e5:99:da:6c:
                    32:43:75:0c:82:65:d8:f5:98:fa:67:1c:f8:f3:f0:
                    7c:3b:ad:69:0e:ca:b2:08:49:ad:d1:96:f4:d3:13:
                    e1:9e:7a:cd:16:e0:bc:f6:95:de:2d:93:1f:53:3b:
                    f1:76:a2:fb:22:20:a2:af:c5:52:e4:21:b5:59:8d:
                    1f:58:61:d7:ce:5d:28:af:1b:da:11:03:1b:7e:c7:
                    4b:fa:85:a6:ec:93:05:fa:f8:2b:be:d1:aa:db:fc:
                    e5:85:d2:0b:35:a1:c7:b9:69:30:7a:68:38:8a:25:
                    77:9d:a0:6e:10:c6:48:70:a7:a7:35:6c:5a:f0:ac:
                    42:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C6:3E:5D:17:C6:67:C7:E5:F0:68:3D:30:50:29:5A:C9:E3:56:52
            X509v3 Authority Key Identifier:
                keyid:54:E1:A7:21:A2:A2:D3:AB:87:4E:1E:6D:E1:91:64:0E:9F:76:D6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/0/54E1A721A2A2D3AB874E1E6DE191640E9F76D6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54E1A721A2A2D3AB874E1E6DE191640E9F76D6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/0/3138312e3233332e36382e302f32322d3234203d3e20323731343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:5b:b5:bf:73:f0:c5:24:e0:82:50:82:d5:d8:e7:02:81:95:
         07:61:1d:31:8f:73:c1:7b:83:c3:84:7b:66:9c:42:77:a4:06:
         41:64:35:c7:e8:b4:29:e8:4f:2f:cb:52:ed:ac:81:8e:27:2d:
         f4:2d:23:ae:5b:60:8f:fc:6a:e8:75:82:74:dd:8d:c5:ac:e0:
         c0:df:f2:cf:88:4d:11:ab:22:34:18:f7:0e:f5:b2:e0:73:52:
         07:65:0a:72:35:e6:e9:a6:02:99:25:08:b8:36:bc:1e:fb:81:
         7c:af:c9:86:aa:ed:04:39:ab:65:00:cc:aa:15:01:91:6d:b8:
         40:bc:fc:3e:43:f7:cb:80:6b:d7:bf:3b:e8:61:fa:58:d1:ff:
         32:80:d8:3f:48:85:2d:d5:61:e3:13:82:1e:28:21:b6:03:88:
         f2:94:59:4e:3f:20:ac:c5:12:c7:f4:0f:6c:21:02:09:17:f1:
         2b:1c:9c:86:aa:83:df:be:05:6d:bb:92:36:33:ce:e4:2e:52:
         cc:3a:8b:23:6a:66:7e:f7:99:f2:76:f3:27:74:fa:20:ad:e8:
         79:83:74:25:e0:a3:05:ad:ca:79:99:07:90:6f:68:31:e1:f6:
         a0:41:d8:b8:14:85:1a:30:ca:f7:cc:82:c8:2f:17:ca:84:20:
         e0:e6:30:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org