Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31342e302f32332d3233203d3e20323731343638.roa
File:                     3138312e3232342e31342e302f32332d3233203d3e20323731343638.roa (raw, json)
Hash identifier:          IxYePNzSo3i5EqGOu84ToLfbIzQlc13WWMPE11jJiEQ=
Subject key identifier:   3E:36:A4:3E:61:6C:70:A7:8C:1E:A5:2B:F1:7E:3D:A5:2C:EB:94:FE
Certificate issuer:       /CN=3FB949E473014D3A4378DE464207BB64491FC1FB
Certificate serial:       366E38642CD263FA9BD3FFE8D7A93D73B83AEE99
Authority key identifier: 3F:B9:49:E4:73:01:4D:3A:43:78:DE:46:42:07:BB:64:49:1F:C1:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FB949E473014D3A4378DE464207BB64491FC1FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31342e302f32332d3233203d3e20323731343638.roa
Signing time:             Tue 10 Oct 2023 18:51:45 +0000
ROA not before:           Tue 10 Oct 2023 18:46:45 +0000
ROA not after:            Tue 08 Oct 2024 18:51:45 +0000
asID:                     271468
IP address blocks:        181.224.14.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6e:38:64:2c:d2:63:fa:9b:d3:ff:e8:d7:a9:3d:73:b8:3a:ee:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FB949E473014D3A4378DE464207BB64491FC1FB
        Validity
            Not Before: Oct 10 18:46:45 2023 GMT
            Not After : Oct  8 18:51:45 2024 GMT
        Subject: CN=3E36A43E616C70A78C1EA52BF17E3DA52CEB94FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e8:cf:6d:87:d8:1a:c2:a8:69:05:49:05:61:
                    c2:06:32:cb:62:e0:43:ec:50:42:10:f9:fd:8d:3a:
                    a7:1c:91:13:39:06:20:28:1c:84:1b:ae:bf:57:93:
                    54:cc:95:38:de:90:14:1c:6f:c3:c8:1f:37:8c:a5:
                    a3:0d:2d:15:a9:49:56:5a:a7:be:5c:6d:32:66:bf:
                    82:0c:1a:07:cf:5b:39:3f:3a:8b:ba:d2:d2:d5:43:
                    37:7f:f5:40:c9:3e:f1:d0:1d:d2:81:56:78:21:a6:
                    f9:ca:f6:dd:56:23:96:b5:a1:35:1b:96:04:ea:05:
                    e8:a5:d0:26:ff:cd:4b:9a:8e:25:17:fb:7d:f0:04:
                    10:60:99:2b:61:47:b6:33:d1:d8:23:89:ee:f0:54:
                    f9:f2:2b:fc:11:8e:68:a5:86:6c:3e:a8:62:77:75:
                    26:0d:37:e7:19:02:1d:26:c2:78:33:4b:ab:25:98:
                    b4:09:4c:cc:f4:e1:36:af:49:32:b7:13:3a:f4:ad:
                    40:05:89:f1:a5:26:4d:2e:37:4f:d9:7d:2b:d8:fd:
                    50:c2:dc:e8:db:a5:54:2b:fe:93:21:28:c1:ae:0e:
                    a0:38:ee:e7:14:f0:d8:2f:b3:64:07:df:56:a1:5a:
                    7d:89:0f:00:67:6e:69:8c:78:42:6b:63:12:a3:b6:
                    36:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:36:A4:3E:61:6C:70:A7:8C:1E:A5:2B:F1:7E:3D:A5:2C:EB:94:FE
            X509v3 Authority Key Identifier:
                keyid:3F:B9:49:E4:73:01:4D:3A:43:78:DE:46:42:07:BB:64:49:1F:C1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3FB949E473014D3A4378DE464207BB64491FC1FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FB949E473014D3A4378DE464207BB64491FC1FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31342e302f32332d3233203d3e20323731343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:84:f2:c2:5f:c0:f9:e2:c6:40:d0:12:06:4c:00:04:4c:63:
         eb:07:6e:7c:2d:35:e8:92:43:f7:24:d1:c7:63:f4:30:4f:cf:
         01:fc:80:dd:ab:8a:d8:cc:ca:b4:11:a4:1f:7b:95:26:7d:3a:
         0b:bb:28:34:43:bc:8f:21:c3:c0:3e:3e:27:52:b1:b5:9b:d5:
         bd:6f:58:ec:7c:cd:6b:94:6c:93:2c:cf:eb:bb:58:85:71:0f:
         3b:7f:c5:fe:b1:9e:c6:fa:7d:5b:d8:43:f4:9a:c4:ff:d6:c6:
         1b:d0:6c:e8:f5:e2:78:e5:15:79:16:96:cb:df:a7:cd:c7:0e:
         1a:cc:87:87:b5:b3:1c:21:80:69:70:e4:95:d4:a8:f3:57:fc:
         21:71:59:ff:07:40:8f:be:37:f4:e6:4d:d5:bd:d3:64:7b:95:
         4a:47:bc:a6:6d:f1:00:f9:2b:af:65:3b:ff:c2:5a:46:3e:f3:
         5d:ef:4d:a8:0c:d4:77:7a:1d:99:9f:c8:a9:85:12:1d:4b:72:
         ba:b5:77:d4:a7:3a:13:d4:30:b7:b6:41:5e:7a:b7:99:b5:e6:
         f9:65:66:6b:e9:0b:20:2a:9d:6f:ed:36:48:cc:dc:b1:e4:13:
         b3:3c:da:4d:14:16:da:e9:c5:36:a2:22:c6:71:91:6d:5d:11:
         ae:28:be:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org