Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/3138312e3139312e3132302e302f32322d3234203d3e20323636303035.roa
File:                     3138312e3139312e3132302e302f32322d3234203d3e20323636303035.roa (raw, json)
Hash identifier:          7PTItntwYZTXYl9C/sQOOckx1EpNVgVY/x6gd72rtbY=
Subject key identifier:   B3:D8:65:0D:D4:0B:7E:FD:F2:4C:2B:34:50:23:C2:85:FE:F1:87:9A
Certificate issuer:       /CN=4268E7D68AD434C800D3E63BB48AD3784366EDEA
Certificate serial:       3A8E17D5EF4760DED2C9EC53AA7730ABD095C353
Authority key identifier: 42:68:E7:D6:8A:D4:34:C8:00:D3:E6:3B:B4:8A:D3:78:43:66:ED:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4268E7D68AD434C800D3E63BB48AD3784366EDEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/3138312e3139312e3132302e302f32322d3234203d3e20323636303035.roa
Signing time:             Wed 24 Jan 2024 11:35:18 +0000
ROA not before:           Wed 24 Jan 2024 11:30:18 +0000
ROA not after:            Wed 22 Jan 2025 11:35:18 +0000
asID:                     266005
IP address blocks:        181.191.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8e:17:d5:ef:47:60:de:d2:c9:ec:53:aa:77:30:ab:d0:95:c3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4268E7D68AD434C800D3E63BB48AD3784366EDEA
        Validity
            Not Before: Jan 24 11:30:18 2024 GMT
            Not After : Jan 22 11:35:18 2025 GMT
        Subject: CN=B3D8650DD40B7EFDF24C2B345023C285FEF1879A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:57:b5:7c:2c:df:b1:cd:da:89:c7:65:da:
                    13:04:e8:bd:0d:92:07:64:26:b2:b6:44:ef:26:66:
                    de:6a:71:aa:00:7f:f5:e0:e2:6c:11:ea:fc:b6:d5:
                    64:6c:08:f0:2e:9c:38:45:2c:25:90:64:5a:b7:74:
                    e4:59:4f:3d:6f:d4:bb:c8:63:bc:80:93:90:c9:5e:
                    b1:25:36:39:65:de:ae:11:fc:8a:c6:ed:15:11:2b:
                    98:42:b9:7a:46:43:4f:bd:78:8e:c8:7a:52:df:17:
                    bb:4b:eb:40:9b:3e:2a:a3:bf:c8:fd:7e:36:04:c8:
                    bc:11:d6:fe:62:a4:98:1d:0f:59:28:9a:a1:f0:8d:
                    54:e0:e9:42:7f:62:82:3b:5d:b5:30:e0:01:39:3c:
                    54:0a:18:45:ab:80:f3:a2:5e:32:bc:ca:46:6e:b5:
                    33:a3:0b:21:a9:6b:91:63:f8:f7:ee:26:2c:ad:bd:
                    67:f7:93:48:08:b4:a1:4e:15:55:96:15:f9:4f:e8:
                    ba:2e:a1:10:a0:b4:85:b9:0a:b8:61:69:05:b6:c8:
                    d6:6a:89:2c:92:3c:04:53:81:b3:25:e6:ed:87:54:
                    5d:d4:90:e5:2b:06:b9:02:96:67:38:4c:57:3f:6e:
                    87:b0:9b:e0:35:75:3c:08:86:22:c2:d0:c6:70:ed:
                    7d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D8:65:0D:D4:0B:7E:FD:F2:4C:2B:34:50:23:C2:85:FE:F1:87:9A
            X509v3 Authority Key Identifier:
                keyid:42:68:E7:D6:8A:D4:34:C8:00:D3:E6:3B:B4:8A:D3:78:43:66:ED:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/4268E7D68AD434C800D3E63BB48AD3784366EDEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4268E7D68AD434C800D3E63BB48AD3784366EDEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/3138312e3139312e3132302e302f32322d3234203d3e20323636303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:54:e7:c6:f2:a2:1c:d0:3b:8f:6e:5d:12:ca:fe:96:ab:
         59:38:84:7e:9f:25:b4:4e:56:2c:f3:fc:2f:9e:1c:7f:dd:5e:
         54:0e:09:d8:4c:89:49:73:e4:56:3d:27:aa:6e:df:82:b7:f2:
         d9:89:c9:77:7e:7b:39:7f:6c:05:3c:a1:ec:00:46:92:0a:35:
         87:12:51:2d:b5:42:c9:24:6f:23:33:4f:8c:15:bf:28:7a:94:
         aa:05:e2:e5:be:38:79:30:bd:97:d1:38:9a:51:e9:66:08:e8:
         89:e3:df:b6:21:80:a2:66:1a:1e:49:bc:e2:1a:32:46:b0:e6:
         40:31:46:e6:65:31:69:ca:8f:2a:24:52:c2:ac:e6:ef:38:fd:
         df:20:a7:d1:20:fc:55:c0:68:6e:a9:d3:d3:af:0e:30:d2:c7:
         6d:4f:8e:e0:36:a7:de:91:ca:3e:b4:5f:6d:d4:c0:fe:31:c2:
         27:26:14:ae:12:72:2e:3e:1f:0f:cd:25:3b:23:67:4a:89:ff:
         03:60:30:9a:72:da:b9:8b:7c:41:08:51:5c:44:7d:9f:59:b8:
         db:b9:cc:2b:63:2e:92:f9:6a:7b:85:54:65:a2:27:7c:26:37:
         61:74:71:2e:14:8d:d4:e2:aa:bf:5a:71:c8:f9:57:16:89:f0:
         26:f7:1b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org