Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/0/3138312e3232342e382e302f32322d3234203d3e20323731343234.roa
File:                     3138312e3232342e382e302f32322d3234203d3e20323731343234.roa (raw, json)
Hash identifier:          NU9KfvXjAdUkVVOARdz2juPDOMFoTkyec1NfEzrZZ/U=
Subject key identifier:   43:07:84:17:12:50:69:98:3C:53:33:9F:41:69:79:EA:63:12:8A:32
Certificate issuer:       /CN=4F981104ADBA2CFF53B3D12A607771EC8089FFAB
Certificate serial:       3D363BF5136D1B317C63F9ABBB09D78BBD844B40
Authority key identifier: 4F:98:11:04:AD:BA:2C:FF:53:B3:D1:2A:60:77:71:EC:80:89:FF:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F981104ADBA2CFF53B3D12A607771EC8089FFAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/0/3138312e3232342e382e302f32322d3234203d3e20323731343234.roa
Signing time:             Tue 31 Oct 2023 05:00:00 +0000
ROA not before:           Tue 31 Oct 2023 04:55:00 +0000
ROA not after:            Tue 29 Oct 2024 05:00:00 +0000
asID:                     271424
IP address blocks:        181.224.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:36:3b:f5:13:6d:1b:31:7c:63:f9:ab:bb:09:d7:8b:bd:84:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F981104ADBA2CFF53B3D12A607771EC8089FFAB
        Validity
            Not Before: Oct 31 04:55:00 2023 GMT
            Not After : Oct 29 05:00:00 2024 GMT
        Subject: CN=43078417125069983C53339F416979EA63128A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:07:1f:43:e6:a0:b6:b2:96:83:4d:f9:b0:84:
                    1a:ff:0b:b4:b7:d5:25:52:d7:4b:25:e4:08:b5:62:
                    6b:d6:78:8b:03:ad:e0:fa:07:ac:69:3e:54:dc:49:
                    52:3f:54:52:49:a2:c0:41:4f:91:13:b4:d5:77:9b:
                    ee:1a:5f:16:4a:b9:ef:e8:c3:50:a0:b3:ac:be:ba:
                    7c:63:26:d6:a8:e3:70:92:19:97:a8:cb:31:61:16:
                    a3:03:c5:49:51:02:5e:f0:50:cb:fc:8d:e6:2d:a1:
                    e5:7e:3d:f8:34:bf:f4:b1:f0:30:1b:a4:86:f0:c1:
                    f1:61:9d:91:78:fd:42:93:1a:66:e2:c6:af:bf:ef:
                    df:e9:92:35:5f:d1:67:09:58:dd:28:94:4d:cd:13:
                    c0:d2:87:d2:64:ac:a7:7d:e5:21:43:84:58:0c:e2:
                    fb:0b:7c:3e:3b:6b:f6:f1:6a:cd:54:1b:3d:cb:5f:
                    af:cc:fb:7f:05:e3:72:ba:b2:fc:cf:9d:dc:c9:a6:
                    e7:18:f2:d8:cd:f6:f7:10:58:b2:57:44:27:be:bf:
                    ae:2d:b3:c4:aa:02:bb:d5:36:85:6c:aa:d4:1b:c5:
                    dc:78:8a:1c:39:34:c7:60:de:ba:3e:8d:88:50:1d:
                    54:cf:e5:2f:96:83:e8:ec:67:a4:e6:d2:a4:4e:5c:
                    ea:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:07:84:17:12:50:69:98:3C:53:33:9F:41:69:79:EA:63:12:8A:32
            X509v3 Authority Key Identifier:
                keyid:4F:98:11:04:AD:BA:2C:FF:53:B3:D1:2A:60:77:71:EC:80:89:FF:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/0/4F981104ADBA2CFF53B3D12A607771EC8089FFAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F981104ADBA2CFF53B3D12A607771EC8089FFAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/0/3138312e3232342e382e302f32322d3234203d3e20323731343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:a5:ce:33:a0:ae:85:69:8a:c1:6a:07:ae:71:fa:3e:18:ec:
         d4:62:f0:e1:29:20:b3:0b:bf:b0:b4:43:06:d6:fa:5e:18:f4:
         85:0a:1a:df:90:b3:07:07:47:ec:dc:4b:71:e6:3b:67:15:d9:
         11:f6:f4:4b:69:5a:d5:1c:32:09:83:e0:bf:52:e3:8e:fb:7e:
         1d:3b:b9:ad:74:21:ba:0c:5c:33:57:ea:53:fd:60:89:0f:ed:
         4c:81:57:f3:dd:eb:89:a6:56:79:f3:e6:51:0a:6a:62:17:15:
         17:20:e2:97:09:4e:41:39:15:f3:48:e3:88:a3:50:62:cc:70:
         a4:71:17:89:dc:a3:d0:10:0c:f7:d7:8a:a3:14:ad:60:37:fb:
         03:c7:32:ff:56:33:57:d0:3b:a3:c6:88:6a:df:3b:02:9a:49:
         a8:0c:5d:fa:0b:6d:60:38:d5:3d:68:a6:54:87:97:74:77:9b:
         8c:2d:5d:6c:4d:cf:9e:81:53:c5:93:6c:02:21:ae:87:47:56:
         55:78:a7:c1:a2:3e:c1:cb:bd:4e:96:00:be:2a:3e:cb:83:55:
         e1:9e:2d:2b:e2:aa:b8:47:e1:6f:b2:e9:7a:83:26:32:f6:40:
         15:2d:b7:08:2f:d4:f9:9c:25:61:f0:05:87:31:6e:0e:63:c1:
         ef:0d:e9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:09 2024 by rpki-client on console-fra.rpki-client.org