Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/3138312e3233332e33322e302f32322d3332203d3e20323732353631.roa
File:                     3138312e3233332e33322e302f32322d3332203d3e20323732353631.roa (raw, json)
Hash identifier:          gz3yhgNtTYqYUrwGzQ6EL9L2JvDovRyTCVl4c0VyAsg=
Subject key identifier:   83:5F:8A:10:79:10:88:9D:32:F4:AC:1A:BD:9F:77:F3:5E:9F:0D:68
Certificate issuer:       /CN=607CDFBA3079E20B9565366ACED071C47C6991A9
Certificate serial:       609C7ED2BAF3660949E85FCC4AEC776E11A7F15F
Authority key identifier: 60:7C:DF:BA:30:79:E2:0B:95:65:36:6A:CE:D0:71:C4:7C:69:91:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/607CDFBA3079E20B9565366ACED071C47C6991A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/3138312e3233332e33322e302f32322d3332203d3e20323732353631.roa
Signing time:             Fri 24 Mar 2023 01:09:41 +0000
ROA not before:           Fri 24 Mar 2023 01:04:41 +0000
ROA not after:            Fri 22 Mar 2024 01:09:41 +0000
asID:                     272561
IP address blocks:        181.233.32.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9c:7e:d2:ba:f3:66:09:49:e8:5f:cc:4a:ec:77:6e:11:a7:f1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607CDFBA3079E20B9565366ACED071C47C6991A9
        Validity
            Not Before: Mar 24 01:04:41 2023 GMT
            Not After : Mar 22 01:09:41 2024 GMT
        Subject: CN=835F8A107910889D32F4AC1ABD9F77F35E9F0D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:9c:de:6f:63:df:bb:6c:95:18:6f:36:c7:
                    c6:4e:63:2b:c8:91:ea:00:fc:b1:d1:63:8d:a1:a9:
                    85:65:a6:d2:f4:60:f0:32:17:6f:4e:8b:98:94:c2:
                    13:16:1f:b5:21:ae:c0:75:8f:cb:ee:05:e6:be:f7:
                    eb:81:5f:c1:9d:84:99:2c:d7:78:d0:a3:6c:16:f0:
                    d7:75:0c:6c:77:8e:7a:83:0b:2c:60:d8:37:d3:6f:
                    07:41:ab:f8:6c:bb:d7:a2:6a:39:d3:c9:63:c8:8f:
                    74:ca:dc:41:da:b2:15:fa:07:5e:35:ab:45:fe:bf:
                    69:12:28:67:df:3a:e2:cc:e8:b9:1d:b9:50:93:2b:
                    60:4a:a3:86:3c:6e:e7:c3:67:93:cc:76:de:5e:d0:
                    3b:ca:db:43:7b:6f:49:97:29:b6:c0:7d:f8:51:02:
                    08:30:86:62:f5:3e:f4:00:4d:ae:4c:68:62:70:f4:
                    f8:64:11:b3:75:4e:83:c0:04:b0:7f:49:3d:0a:84:
                    02:f8:b5:c4:ae:a2:f0:f7:d9:a4:1c:99:5f:a2:06:
                    9c:e6:0a:d3:e0:8d:24:6c:59:e5:ad:c9:d3:35:13:
                    ab:79:8f:db:c1:c3:0b:e1:22:d3:86:3a:37:3f:bd:
                    79:11:cb:3e:bc:ae:0a:36:12:2a:44:40:22:df:b0:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5F:8A:10:79:10:88:9D:32:F4:AC:1A:BD:9F:77:F3:5E:9F:0D:68
            X509v3 Authority Key Identifier:
                keyid:60:7C:DF:BA:30:79:E2:0B:95:65:36:6A:CE:D0:71:C4:7C:69:91:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/607CDFBA3079E20B9565366ACED071C47C6991A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/607CDFBA3079E20B9565366ACED071C47C6991A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/3138312e3233332e33322e302f32322d3332203d3e20323732353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:56:e4:f4:24:a2:55:cf:79:bc:2c:b6:25:4c:49:88:f7:a6:
         64:87:9d:78:25:bc:4c:c1:a0:68:f0:91:8a:60:b9:97:78:89:
         16:aa:74:72:89:81:74:e0:27:01:02:32:a6:8a:e7:e5:cf:43:
         32:88:c1:73:b8:0f:46:cb:cb:79:79:c1:88:35:2d:7a:c4:13:
         11:9c:be:30:94:0f:43:07:5b:75:4c:0b:3f:a5:8e:77:57:ad:
         76:44:19:13:28:ac:ec:b8:71:8c:df:68:c9:80:98:57:bc:2d:
         32:2e:65:c2:44:57:91:11:b0:42:35:28:58:10:44:cb:f3:22:
         a5:43:a6:2b:72:0d:54:3d:36:aa:26:26:f8:b0:4d:48:6b:f2:
         ba:99:ba:2f:f1:69:fb:41:be:4a:1a:24:80:54:b0:98:87:52:
         8b:0f:63:a5:0f:29:1e:ba:b2:ae:4e:af:b2:be:68:e7:0a:1f:
         f4:7f:3a:8f:36:e8:68:fd:ae:e8:f3:90:bb:f5:91:ef:1d:6d:
         67:ef:78:32:6a:19:bb:7f:65:5d:ce:42:4c:24:5c:c4:2f:86:
         58:70:af:d8:4d:e5:38:f7:f6:e8:4d:fa:2d:78:42:8b:93:05:
         52:d5:ae:a7:7d:c7:04:f4:5c:97:a8:30:f4:92:78:c8:db:47:
         a2:34:cb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org