Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130342e302f32332d3233203d3e20323731333930.roa
File:                     3138312e3138392e3130342e302f32332d3233203d3e20323731333930.roa (raw, json)
Hash identifier:          AAiBjkHgI/Ke53bgpKs9qb9D5YcYv6DokUqszHqGbfU=
Subject key identifier:   6C:1E:43:14:FD:69:4B:D0:F3:F8:A3:BA:20:77:52:6C:7D:B0:5A:98
Certificate issuer:       /CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
Certificate serial:       64B997E22D774E4A9B8E21055A9263FA0FE24524
Authority key identifier: 4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130342e302f32332d3233203d3e20323731333930.roa
Signing time:             Fri 12 Apr 2024 16:19:57 +0000
ROA not before:           Fri 12 Apr 2024 16:14:57 +0000
ROA not after:            Fri 11 Apr 2025 16:19:57 +0000
asID:                     271390
IP address blocks:        181.189.104.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b9:97:e2:2d:77:4e:4a:9b:8e:21:05:5a:92:63:fa:0f:e2:45:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
        Validity
            Not Before: Apr 12 16:14:57 2024 GMT
            Not After : Apr 11 16:19:57 2025 GMT
        Subject: CN=6C1E4314FD694BD0F3F8A3BA2077526C7DB05A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:65:1b:06:53:c5:63:b3:e9:38:7c:75:f4:
                    a3:eb:6e:f5:8c:a4:d3:54:e2:8b:74:15:a7:ab:3c:
                    4a:db:bf:d8:1e:c5:a1:8d:b0:63:c2:f3:ca:fa:e6:
                    23:67:fe:68:fe:73:4e:1a:f1:73:1f:a9:f7:ea:9d:
                    1e:0a:68:62:e4:d7:32:10:8d:6f:21:4d:51:14:36:
                    80:30:3c:54:96:fd:c9:5b:8b:92:8d:23:35:13:17:
                    33:23:74:fe:94:84:cb:fd:8d:b5:7e:7e:62:fb:24:
                    3a:35:43:10:a7:f1:ac:82:31:e8:c8:45:31:5e:c0:
                    d5:1b:13:ff:b9:83:6c:df:58:78:e3:e4:25:b3:00:
                    3d:78:3d:49:b1:4d:f9:1a:64:a5:e4:a5:80:1a:3d:
                    e0:3a:e2:65:61:26:af:2a:14:88:6d:c9:bd:bd:81:
                    b6:06:c5:87:33:97:5f:a4:d9:47:c7:af:23:10:27:
                    0b:63:ce:a8:fd:96:61:00:aa:6f:81:88:21:ee:b6:
                    57:4f:54:8f:b2:09:92:0e:94:49:3e:69:d7:6e:c4:
                    07:9e:f5:3e:0f:4f:85:23:2d:99:77:ce:7b:2b:f8:
                    69:ad:eb:45:62:ce:e7:2c:b0:ad:d5:87:c3:7e:32:
                    53:e8:09:71:36:13:a8:e8:93:25:ec:a1:47:04:34:
                    12:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1E:43:14:FD:69:4B:D0:F3:F8:A3:BA:20:77:52:6C:7D:B0:5A:98
            X509v3 Authority Key Identifier:
                keyid:4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130342e302f32332d3233203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:29:b3:da:03:1a:7a:47:82:8a:5d:18:b6:ac:80:cb:c2:80:
         8c:32:fc:b6:d7:1c:96:2c:1c:bf:7e:33:82:5d:04:54:5f:67:
         cb:3c:63:94:c6:26:99:c3:f5:5a:f2:26:c3:b1:27:c8:82:69:
         23:ef:3d:08:79:70:90:bd:85:bb:2c:c3:41:19:3d:37:7f:8e:
         5b:17:2a:41:18:dc:5d:17:a3:29:42:7a:76:f9:9c:63:15:cf:
         a1:c0:ad:2a:b4:81:da:57:f8:ad:2c:1e:0f:1a:d3:e7:f6:ed:
         71:3b:73:35:26:28:1f:b5:5e:18:39:f5:00:61:d5:b6:e5:66:
         bf:04:6a:fd:34:f8:89:c6:31:f1:9e:0b:93:d3:be:86:c1:56:
         3d:84:00:cc:8a:dd:84:d9:6d:21:b7:7a:89:1c:23:5f:b3:2f:
         c8:a9:0d:c1:82:2d:97:38:f2:46:c7:e2:3f:7a:8c:e0:d7:55:
         35:20:2d:03:4b:d6:9d:97:2f:4a:41:a5:e9:ab:6b:55:02:c7:
         87:bb:9e:d9:29:47:ca:7b:90:ed:01:77:9c:23:d2:15:55:95:
         7b:01:77:a0:c2:7b:2a:42:b9:69:81:1b:c8:ca:18:56:47:b3:
         52:7a:12:d4:60:bc:26:9a:a4:4a:aa:5e:a0:72:b7:b2:90:1f:
         50:8a:bf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org