Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130342e302f32342d3234203d3e20323731333930.roa
File:                     3138312e3138392e3130342e302f32342d3234203d3e20323731333930.roa (raw, json)
Hash identifier:          LfxT1lXJn7O8D8nIK2sONferDM2peQXY/osC3kJVXPk=
Subject key identifier:   A3:20:F8:71:5E:A4:E0:F0:8E:C0:C6:C5:D6:19:E8:E9:C6:6E:4E:D1
Certificate issuer:       /CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
Certificate serial:       1CC308E8E751B3235B561D85CE6538684C46D7F5
Authority key identifier: 4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130342e302f32342d3234203d3e20323731333930.roa
Signing time:             Fri 12 Apr 2024 16:19:56 +0000
ROA not before:           Fri 12 Apr 2024 16:14:56 +0000
ROA not after:            Fri 11 Apr 2025 16:19:56 +0000
asID:                     271390
IP address blocks:        181.189.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c3:08:e8:e7:51:b3:23:5b:56:1d:85:ce:65:38:68:4c:46:d7:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
        Validity
            Not Before: Apr 12 16:14:56 2024 GMT
            Not After : Apr 11 16:19:56 2025 GMT
        Subject: CN=A320F8715EA4E0F08EC0C6C5D619E8E9C66E4ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:4e:b2:38:bf:05:45:f6:e3:e2:df:d5:44:
                    39:d5:0e:a2:bf:67:83:02:f2:8c:3e:4d:a0:6b:09:
                    8c:64:c0:3f:e1:63:7a:de:0a:09:bf:76:85:0c:3e:
                    6e:67:79:e9:0f:8b:ee:ee:56:8b:4d:e0:22:e4:ef:
                    bf:7a:e4:ab:98:13:5a:1b:dc:9f:7f:6b:f6:bf:4a:
                    39:10:36:bb:05:26:57:2a:7b:5b:ce:50:8c:b7:aa:
                    ca:38:b0:68:ea:c4:2f:67:38:9b:f4:ff:2a:2a:b1:
                    66:3e:fa:13:89:c4:2c:29:68:f0:19:90:a8:73:9a:
                    7e:c1:69:df:e4:e1:89:d4:f0:8a:af:75:c3:75:9c:
                    27:5b:d3:df:27:75:4a:79:2c:eb:20:23:c7:1b:ec:
                    ac:b2:f7:bd:45:8f:32:b4:8d:81:2d:5e:6a:1c:59:
                    90:be:89:d4:23:39:96:69:df:8e:79:bb:7d:fb:8e:
                    08:8f:39:ce:2a:75:15:6d:34:3c:f5:08:87:ce:7d:
                    12:83:14:79:79:8d:1f:a2:df:5c:69:5f:5f:47:7f:
                    cb:45:fc:b2:d9:3f:34:eb:20:ea:d4:29:9b:3f:d9:
                    6f:91:d5:33:e7:a1:7a:39:11:cd:80:bf:7b:0c:5b:
                    7c:8e:6d:98:b4:a8:96:da:29:fa:c8:da:c5:da:f9:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:20:F8:71:5E:A4:E0:F0:8E:C0:C6:C5:D6:19:E8:E9:C6:6E:4E:D1
            X509v3 Authority Key Identifier:
                keyid:4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130342e302f32342d3234203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:39:49:48:5b:66:f5:59:16:71:e6:3d:df:74:c2:c2:b9:42:
         33:fe:de:15:20:36:b8:f7:43:f5:f5:e4:b7:0a:82:07:dd:b6:
         86:c0:bf:63:31:30:ce:15:88:af:af:ac:57:e6:a0:3e:4b:ae:
         50:a0:c5:9b:ee:24:c1:aa:a3:7b:f8:f4:ed:52:c7:72:47:9a:
         2a:c6:91:89:1a:9a:58:6c:76:0d:16:2b:4e:45:cb:3f:2c:0c:
         59:94:08:7c:0e:ff:af:f8:64:93:3e:a2:7e:c3:58:a2:31:2a:
         1f:2f:c5:3f:04:c4:50:c2:06:0a:fb:57:3f:15:64:0a:da:9c:
         bd:bb:5e:70:2e:09:5e:cc:51:7b:3c:25:37:2f:26:cf:60:d2:
         e2:f4:74:58:dd:6a:62:cb:b8:86:c8:71:7b:48:0b:17:88:0c:
         06:ee:c3:5b:61:c6:b5:98:25:25:e3:65:70:59:43:8f:c4:19:
         1e:a4:a8:37:11:16:32:4f:af:f2:43:5f:cf:7b:f0:56:17:f1:
         d6:c6:eb:5c:cd:87:4f:91:b7:53:55:e8:d4:c5:ef:77:d1:06:
         78:14:b8:72:d9:b8:db:2b:d8:cc:3d:f1:26:5e:a7:3a:fb:50:
         a4:c8:6e:41:4e:ab:cf:a9:fd:dd:a0:ab:02:f7:a7:d9:ee:8f:
         f0:85:c8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org