Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/3138312e3233322e3234302e302f32322d3234203d3e20323731353530.roa
File:                     3138312e3233322e3234302e302f32322d3234203d3e20323731353530.roa (raw, json)
Hash identifier:          AeFcgrp2WLfx9/fVkvhJe/8mqfAItU2ZJ6kfGLJR0ns=
Subject key identifier:   60:CB:D0:8F:CB:CD:B4:CE:D3:5D:F0:82:57:BC:82:DC:A1:91:34:90
Certificate issuer:       /CN=2FF76076754B4C7F56163A6D57EC01836F824336
Certificate serial:       43DDEF8E6314238CCBA04E5E51E6FCFD10550141
Authority key identifier: 2F:F7:60:76:75:4B:4C:7F:56:16:3A:6D:57:EC:01:83:6F:82:43:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF76076754B4C7F56163A6D57EC01836F824336.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/3138312e3233322e3234302e302f32322d3234203d3e20323731353530.roa
Signing time:             Fri 21 Jul 2023 22:17:18 +0000
ROA not before:           Fri 21 Jul 2023 22:12:18 +0000
ROA not after:            Fri 19 Jul 2024 22:17:18 +0000
asID:                     271550
IP address blocks:        181.232.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:dd:ef:8e:63:14:23:8c:cb:a0:4e:5e:51:e6:fc:fd:10:55:01:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF76076754B4C7F56163A6D57EC01836F824336
        Validity
            Not Before: Jul 21 22:12:18 2023 GMT
            Not After : Jul 19 22:17:18 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b1:b4:4c:93:1a:ad:c0:12:41:4e:b1:b6:44:
                    74:35:80:94:e7:82:62:11:f4:64:7b:cb:b3:b6:50:
                    6b:2f:75:5e:e8:da:cb:bb:eb:4e:ce:a9:c5:ac:88:
                    5e:b8:2b:db:dd:2c:04:bd:86:7f:3d:e3:ef:b8:c7:
                    da:52:98:72:dd:6e:8a:cc:ee:cf:58:20:1c:1e:38:
                    38:c5:47:de:49:28:1d:52:be:36:96:57:e0:30:2b:
                    e3:75:bb:91:57:b3:0d:88:f5:f5:15:46:df:ec:e2:
                    2e:8c:99:10:01:6a:7e:d4:55:89:62:a0:d9:17:0e:
                    d9:39:f0:da:5c:00:d3:4e:15:14:92:ee:ab:6e:5c:
                    92:bf:5e:da:a4:31:5c:36:0c:5d:f8:57:36:37:ed:
                    9b:ba:36:69:5a:e3:62:f3:f9:ed:3c:10:ba:c0:de:
                    2f:b4:6a:3f:1d:84:f9:b1:66:07:4c:de:87:86:57:
                    a3:0b:96:b8:f3:d7:a0:fe:23:90:f9:17:08:bd:8c:
                    e2:b7:26:f8:e2:f6:35:75:0b:54:96:fb:99:6e:02:
                    66:a1:56:a0:82:6c:8b:88:8d:de:64:ec:d0:e6:1a:
                    d1:7a:fd:45:b7:ec:36:13:af:35:4b:92:49:fe:29:
                    20:17:af:ad:10:34:68:33:c1:53:62:53:ae:4c:f0:
                    08:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CB:D0:8F:CB:CD:B4:CE:D3:5D:F0:82:57:BC:82:DC:A1:91:34:90
            X509v3 Authority Key Identifier:
                keyid:2F:F7:60:76:75:4B:4C:7F:56:16:3A:6D:57:EC:01:83:6F:82:43:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/2FF76076754B4C7F56163A6D57EC01836F824336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF76076754B4C7F56163A6D57EC01836F824336.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/3138312e3233322e3234302e302f32322d3234203d3e20323731353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:77:9a:36:7f:3f:11:4c:f5:da:09:8f:10:e7:11:fc:52:f4:
         7e:97:20:d1:d0:f1:70:e3:ac:5f:da:4b:ed:ba:41:6c:e6:57:
         30:52:4e:6b:ff:63:66:d7:1e:d7:6c:dc:c0:b6:3b:32:48:21:
         a4:02:c6:7d:cc:75:db:7f:ac:c8:4d:11:65:bd:a1:ac:7a:fd:
         81:38:0b:9b:e1:8b:8e:bb:90:41:db:a1:d9:a2:0d:2b:4d:be:
         d4:49:e4:3a:65:ab:37:dc:2d:94:d9:94:f5:71:49:2b:87:aa:
         4f:5c:ea:00:8e:b7:83:44:04:f5:c7:6f:08:88:7b:97:2c:77:
         30:8e:5a:6d:42:4d:76:01:8f:20:d2:c3:f9:fb:eb:c5:17:b2:
         16:92:af:ac:2b:66:09:e3:08:c8:1d:c1:b0:35:64:f6:3e:c8:
         d2:0c:10:0c:f5:dd:7c:c3:4e:b8:bf:f7:c5:b8:21:43:f1:b2:
         97:e8:90:9f:b3:a4:11:da:6a:53:1c:4a:36:4a:af:eb:56:b8:
         51:20:88:99:22:e5:80:69:5a:4a:13:f8:52:ce:7c:1d:30:42:
         d2:05:8c:83:a1:a7:7c:0e:0c:44:e2:34:0e:a5:0e:90:e1:28:
         31:20:a6:9a:de:15:ec:b7:0c:30:5e:a9:59:45:37:7b:79:95:
         ff:e5:36:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org