Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/0/3138312e3139312e3138302e302f32322d3232203d3e20323637343334.roa
File:                     3138312e3139312e3138302e302f32322d3232203d3e20323637343334.roa (raw, json)
Hash identifier:          wMJwTNvpqlOed8ClhMsU60eI5Gn4RPmxhINqCLd06wI=
Subject key identifier:   E4:00:3C:9E:F5:9F:D6:32:80:7E:E0:D2:FA:70:2A:2D:CD:38:9E:C3
Certificate issuer:       /CN=2ED4A75C3B268064A6DAF31B405A577C5C320F23
Certificate serial:       6718BC2B39ACF0E4569924598C8739538A3AB7F1
Authority key identifier: 2E:D4:A7:5C:3B:26:80:64:A6:DA:F3:1B:40:5A:57:7C:5C:32:0F:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ED4A75C3B268064A6DAF31B405A577C5C320F23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/0/3138312e3139312e3138302e302f32322d3232203d3e20323637343334.roa
Signing time:             Tue 20 Feb 2024 13:41:44 +0000
ROA not before:           Tue 20 Feb 2024 13:36:44 +0000
ROA not after:            Tue 18 Feb 2025 13:41:44 +0000
asID:                     267434
IP address blocks:        181.191.180.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:18:bc:2b:39:ac:f0:e4:56:99:24:59:8c:87:39:53:8a:3a:b7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED4A75C3B268064A6DAF31B405A577C5C320F23
        Validity
            Not Before: Feb 20 13:36:44 2024 GMT
            Not After : Feb 18 13:41:44 2025 GMT
        Subject: CN=E4003C9EF59FD632807EE0D2FA702A2DCD389EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:9d:b0:41:d2:5d:6f:13:79:34:31:90:e9:
                    d2:95:fd:ad:48:f1:a5:77:50:3c:39:29:5d:2b:09:
                    d1:3a:70:ee:77:07:2e:84:28:60:c6:a8:db:09:ec:
                    86:c0:30:a4:11:aa:48:79:f6:54:23:90:04:da:51:
                    6e:28:bc:9a:e1:3c:92:43:ca:b0:5c:a5:c7:21:90:
                    91:58:dd:51:52:44:b4:b7:59:e2:c6:d1:6b:5e:41:
                    1f:3f:bf:f6:06:21:04:5c:7f:08:69:f6:23:06:bd:
                    d9:2e:92:2a:1d:af:02:88:04:0f:69:51:a2:c1:0b:
                    14:43:26:1d:f6:f3:73:20:e8:da:07:02:d3:87:3e:
                    c7:4b:0c:dc:cb:24:26:b6:82:8b:36:0b:97:ce:17:
                    2a:1f:9c:30:ef:d1:07:ee:1c:76:3d:94:17:58:9f:
                    7c:00:4f:cd:ce:4f:73:7e:1d:ad:3f:49:78:a4:6f:
                    23:4b:5a:62:c5:00:32:91:aa:77:57:93:e9:9d:17:
                    2a:14:f5:e2:15:80:f5:2c:99:4a:ec:db:30:91:f7:
                    6e:d4:3f:08:76:35:08:9d:1a:1a:6f:29:08:f4:6b:
                    cb:72:06:bf:ad:c1:00:ec:fe:1c:52:84:51:ff:f4:
                    3c:5d:f8:63:5a:d7:7e:3d:9e:41:ee:5c:69:ad:2a:
                    b6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:00:3C:9E:F5:9F:D6:32:80:7E:E0:D2:FA:70:2A:2D:CD:38:9E:C3
            X509v3 Authority Key Identifier:
                keyid:2E:D4:A7:5C:3B:26:80:64:A6:DA:F3:1B:40:5A:57:7C:5C:32:0F:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/0/2ED4A75C3B268064A6DAF31B405A577C5C320F23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ED4A75C3B268064A6DAF31B405A577C5C320F23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/0/3138312e3139312e3138302e302f32322d3232203d3e20323637343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:c7:3b:0d:18:b6:9a:93:ae:6a:be:1d:61:71:de:c6:24:40:
         91:b0:09:16:63:0e:3c:d2:df:09:53:3b:2a:15:7b:3b:86:64:
         e5:f4:a7:04:84:32:d5:84:5b:eb:3f:0c:58:87:0f:b8:e1:47:
         10:f7:70:85:2b:2b:05:26:90:dd:7a:cb:4e:0c:0f:ad:be:a4:
         27:43:b8:20:f9:b8:15:e7:be:f6:c2:02:e4:66:66:09:cb:aa:
         81:c7:f4:bf:cd:d4:fc:24:4c:8a:7c:54:41:cf:4f:6f:b2:76:
         28:8c:b3:d6:67:53:61:7b:db:ba:22:fd:5e:b5:1e:dd:52:05:
         9f:39:83:99:a0:8d:36:05:11:00:7b:01:be:e2:88:4d:9b:7b:
         16:ab:73:a7:0b:86:83:e1:7f:ff:36:81:e7:7d:6e:38:3f:d9:
         ee:15:e7:15:d6:1a:0b:ce:d1:fc:55:13:7a:c5:1b:bc:e5:a0:
         90:a4:d1:b7:d2:79:99:cf:a4:4e:a4:5b:1d:e5:4f:79:0b:cc:
         32:0f:8f:b7:0e:9e:fd:8e:c0:10:25:5e:31:1d:65:31:ee:20:
         f6:dd:fc:3c:ba:7e:14:88:e0:dc:50:09:cd:f4:64:dd:6f:52:
         8b:6d:4a:38:d4:f5:75:26:78:85:fd:f5:31:1c:ec:99:5c:a1:
         4a:bc:10:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org