Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/0/3138312e3233322e3230302e302f32322d3234203d3e20323731343839.roa
File:                     3138312e3233322e3230302e302f32322d3234203d3e20323731343839.roa (raw, json)
Hash identifier:          dIsbynozdBPX15t2ajMUaxf6kKAUYzFC44iNlmxLFR0=
Subject key identifier:   64:54:17:E2:E1:13:89:90:A4:86:1D:20:D5:71:27:6F:50:CF:4C:FF
Certificate issuer:       /CN=A432D1CCC67116292BF0943CA38D4C9A972E25AC
Certificate serial:       4B0D98173CFC701F8F73DFDF1E4934725E35F9C0
Authority key identifier: A4:32:D1:CC:C6:71:16:29:2B:F0:94:3C:A3:8D:4C:9A:97:2E:25:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A432D1CCC67116292BF0943CA38D4C9A972E25AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/0/3138312e3233322e3230302e302f32322d3234203d3e20323731343839.roa
Signing time:             Mon 04 Dec 2023 20:00:00 +0000
ROA not before:           Mon 04 Dec 2023 19:55:00 +0000
ROA not after:            Mon 02 Dec 2024 20:00:00 +0000
asID:                     271489
IP address blocks:        181.232.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0d:98:17:3c:fc:70:1f:8f:73:df:df:1e:49:34:72:5e:35:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A432D1CCC67116292BF0943CA38D4C9A972E25AC
        Validity
            Not Before: Dec  4 19:55:00 2023 GMT
            Not After : Dec  2 20:00:00 2024 GMT
        Subject: CN=645417E2E1138990A4861D20D571276F50CF4CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:c4:e2:fb:75:2b:0d:9a:4c:91:d5:85:ca:
                    f7:c2:bb:5a:2e:4f:7f:32:2a:c7:0a:be:d4:c4:7d:
                    70:4e:5b:ed:41:3e:b7:7c:70:70:be:c8:55:e4:54:
                    eb:23:6e:a6:9d:65:76:6c:c1:06:d9:46:0d:7c:7a:
                    0c:32:a2:a1:ac:28:00:87:85:a0:f0:76:5f:ee:14:
                    97:c2:b7:18:68:1e:a4:8c:bc:78:1c:ef:f1:64:68:
                    ec:11:ab:e0:0e:3d:d6:6f:e1:60:6e:ab:39:dc:a1:
                    3d:b8:8c:3b:2f:93:b2:c8:75:e5:1f:60:90:4f:63:
                    19:5e:9d:f9:d0:82:03:ba:46:39:e4:c2:7b:6b:03:
                    be:87:e9:2c:75:bc:6d:98:af:7d:c7:4a:ce:97:48:
                    88:f4:a6:7b:8f:35:e5:3b:f6:7f:ac:a2:bc:5f:a3:
                    c3:44:d5:14:64:7e:2a:32:54:1d:a6:11:ec:4d:6b:
                    b0:64:92:39:67:e5:4b:36:b0:af:d9:9b:cf:cf:e2:
                    93:56:fa:51:c8:ea:6e:26:fc:b9:a3:54:68:28:91:
                    69:88:69:59:a2:95:ae:f4:c0:93:ef:fc:97:62:48:
                    f9:ae:43:94:a2:b4:f6:d0:80:22:fb:02:8b:6d:68:
                    34:9b:0c:5d:2d:79:db:fd:42:21:48:39:8e:ea:40:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:54:17:E2:E1:13:89:90:A4:86:1D:20:D5:71:27:6F:50:CF:4C:FF
            X509v3 Authority Key Identifier:
                keyid:A4:32:D1:CC:C6:71:16:29:2B:F0:94:3C:A3:8D:4C:9A:97:2E:25:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/0/A432D1CCC67116292BF0943CA38D4C9A972E25AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A432D1CCC67116292BF0943CA38D4C9A972E25AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/0/3138312e3233322e3230302e302f32322d3234203d3e20323731343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:89:6d:01:1e:6c:a4:e9:21:db:0c:0c:5e:39:81:5b:3c:90:
         83:50:c6:d4:4c:e1:54:21:88:b6:f3:61:58:b3:1c:70:ea:ab:
         d6:d5:55:51:95:d7:4d:65:d0:ec:4e:fb:64:27:ea:b4:3f:1e:
         ca:5b:b1:7b:31:d1:92:cf:c1:ff:3b:b9:a2:23:d3:f2:21:c4:
         e8:c6:72:62:53:25:4a:53:38:20:5d:2c:74:4d:bb:b6:6a:1f:
         8b:38:c7:d0:bb:d3:df:ea:3e:3b:e1:0b:00:b5:49:13:40:02:
         4b:2e:5e:5f:eb:25:df:88:ed:90:a2:de:f9:84:62:af:3b:bc:
         a5:90:37:08:06:7a:3f:1f:48:df:2e:cb:95:d5:12:d1:d1:8a:
         09:17:11:55:d7:57:e0:b2:a5:9f:df:d3:d4:26:98:d0:69:2e:
         45:19:91:14:91:00:64:cb:da:ce:e5:90:0a:cd:3e:3a:11:80:
         8c:b1:e2:65:eb:51:41:61:97:ca:3e:20:53:57:5a:d3:18:66:
         96:f9:4b:e2:b5:1f:7d:f2:59:a1:0d:b1:7b:b9:28:a5:e0:06:
         18:a8:9c:50:eb:b6:fc:e2:e1:6d:32:b9:01:f9:1e:1f:3e:bc:
         d5:87:e2:38:84:9e:0b:95:65:8f:3e:64:1b:ec:75:a5:f8:bf:
         a9:1a:6c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org