Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HzK6WDEqZEmQ4Qu7r8VfGkrSSiBUkm2ZcHQfoZUJ7Zb/0/3138312e3139312e37362e302f32322d3234203d3e20323637343532.roa
File:                     3138312e3139312e37362e302f32322d3234203d3e20323637343532.roa (raw, json)
Hash identifier:          DOUZkl4KWDnibX6Oj8ljTLXO/m8zgwXmbO5bImABALs=
Subject key identifier:   26:A7:E5:01:3C:1D:CA:0C:06:4F:98:27:E1:10:25:DD:F1:2E:FB:C9
Certificate issuer:       /CN=9E6482567E854EC419F6D3F4ACA870FAE1EEB719
Certificate serial:       0FBDFF01C5D244D6722BC34926CC1AE802AA5E60
Authority key identifier: 9E:64:82:56:7E:85:4E:C4:19:F6:D3:F4:AC:A8:70:FA:E1:EE:B7:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E6482567E854EC419F6D3F4ACA870FAE1EEB719.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HzK6WDEqZEmQ4Qu7r8VfGkrSSiBUkm2ZcHQfoZUJ7Zb/0/3138312e3139312e37362e302f32322d3234203d3e20323637343532.roa
Signing time:             Mon 11 Jul 2022 19:28:00 +0000
ROA not before:           Mon 11 Jul 2022 19:23:00 +0000
ROA not after:            Mon 10 Jul 2023 19:28:00 +0000
asID:                     267452
IP address blocks:        181.191.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bd:ff:01:c5:d2:44:d6:72:2b:c3:49:26:cc:1a:e8:02:aa:5e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6482567E854EC419F6D3F4ACA870FAE1EEB719
        Validity
            Not Before: Jul 11 19:23:00 2022 GMT
            Not After : Jul 10 19:28:00 2023 GMT
        Subject: CN=3082010A0282010100A4FF4BA09D15814A8017CCF4DA1789F08AEF03FAF5CCB476E9A7144DF0BC99A5784B95016B8A047AF93614D96E3689996C4ABE9590E94C204D232397BB79BBC5AF01E9A487CF75093471A6F1544BE2D9254344C1D8B9D5AEF095E5812C44A2D6C5E54D479B1E9C873994E73B9AA560A9884F49D8912E76CC75D85169FBA5E3FC9720ECFCDA088E9D863BACBB44ADFE0C14DF2446CFC2B5A7104314F837AF47CDA0F9863C393BCDF09189658DE4CE88106696F2B8BF1E883FCF76AF3E36FEFF7EC3C756F26964D59BF74ACD9EBCF46D4E6FEC2702D373857C6A5721D71002371B73E03E074B9B23FF5BCDD3396B8A7C4ED414B967D2B34EC5DB0D0F2D89286CB70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ff:4b:a0:9d:15:81:4a:80:17:cc:f4:da:17:
                    89:f0:8a:ef:03:fa:f5:cc:b4:76:e9:a7:14:4d:f0:
                    bc:99:a5:78:4b:95:01:6b:8a:04:7a:f9:36:14:d9:
                    6e:36:89:99:6c:4a:be:95:90:e9:4c:20:4d:23:23:
                    97:bb:79:bb:c5:af:01:e9:a4:87:cf:75:09:34:71:
                    a6:f1:54:4b:e2:d9:25:43:44:c1:d8:b9:d5:ae:f0:
                    95:e5:81:2c:44:a2:d6:c5:e5:4d:47:9b:1e:9c:87:
                    39:94:e7:3b:9a:a5:60:a9:88:4f:49:d8:91:2e:76:
                    cc:75:d8:51:69:fb:a5:e3:fc:97:20:ec:fc:da:08:
                    8e:9d:86:3b:ac:bb:44:ad:fe:0c:14:df:24:46:cf:
                    c2:b5:a7:10:43:14:f8:37:af:47:cd:a0:f9:86:3c:
                    39:3b:cd:f0:91:89:65:8d:e4:ce:88:10:66:96:f2:
                    b8:bf:1e:88:3f:cf:76:af:3e:36:fe:ff:7e:c3:c7:
                    56:f2:69:64:d5:9b:f7:4a:cd:9e:bc:f4:6d:4e:6f:
                    ec:27:02:d3:73:85:7c:6a:57:21:d7:10:02:37:1b:
                    73:e0:3e:07:4b:9b:23:ff:5b:cd:d3:39:6b:8a:7c:
                    4e:d4:14:b9:67:d2:b3:4e:c5:db:0d:0f:2d:89:28:
                    6c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A7:E5:01:3C:1D:CA:0C:06:4F:98:27:E1:10:25:DD:F1:2E:FB:C9
            X509v3 Authority Key Identifier:
                keyid:9E:64:82:56:7E:85:4E:C4:19:F6:D3:F4:AC:A8:70:FA:E1:EE:B7:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HzK6WDEqZEmQ4Qu7r8VfGkrSSiBUkm2ZcHQfoZUJ7Zb/0/9E6482567E854EC419F6D3F4ACA870FAE1EEB719.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E6482567E854EC419F6D3F4ACA870FAE1EEB719.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HzK6WDEqZEmQ4Qu7r8VfGkrSSiBUkm2ZcHQfoZUJ7Zb/0/3138312e3139312e37362e302f32322d3234203d3e20323637343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:be:5a:37:70:dd:8a:a6:4e:d5:7d:fc:47:d3:23:97:95:55:
         c5:53:10:af:cd:e9:01:72:0a:f3:68:17:e8:d2:ee:03:94:bb:
         82:af:a0:2b:2b:68:c3:f4:5b:1c:ca:be:24:66:d5:52:4f:fc:
         9a:90:dc:27:97:83:fc:a1:82:02:ca:31:bd:cc:bb:f8:c4:7b:
         be:5c:6c:2a:66:87:24:c3:eb:50:6f:4d:05:25:5d:82:c4:e5:
         a8:26:c0:63:85:09:6d:ab:bf:76:0e:52:68:cc:86:34:ab:c5:
         1c:04:93:b4:d1:31:28:e2:a3:f4:22:7c:e1:ad:fb:44:d2:7c:
         ec:c2:d8:ce:0a:63:e9:46:e6:08:55:a0:b6:0a:b9:74:6d:49:
         96:b1:65:e2:f9:ee:85:4a:44:eb:67:f1:43:5f:53:d3:75:f9:
         ff:a9:7a:60:2e:db:3e:a1:92:00:c0:64:ec:cc:02:d4:52:2c:
         2c:61:d4:73:e8:0a:68:d0:75:b3:85:36:a5:0e:c1:4b:03:4a:
         18:2a:0d:8d:c3:00:f4:e4:53:0c:dd:19:38:27:6d:2f:ef:51:
         32:b0:dc:86:ed:c6:82:97:0b:6b:97:69:83:32:46:b8:bb:c7:
         04:9c:ee:2c:61:41:38:3c:f9:43:4e:59:cc:07:b7:d9:61:c2:
         c0:0b:81:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org