Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3138312e3139312e3230302e302f32322d3232203d3e203631363738.roa
File:                     3138312e3139312e3230302e302f32322d3232203d3e203631363738.roa (raw, json)
Hash identifier:          lIR86yENLmfre4/6kjSpT2uiULWSv7ks+gTur5bU9Cg=
Subject key identifier:   E2:CA:F5:79:61:22:E6:46:9F:76:B4:B0:12:D5:E0:C5:5E:73:7E:E4
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       5347E3C33EB9374BCD179BD74C06BE9F2902DD1A
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3138312e3139312e3230302e302f32322d3232203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:45:50 +0000
ROA not before:           Tue 24 Oct 2023 12:40:50 +0000
ROA not after:            Tue 22 Oct 2024 12:45:50 +0000
asID:                     61678
IP address blocks:        181.191.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:47:e3:c3:3e:b9:37:4b:cd:17:9b:d7:4c:06:be:9f:29:02:dd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:40:50 2023 GMT
            Not After : Oct 22 12:45:50 2024 GMT
        Subject: CN=E2CAF5796122E6469F76B4B012D5E0C55E737EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:e8:c6:45:7d:9f:62:ce:6b:e9:bb:a2:02:
                    40:75:b7:37:c9:e6:5c:0f:fb:52:ba:b6:64:6b:a2:
                    27:ac:8d:01:be:26:7d:a6:b0:ee:ed:82:16:9d:e1:
                    0c:ee:07:12:ee:2e:68:79:ec:a0:5a:31:df:44:5c:
                    a5:cb:2c:ed:14:44:da:48:3c:fb:10:6f:f7:68:7f:
                    16:93:6c:06:9a:04:02:ea:13:dd:60:6d:4a:6c:07:
                    89:d3:66:50:7a:5b:b6:b2:13:49:51:1f:20:7d:14:
                    b6:2f:ac:f1:84:5b:c1:f8:eb:f8:5c:73:a3:90:07:
                    f9:bc:e5:67:6e:74:3b:ee:3a:64:30:1c:32:01:7a:
                    36:5e:d1:b9:b2:57:df:78:26:28:04:ed:fe:d8:d4:
                    2d:88:a7:e8:79:bd:0e:68:3d:ea:65:8a:cf:6a:3d:
                    75:87:52:0c:19:e5:4e:f1:7a:14:bf:27:69:50:68:
                    a8:46:74:3e:a0:cf:14:ca:92:30:f0:ef:a8:f9:7c:
                    02:a4:26:f3:fc:e7:3d:10:d5:47:d3:ce:5f:42:ce:
                    84:63:d0:6f:26:f1:d7:6c:2d:51:e3:05:d4:32:c6:
                    c5:48:28:cd:05:7a:a6:5c:7e:7e:7d:55:9c:f6:77:
                    ca:fa:d2:d8:fc:28:65:b0:64:3c:f4:ce:ae:93:9b:
                    96:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CA:F5:79:61:22:E6:46:9F:76:B4:B0:12:D5:E0:C5:5E:73:7E:E4
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3138312e3139312e3230302e302f32322d3232203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:15:25:72:02:ec:d9:69:8a:cc:e8:14:a2:4d:fb:cb:59:85:
         31:0a:a8:c0:49:8e:94:97:01:76:a7:86:17:e4:cc:37:e9:ed:
         d9:60:c8:59:0a:98:17:e7:f1:76:c1:02:9a:78:41:d1:56:b2:
         65:39:cc:aa:b1:09:9c:4d:f3:25:6e:2a:29:62:88:f8:bd:a8:
         78:22:65:ff:17:4e:b1:52:28:9f:05:12:66:1b:05:9f:53:2f:
         c1:be:32:15:53:8d:79:c1:dc:84:c7:66:68:e1:6b:96:78:67:
         4a:a7:44:d5:12:2a:54:f4:6f:b4:f0:31:43:bd:51:c9:4d:36:
         d7:36:c0:58:d5:ba:41:84:c2:9f:34:89:95:94:ae:29:87:71:
         07:b5:c3:41:d0:a5:ca:56:65:51:ba:cc:53:ed:72:4c:74:d0:
         1c:a9:ae:be:89:11:4f:5f:f8:fc:f3:78:69:42:ee:7b:42:a7:
         f3:ec:34:e0:df:2a:fb:5c:77:e0:4d:88:30:91:3c:21:e9:2e:
         3a:01:d5:7d:84:aa:98:97:48:06:3e:c5:53:ff:d0:75:e7:2a:
         29:7d:92:7d:8a:cf:c7:32:2b:ab:c6:1c:1b:03:c8:6b:6e:07:
         88:9a:92:4c:b5:c2:df:a0:bc:1f:38:41:85:df:b9:e0:16:8f:
         95:e6:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org