Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3138312e3139312e3230302e302f32322d3232203d3e203631363738.roa
File:                     3138312e3139312e3230302e302f32322d3232203d3e203631363738.roa (raw, json)
Hash identifier:          Y1clMWs5m+pUM7m6ZKrSHjLTq+iPMFVVC8t+eKvpDzo=
Subject key identifier:   61:60:75:64:44:07:9A:26:47:6A:A5:C3:0F:9A:27:81:D4:F0:47:E6
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       6D098756F64B64216574FF2558E24E77B83CFBD8
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3138312e3139312e3230302e302f32322d3232203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:15 +0000
ROA not before:           Wed 03 Apr 2024 21:41:15 +0000
ROA not after:            Wed 02 Apr 2025 21:46:15 +0000
asID:                     61678
IP address blocks:        181.191.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:09:87:56:f6:4b:64:21:65:74:ff:25:58:e2:4e:77:b8:3c:fb:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:15 2024 GMT
            Not After : Apr  2 21:46:15 2025 GMT
        Subject: CN=6160756444079A26476AA5C30F9A2781D4F047E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:19:44:9a:d9:79:38:a0:23:fd:61:be:a1:7a:
                    5d:c1:fb:b0:3c:8d:c4:f7:bb:cf:ec:55:e9:a6:6b:
                    46:30:99:54:c0:a6:60:b1:86:64:19:1d:54:a6:29:
                    7e:46:74:70:c5:41:7f:31:2e:94:66:cc:cb:c3:6e:
                    38:53:b4:33:df:98:d6:1d:c8:8d:82:7b:ea:be:14:
                    40:a5:e0:90:70:21:5d:ab:0d:9a:a3:40:d0:43:8f:
                    d8:94:65:34:21:53:1d:c0:96:38:cc:7f:06:78:07:
                    8b:e6:46:64:18:b5:ba:e8:0c:d7:02:f9:15:dd:3c:
                    4a:4b:31:b3:40:77:17:29:67:ce:fa:fa:c3:74:46:
                    e2:41:91:30:1f:5e:cc:46:24:e2:12:c3:6a:69:d1:
                    21:d2:9c:cc:37:43:5b:93:e5:c9:56:5c:54:f7:6b:
                    f6:92:e4:b4:03:01:0a:d0:19:a4:7a:ed:34:db:fb:
                    4a:34:cf:b0:a1:ce:f7:d6:c0:f0:74:f0:0c:05:6c:
                    22:28:2d:9a:19:14:3b:96:17:e4:dc:ff:b4:eb:93:
                    92:24:8c:4c:af:a6:bf:d4:67:06:74:60:d2:3f:34:
                    36:00:3b:5c:f6:a0:27:62:2a:a8:58:05:4b:e5:0b:
                    ce:e5:07:66:44:91:1a:65:01:05:64:1f:65:65:f9:
                    5f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:60:75:64:44:07:9A:26:47:6A:A5:C3:0F:9A:27:81:D4:F0:47:E6
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3138312e3139312e3230302e302f32322d3232203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:35:02:d0:6e:d4:5f:30:6d:33:4b:9b:fa:7d:40:fb:d2:15:
         cb:f0:bd:b9:35:04:fa:eb:3d:79:1b:54:15:c6:15:74:d4:f8:
         de:c2:0a:1a:ea:87:0f:ed:44:be:c3:6f:2a:80:11:72:06:4b:
         7b:c2:1a:af:93:8c:6b:6c:37:d6:7d:23:24:c5:d1:d4:ff:62:
         11:5c:df:5f:54:71:02:68:4a:12:25:5d:ba:39:14:8d:fc:c2:
         29:2d:41:c4:ba:62:70:54:03:07:94:50:16:39:7e:8e:fc:7d:
         de:5c:e5:b0:59:c5:36:a9:13:04:fd:5f:17:25:98:51:66:9c:
         a6:57:d1:5c:f1:0c:81:65:a6:28:a4:a5:11:89:66:08:dc:ea:
         5d:dd:10:59:c5:a7:20:bf:77:87:02:96:8b:a2:83:5b:a9:96:
         1c:ea:02:49:57:0f:aa:b4:ec:bc:3f:25:d6:8c:2f:f3:7f:79:
         94:77:76:53:7c:6b:c6:dd:00:a2:9c:f3:09:25:bc:2e:ab:53:
         e4:65:0c:f0:40:52:c9:6b:97:a1:d7:6d:5d:61:5a:82:04:b4:
         0c:88:e9:94:55:50:cb:b2:37:2c:5a:07:3e:fb:7f:df:c1:86:
         43:c8:8b:ab:62:26:42:b1:a2:5e:65:e0:ec:18:c8:6a:0a:a3:
         43:5f:71:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:07 2024 by rpki-client on console-fra.rpki-client.org