Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa
File:                     3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa (raw, json)
Hash identifier:          2L0sRtCD2DcOo2nlkXKCLTBHhNBzJhEx988IKSCWoMc=
Subject key identifier:   D9:5C:45:B2:2D:0C:0E:38:CB:FA:68:DA:96:7C:1D:AA:2B:A4:6F:32
Certificate issuer:       /CN=ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF
Certificate serial:       40C99A30E3DE77B2D5D4E76476CEACA86E0C37DF
Authority key identifier: EC:C2:AB:C9:70:8B:74:7A:EF:EB:7A:F0:5C:21:E5:92:FD:EA:06:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa
Signing time:             Thu 01 Feb 2024 18:09:08 +0000
ROA not before:           Thu 01 Feb 2024 18:04:08 +0000
ROA not after:            Thu 30 Jan 2025 18:09:08 +0000
asID:                     271484
IP address blocks:        181.233.16.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c9:9a:30:e3:de:77:b2:d5:d4:e7:64:76:ce:ac:a8:6e:0c:37:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF
        Validity
            Not Before: Feb  1 18:04:08 2024 GMT
            Not After : Jan 30 18:09:08 2025 GMT
        Subject: CN=D95C45B22D0C0E38CBFA68DA967C1DAA2BA46F32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:bb:7d:e0:39:37:88:12:69:4b:72:3d:5c:
                    1e:3b:c5:9b:f1:79:3f:69:06:78:56:6c:60:9e:e0:
                    fd:4c:f0:6b:a0:28:b1:0b:a5:b7:71:6e:3c:dc:2c:
                    36:58:88:6d:d4:87:bf:75:59:3e:90:e8:f1:e5:6d:
                    73:33:00:b4:b6:4b:e0:70:81:0e:f2:9d:5b:f6:b6:
                    4b:de:49:e0:0b:95:c9:09:c4:94:6e:cc:e8:d5:3e:
                    b8:40:26:46:95:3e:98:a3:15:ee:c8:88:28:45:6e:
                    97:9e:2a:d6:90:41:4c:90:b1:bc:06:3e:01:39:44:
                    81:66:30:f5:e5:3b:1e:68:bc:95:74:8f:aa:6f:61:
                    b4:ca:77:7c:27:a9:e5:d2:2f:88:f9:c1:46:5a:69:
                    c9:9b:0b:91:52:c2:56:4f:9b:5c:85:79:3b:9a:ce:
                    5e:bc:a6:f4:9c:97:9b:72:49:2c:4a:79:fd:2d:62:
                    65:cc:7f:b0:ed:27:2f:b8:b3:ff:6e:2e:c4:93:c5:
                    41:1b:7e:97:3d:62:e1:33:81:0e:95:ff:59:fd:33:
                    fa:36:5b:48:b7:f7:01:a0:8f:b0:06:ed:91:e6:23:
                    da:e5:b6:2c:35:da:14:b2:63:ad:b2:5c:fe:97:4d:
                    d4:ab:aa:30:8b:09:c7:ce:a1:f2:8f:51:a5:0b:f7:
                    87:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5C:45:B2:2D:0C:0E:38:CB:FA:68:DA:96:7C:1D:AA:2B:A4:6F:32
            X509v3 Authority Key Identifier:
                keyid:EC:C2:AB:C9:70:8B:74:7A:EF:EB:7A:F0:5C:21:E5:92:FD:EA:06:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:1e:23:1c:e3:64:f1:43:04:c2:57:fa:1a:9e:5e:58:5f:3f:
         9f:b9:9f:fb:6b:46:0d:bb:d9:a8:21:d1:34:71:cc:70:cf:35:
         a8:1e:9d:cc:06:d4:91:21:bf:be:11:66:9a:37:7b:46:08:56:
         d6:ae:cd:d4:97:f6:10:d8:48:54:0e:cd:d4:c2:a6:11:58:84:
         a6:b3:c9:ec:35:c8:6a:8f:3f:57:df:d6:d8:28:04:f1:a2:c0:
         c1:21:1d:ba:d8:24:b7:43:1a:6c:66:32:9f:3a:4f:dc:47:93:
         01:3e:21:e5:2a:22:bf:ad:dd:04:c5:68:e2:91:a0:8c:f9:95:
         23:88:16:76:2c:30:9c:d5:35:eb:40:66:ee:10:1e:45:69:8d:
         d5:03:bf:d1:5d:43:a9:ed:b5:62:4d:08:50:57:b3:69:4a:e3:
         a4:e1:8a:6d:64:68:c4:86:1a:ec:33:7f:39:63:b1:49:82:37:
         c1:ac:dd:aa:d6:24:3e:4b:81:3e:38:27:b5:33:6f:ef:75:e7:
         3d:20:c9:2d:f3:c5:5f:57:68:c1:6d:97:36:96:b9:6b:d0:78:
         9a:c2:07:f2:d8:17:47:6c:ea:fe:c9:af:e0:bc:2f:16:e6:ce:
         77:ad:91:e0:58:5b:ed:7d:6e:d3:c5:e6:32:66:b3:ec:f2:d1:
         d2:c7:35:2c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQMmaMOPed7LV1Odkds6sqG4MN98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNDMkFCQzk3MDhCNzQ3QUVGRUI3QUYwNUMyMUU1OTJG
REVBMDZDRjAeFw0yNDAyMDExODA0MDhaFw0yNTAxMzAxODA5MDhaMDMxMTAvBgNV
BAMTKEQ5NUM0NUIyMkQwQzBFMzhDQkZBNjhEQTk2N0MxREFBMkJBNDZGMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDIrt94Dk3iBJpS3I9XB47xZvx
eT9pBnhWbGCe4P1M8GugKLELpbdxbjzcLDZYiG3Uh791WT6Q6PHlbXMzALS2S+Bw
gQ7ynVv2tkveSeALlckJxJRuzOjVPrhAJkaVPpijFe7IiChFbpeeKtaQQUyQsbwG
PgE5RIFmMPXlOx5ovJV0j6pvYbTKd3wnqeXSL4j5wUZaacmbC5FSwlZPm1yFeTua
zl68pvScl5tySSxKef0tYmXMf7DtJy+4s/9uLsSTxUEbfpc9YuEzgQ6V/1n9M/o2
W0i39wGgj7AG7ZHmI9rltiw12hSyY62yXP6XTdSrqjCLCcfOofKPUaUL94eTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2VxFsi0MDjjL+mjalnwdqiukbzIwHwYDVR0j
BBgwFoAU7MKryXCLdHrv63rwXCHlkv3qBs8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFZyUGRDckJwdURwZnFVeWlKYkYyaWpSdmp0Y0tQclhVa1RWN3lMdmdv
azQvMC9FQ0MyQUJDOTcwOEI3NDdBRUZFQjdBRjA1QzIxRTU5MkZERUEwNkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VDQzJBQkM5NzA4Qjc0N0FF
RkVCN0FGMDVDMjFFNTkyRkRFQTA2Q0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRWclBkQ3JCcHVEcGZxVXlpSmJGMmlqUnZqdGNLUHJYVWtUVjd5THZnb2s0LzAv
MzEzODMxMmUzMjMzMzMyZTMxMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzNDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG16RAwDQYJKoZIhvcNAQELBQADggEBAB0eIxzj
ZPFDBMJX+hqeXlhfP5+5n/trRg272agh0TRxzHDPNagencwG1JEhv74RZpo3e0YI
VtauzdSX9hDYSFQOzdTCphFYhKazyew1yGqPP1ff1tgoBPGiwMEhHbrYJLdDGmxm
Mp86T9xHkwE+IeUqIr+t3QTFaOKRoIz5lSOIFnYsMJzVNetAZu4QHkVpjdUDv9Fd
Q6nttWJNCFBXs2lK46Thim1kaMSGGuwzfzljsUmCN8Gs3arWJD5LgT44J7Uzb+91
5z0gyS3zxV9XaMFtlzaWuWvQeJrCB/LYF0ds6v7Jr+C8LxbmznetkeBYW+19btPF
5jJms+zy0dLHNSw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org