Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32342d3234203d3e20323731343834.roa
File:                     3138312e3233332e31362e302f32342d3234203d3e20323731343834.roa (raw, json)
Hash identifier:          9TAkzvFqn5LscE+pdOklHgSUmRX7ZHRQJ9lTF8VwSrw=
Subject key identifier:   29:E5:08:5E:AC:8A:45:4D:A0:C3:FB:A5:23:33:8D:BA:4B:30:DF:00
Certificate issuer:       /CN=ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF
Certificate serial:       64941280F6E146E2A51FEF99192F59C3194104A4
Authority key identifier: EC:C2:AB:C9:70:8B:74:7A:EF:EB:7A:F0:5C:21:E5:92:FD:EA:06:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32342d3234203d3e20323731343834.roa
Signing time:             Thu 01 Feb 2024 18:09:06 +0000
ROA not before:           Thu 01 Feb 2024 18:04:06 +0000
ROA not after:            Thu 30 Jan 2025 18:09:06 +0000
asID:                     271484
IP address blocks:        181.233.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:94:12:80:f6:e1:46:e2:a5:1f:ef:99:19:2f:59:c3:19:41:04:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF
        Validity
            Not Before: Feb  1 18:04:06 2024 GMT
            Not After : Jan 30 18:09:06 2025 GMT
        Subject: CN=29E5085EAC8A454DA0C3FBA523338DBA4B30DF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:c5:bd:f0:c6:b2:2f:d1:0e:74:e6:da:14:
                    0b:01:07:f4:46:90:32:10:db:06:06:40:84:e4:ae:
                    b4:46:ef:e3:96:2d:ae:d2:07:13:45:62:87:df:d3:
                    9c:3f:b0:ef:f9:b7:2a:81:10:3a:22:7c:af:5d:05:
                    75:1e:53:83:fb:96:16:78:3b:46:5e:2d:87:ea:7e:
                    27:fa:12:cc:2d:e8:24:33:01:bf:39:14:63:63:ab:
                    2c:dc:dc:9e:18:5f:95:e1:a7:ac:a1:f5:39:45:bd:
                    96:84:b0:62:0e:12:7d:d0:b5:ca:fc:d4:e7:aa:df:
                    46:a8:73:81:bc:33:cb:d3:e2:6f:24:13:d1:5f:fb:
                    fd:6f:40:dd:a8:92:f2:7e:7c:18:68:6f:c9:93:7b:
                    fb:a2:ba:b6:fb:d1:8a:5e:98:91:96:4c:4b:fa:e9:
                    1e:42:88:87:ae:cf:ea:d0:ef:81:7e:40:ef:c2:f3:
                    c0:21:ba:23:35:79:c6:ef:57:fc:ff:52:f6:03:9e:
                    e7:9d:b6:7f:2d:57:3e:ea:3d:8b:f1:69:7f:c3:ec:
                    8b:5f:48:fc:cc:4a:51:a8:d2:cc:b3:6a:36:69:5c:
                    df:8e:87:31:04:0a:04:1d:8b:48:d9:db:79:dc:64:
                    1b:9a:50:3a:41:55:55:3e:ab:a7:f3:1a:0a:be:93:
                    b5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E5:08:5E:AC:8A:45:4D:A0:C3:FB:A5:23:33:8D:BA:4B:30:DF:00
            X509v3 Authority Key Identifier:
                keyid:EC:C2:AB:C9:70:8B:74:7A:EF:EB:7A:F0:5C:21:E5:92:FD:EA:06:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32342d3234203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:22:2e:6b:e8:6e:cf:a4:1d:18:08:8b:dd:9c:83:06:c3:02:
         cd:50:2c:4d:e1:d8:1f:8b:e9:63:74:d3:eb:f6:c6:85:43:57:
         cb:3d:b0:c1:96:a0:0a:78:6c:a0:15:75:a5:92:71:cb:25:5a:
         62:bc:0f:9f:54:bd:bc:e0:4d:28:14:69:24:7d:ef:a3:81:44:
         33:f6:9d:42:ff:2e:64:f4:40:24:e5:f2:12:13:0d:bf:aa:40:
         d7:77:06:f5:65:43:d9:d4:00:f6:0e:3d:d9:5b:47:27:39:64:
         07:75:61:65:0d:8b:d7:50:2e:57:54:4e:e9:2d:86:43:48:ab:
         7c:d6:55:81:4f:8a:58:73:5e:2b:95:34:6b:03:ba:a3:97:14:
         b7:a9:09:46:ed:cc:fe:a4:2f:56:cf:f0:f5:83:80:3e:c8:e6:
         43:81:0a:c9:64:6b:f1:f6:0e:fc:96:8a:23:48:1f:e1:87:a9:
         15:fb:8a:7d:4d:aa:ab:81:27:9d:c8:1a:73:86:33:a5:26:f6:
         c2:7e:ab:ed:aa:6f:f5:d5:39:0c:bf:b4:8b:bd:5b:7d:a3:a3:
         7a:3f:37:b8:b9:2f:f6:c5:5c:6b:fd:9c:6c:63:66:82:50:84:
         5e:a8:ab:5e:86:4c:6c:5e:f9:18:f4:92:89:c7:38:40:67:4b:
         16:29:54:f1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZJQSgPbhRuKlH++ZGS9ZwxlBBKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNDMkFCQzk3MDhCNzQ3QUVGRUI3QUYwNUMyMUU1OTJG
REVBMDZDRjAeFw0yNDAyMDExODA0MDZaFw0yNTAxMzAxODA5MDZaMDMxMTAvBgNV
BAMTKDI5RTUwODVFQUM4QTQ1NERBMEMzRkJBNTIzMzM4REJBNEIzMERGMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUcW98MayL9EOdObaFAsBB/RG
kDIQ2wYGQITkrrRG7+OWLa7SBxNFYoff05w/sO/5tyqBEDoifK9dBXUeU4P7lhZ4
O0ZeLYfqfif6Eswt6CQzAb85FGNjqyzc3J4YX5Xhp6yh9TlFvZaEsGIOEn3Qtcr8
1Oeq30aoc4G8M8vT4m8kE9Ff+/1vQN2okvJ+fBhob8mTe/uiurb70YpemJGWTEv6
6R5CiIeuz+rQ74F+QO/C88AhuiM1ecbvV/z/UvYDnuedtn8tVz7qPYvxaX/D7Itf
SPzMSlGo0syzajZpXN+OhzEECgQdi0jZ23ncZBuaUDpBVVU+q6fzGgq+k7XnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKeUIXqyKRU2gw/ulIzONuksw3wAwHwYDVR0j
BBgwFoAU7MKryXCLdHrv63rwXCHlkv3qBs8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFZyUGRDckJwdURwZnFVeWlKYkYyaWpSdmp0Y0tQclhVa1RWN3lMdmdv
azQvMC9FQ0MyQUJDOTcwOEI3NDdBRUZFQjdBRjA1QzIxRTU5MkZERUEwNkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VDQzJBQkM5NzA4Qjc0N0FF
RkVCN0FGMDVDMjFFNTkyRkRFQTA2Q0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRWclBkQ3JCcHVEcGZxVXlpSmJGMmlqUnZqdGNLUHJYVWtUVjd5THZnb2s0LzAv
MzEzODMxMmUzMjMzMzMyZTMxMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC16RAwDQYJKoZIhvcNAQELBQADggEBAL4iLmvo
bs+kHRgIi92cgwbDAs1QLE3h2B+L6WN00+v2xoVDV8s9sMGWoAp4bKAVdaWSccsl
WmK8D59UvbzgTSgUaSR976OBRDP2nUL/LmT0QCTl8hITDb+qQNd3BvVlQ9nUAPYO
PdlbRyc5ZAd1YWUNi9dQLldUTukthkNIq3zWVYFPilhzXiuVNGsDuqOXFLepCUbt
zP6kL1bP8PWDgD7I5kOBCslka/H2DvyWiiNIH+GHqRX7in1NqquBJ53IGnOGM6Um
9sJ+q+2qb/XVOQy/tIu9W32jo3o/N7i5L/bFXGv9nGxjZoJQhF6oq16GTGxe+Rj0
konHOEBnSxYpVPE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org