Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa
File:                     3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa (raw, json)
Hash identifier:          p2SnCXZrwy+OjXwXKxK9Wq8ws2cgFQOv5rb/v4L8Ti0=
Subject key identifier:   A9:0B:E2:2C:61:EC:A0:CF:04:28:9E:95:2D:AD:0C:63:3E:1E:45:30
Certificate issuer:       /CN=ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF
Certificate serial:       1AFC306C3C74F287579E0AAD496F2BCAF03A078D
Authority key identifier: EC:C2:AB:C9:70:8B:74:7A:EF:EB:7A:F0:5C:21:E5:92:FD:EA:06:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa
Signing time:             Thu 01 Feb 2024 18:09:04 +0000
ROA not before:           Thu 01 Feb 2024 18:04:04 +0000
ROA not after:            Thu 30 Jan 2025 18:09:04 +0000
asID:                     271484
IP address blocks:        181.233.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fc:30:6c:3c:74:f2:87:57:9e:0a:ad:49:6f:2b:ca:f0:3a:07:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF
        Validity
            Not Before: Feb  1 18:04:04 2024 GMT
            Not After : Jan 30 18:09:04 2025 GMT
        Subject: CN=A90BE22C61ECA0CF04289E952DAD0C633E1E4530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:36:3b:fb:ba:51:f9:e5:42:bf:86:7c:d0:8d:
                    a3:3f:6f:b5:e9:2d:b5:c8:c8:c4:b9:90:93:e3:70:
                    8e:20:0b:fd:6f:52:5c:98:8d:66:2a:2d:34:1a:3a:
                    3d:fb:dd:19:4d:b1:80:8e:05:43:c4:ff:88:dd:cb:
                    27:a1:98:34:bc:7c:e7:ca:ad:dd:77:d5:70:9e:fa:
                    eb:03:74:28:55:f8:2f:21:60:74:39:5c:20:a0:41:
                    d3:f8:95:b0:d2:55:6d:0c:3f:7a:be:22:19:2f:24:
                    45:e8:b4:ca:cd:44:c4:ff:c2:4a:16:bc:9f:98:76:
                    83:dc:1f:81:e1:19:84:14:eb:45:aa:c3:63:40:b6:
                    02:d5:c7:92:fc:73:63:63:aa:d2:08:b3:70:0a:8f:
                    bd:f7:53:90:c7:7b:63:a9:14:de:87:e2:b2:04:39:
                    05:49:89:22:0e:a8:53:eb:12:b1:ee:32:ce:be:28:
                    ce:a2:7d:6c:72:fe:68:90:26:0c:f8:5e:a2:aa:17:
                    52:74:36:bb:70:48:08:d1:68:bb:df:2a:f0:26:ae:
                    cf:32:f3:df:16:d0:ea:4d:85:f0:ad:00:87:4a:89:
                    dc:3a:ae:8b:7b:9c:90:ff:21:28:16:54:98:c7:2e:
                    93:dd:8a:a5:94:58:2f:2b:f4:e3:7c:64:7b:f5:13:
                    07:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0B:E2:2C:61:EC:A0:CF:04:28:9E:95:2D:AD:0C:63:3E:1E:45:30
            X509v3 Authority Key Identifier:
                keyid:EC:C2:AB:C9:70:8B:74:7A:EF:EB:7A:F0:5C:21:E5:92:FD:EA:06:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31372e302f32342d3234203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:5d:80:40:3c:cd:02:84:c4:ec:29:84:3e:f7:7f:2b:2d:28:
         d7:99:f7:2f:52:66:5d:a6:66:e1:06:a4:5f:11:ec:a8:da:95:
         b7:50:0a:36:e2:87:fd:c3:ab:06:ad:ee:f3:1d:68:e7:80:e6:
         6e:91:80:87:55:58:8c:61:41:4f:6a:28:24:2a:fb:dd:86:3c:
         3b:e3:ad:66:7b:71:e8:de:da:be:4e:ce:4e:f3:ad:96:d9:1b:
         19:3e:e3:e1:7b:7a:b3:35:fe:9f:80:69:a3:2d:25:88:c8:55:
         3c:2a:fd:29:3d:08:28:a4:73:b8:6a:9f:0c:35:20:ea:74:90:
         0a:c7:55:2d:36:a8:75:da:e5:17:11:3d:dc:67:6b:2a:36:ad:
         e6:a7:f1:72:97:56:33:3f:b4:92:43:04:f8:fa:fd:b6:e6:0c:
         1e:28:35:4e:db:f2:4d:a9:92:85:7c:9b:0b:e4:49:e7:f6:3d:
         46:24:0e:1c:61:a7:86:8c:c2:2b:55:69:48:76:5a:40:3d:9d:
         ad:42:f2:d6:a9:52:7c:c0:31:b1:fe:b3:77:7c:1f:87:2b:72:
         bc:b8:da:a0:5a:57:98:5b:69:a0:e2:c2:3d:d4:07:04:d9:91:
         20:23:3c:35:32:b6:b8:9f:84:58:03:ee:62:e2:a5:cf:b7:b0:
         4f:8f:2f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org