Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa
File:                     3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa (raw, json)
Hash identifier:          MS2DlSFwTwj1oT+RnlRdSB7qp7hFEctdmaFo/wHpFOE=
Subject key identifier:   BC:2B:CF:BF:85:67:E9:D7:6B:C1:E0:D9:32:E5:34:7F:45:B7:A5:DE
Certificate issuer:       /CN=ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF
Certificate serial:       2A88C9B496CCEA2C406A0A251499EECCC11C095A
Authority key identifier: EC:C2:AB:C9:70:8B:74:7A:EF:EB:7A:F0:5C:21:E5:92:FD:EA:06:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa
Signing time:             Thu 01 Feb 2024 18:09:02 +0000
ROA not before:           Thu 01 Feb 2024 18:04:02 +0000
ROA not after:            Thu 30 Jan 2025 18:09:02 +0000
asID:                     271484
IP address blocks:        181.233.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:88:c9:b4:96:cc:ea:2c:40:6a:0a:25:14:99:ee:cc:c1:1c:09:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF
        Validity
            Not Before: Feb  1 18:04:02 2024 GMT
            Not After : Jan 30 18:09:02 2025 GMT
        Subject: CN=BC2BCFBF8567E9D76BC1E0D932E5347F45B7A5DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dd:16:9e:3c:c8:15:56:f2:55:2f:06:89:09:
                    0e:75:00:9a:fd:04:66:cf:de:3f:a3:ee:dc:27:8b:
                    db:ea:0c:36:de:56:49:16:a7:ac:b1:3e:2a:d3:d6:
                    70:0b:21:c6:35:5d:8d:65:0c:33:6d:b0:b8:22:f8:
                    31:0d:e9:cd:98:5d:e7:2d:bc:df:81:78:3e:26:e8:
                    07:cf:2f:88:68:02:4c:6e:15:77:ba:57:1a:95:aa:
                    7f:3d:0a:7d:ef:0a:7e:b7:16:b9:3f:79:75:a1:3e:
                    18:7b:b3:df:c4:73:95:54:75:b1:f8:00:6d:4c:69:
                    6c:80:d0:24:1f:8c:ce:b4:a3:98:1a:6b:22:8e:59:
                    2e:9f:49:67:0f:66:55:ff:cc:25:67:25:e6:02:00:
                    6d:f4:db:59:48:32:d1:63:e0:29:c5:cd:ba:e0:5c:
                    bd:f1:86:13:da:9f:3f:59:99:7c:7e:85:94:49:3e:
                    a3:56:1c:35:e6:e3:a5:39:38:2d:06:bb:e0:50:f9:
                    1a:8d:ce:64:a1:7f:c8:55:be:75:40:83:00:e3:b0:
                    33:d9:71:7c:bc:e6:ed:70:47:50:45:60:8c:bd:0b:
                    e6:7e:63:43:da:ee:d1:a1:ca:50:ba:94:46:f8:ba:
                    f8:95:21:ae:27:85:15:9c:c3:dc:6e:02:6f:39:e6:
                    61:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2B:CF:BF:85:67:E9:D7:6B:C1:E0:D9:32:E5:34:7F:45:B7:A5:DE
            X509v3 Authority Key Identifier:
                keyid:EC:C2:AB:C9:70:8B:74:7A:EF:EB:7A:F0:5C:21:E5:92:FD:EA:06:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:0a:be:f7:13:4f:fd:b6:56:78:87:09:b9:aa:77:1c:3b:dd:
         a4:7e:9f:89:8e:94:fe:ea:fc:3a:52:73:69:3a:1d:1b:0c:3f:
         ac:89:7a:f6:91:0e:65:f2:66:20:ec:e2:2a:d4:67:1a:75:d5:
         5f:dc:59:f0:12:ae:6e:62:14:ba:b3:eb:d9:ca:1f:91:01:0d:
         05:4a:c5:c8:c0:6a:2e:73:69:88:40:44:c9:af:28:67:35:f0:
         0b:3c:af:44:78:e2:82:28:e8:26:55:fa:82:5c:6c:39:ca:23:
         d7:73:73:ff:47:bb:59:9d:a1:80:1b:1c:fb:51:de:12:d7:79:
         71:ec:6d:94:ea:9b:92:5b:f1:6c:58:07:ff:89:bc:67:40:48:
         98:c4:db:f3:5e:b8:a3:b7:b2:63:39:38:40:23:8b:16:14:f6:
         0f:1e:b5:31:d3:00:f4:35:f6:9d:5f:96:49:87:d2:f4:02:17:
         6b:23:50:e0:e2:99:da:07:fe:11:81:02:f8:71:b9:6a:e8:c3:
         a1:8f:17:c9:70:f4:07:a2:44:e2:cd:b1:f7:f8:29:8e:23:8b:
         23:b1:65:90:25:2e:6d:90:47:40:e2:79:d4:b8:f7:4e:00:36:
         4b:49:8d:b1:84:fb:42:f5:26:44:60:4f:19:54:26:63:d6:2a:
         84:04:df:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org