Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32342d3234203d3e20323731343834.roa
File:                     3138312e3233332e31382e302f32342d3234203d3e20323731343834.roa (raw, json)
Hash identifier:          3oMjuUpLweyMo7PmWRB6V38VO1iAfR77lc1QHUYYzXI=
Subject key identifier:   7D:DD:A0:35:E3:76:82:23:5D:82:CB:74:96:73:55:AF:0A:C0:E5:AB
Certificate issuer:       /CN=ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF
Certificate serial:       6749FF3C53D1E28B622600613B32B5A57EC2A60A
Authority key identifier: EC:C2:AB:C9:70:8B:74:7A:EF:EB:7A:F0:5C:21:E5:92:FD:EA:06:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32342d3234203d3e20323731343834.roa
Signing time:             Thu 01 Feb 2024 18:08:59 +0000
ROA not before:           Thu 01 Feb 2024 18:03:59 +0000
ROA not after:            Thu 30 Jan 2025 18:08:59 +0000
asID:                     271484
IP address blocks:        181.233.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:49:ff:3c:53:d1:e2:8b:62:26:00:61:3b:32:b5:a5:7e:c2:a6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF
        Validity
            Not Before: Feb  1 18:03:59 2024 GMT
            Not After : Jan 30 18:08:59 2025 GMT
        Subject: CN=7DDDA035E37682235D82CB74967355AF0AC0E5AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:86:c2:57:29:3b:13:78:44:b9:3e:26:79:
                    7e:a7:ac:19:6e:94:5c:fd:ab:19:52:0e:3b:6d:46:
                    7c:79:4d:8c:5e:8e:03:58:5a:9e:6c:c2:6c:33:99:
                    45:0a:8d:14:93:70:aa:79:c4:a0:31:9c:20:06:77:
                    17:95:26:65:b2:0e:1d:f1:e3:86:31:ef:8f:cb:34:
                    b2:49:ad:e5:10:3e:e9:9a:54:b5:b5:a8:cd:17:4d:
                    08:75:c7:d1:b6:54:1f:48:74:85:6e:35:a2:b0:9e:
                    0c:2e:b5:3b:75:13:b4:13:5e:9d:97:cd:87:ca:72:
                    ee:39:3b:0e:d1:9c:44:41:83:c2:44:84:21:ec:aa:
                    a3:e4:8b:8c:43:3f:45:c8:ca:9d:6c:73:17:48:62:
                    06:6c:62:2d:1e:a8:55:24:13:25:c2:81:0b:6b:31:
                    37:f4:57:1f:fc:5b:e5:07:31:0f:8d:3a:48:e6:90:
                    d7:a8:ef:28:48:81:27:d7:8e:06:ea:8e:36:8d:11:
                    11:1b:87:a6:d4:b0:5e:2b:ed:c3:99:12:1a:05:ad:
                    07:6f:b8:3d:62:6d:78:52:02:a7:e2:89:b7:5c:36:
                    23:5a:d4:15:38:dd:60:25:a8:fa:f2:48:8e:a6:e7:
                    1d:02:8a:2a:c9:d5:2b:ed:eb:aa:92:c6:30:74:1e:
                    ed:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DD:A0:35:E3:76:82:23:5D:82:CB:74:96:73:55:AF:0A:C0:E5:AB
            X509v3 Authority Key Identifier:
                keyid:EC:C2:AB:C9:70:8B:74:7A:EF:EB:7A:F0:5C:21:E5:92:FD:EA:06:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32342d3234203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:c3:9d:68:ab:7c:de:3f:32:76:f3:34:85:ba:cd:d1:d5:cb:
         f2:bb:78:24:44:0d:37:78:e4:9d:47:3c:b3:8a:8e:46:3d:d0:
         12:70:08:91:b3:70:10:5f:dd:8c:02:e2:b1:39:00:7a:3a:d6:
         ef:b8:0d:42:b9:9e:67:b0:b2:2a:d1:a7:ae:89:02:70:23:10:
         03:e2:1f:25:25:3d:45:be:79:9b:92:4f:2b:ce:a8:b1:89:1c:
         11:98:3b:57:8d:15:17:43:64:ae:3d:69:54:79:87:a6:e8:e2:
         a2:dc:15:f6:8b:de:05:a4:0d:2c:d2:5c:f6:c0:94:cd:e1:9d:
         55:81:91:db:82:d4:90:5a:2f:6b:bb:c3:5f:e0:a5:34:e3:c9:
         53:51:3d:b1:9e:90:1d:1c:06:49:0b:20:25:d6:11:06:24:36:
         9b:82:57:47:3f:21:12:52:60:b2:8d:77:ca:56:16:4d:59:b1:
         fd:40:15:a3:86:c4:8f:e6:d8:32:4e:28:b6:9b:d4:dc:7c:b9:
         37:1a:6a:f5:ab:71:30:be:f6:85:ec:71:b1:c7:36:78:43:67:
         71:3c:27:61:9d:f6:05:c0:32:d8:ac:33:eb:a7:3b:84:35:f4:
         1b:1d:28:85:eb:77:38:06:af:55:01:a5:dc:97:af:66:c6:45:
         48:b9:08:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org