Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/2/3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa
File:                     3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa (raw, json)
Hash identifier:          47fwchRF4w2DdKHlbQm0fTGxj6+oyH2mGRb8h8KmJ7E=
Subject key identifier:   3D:5E:4B:07:C8:58:5C:94:43:F9:11:39:A6:89:74:3B:D2:BD:A6:F1
Certificate issuer:       /CN=4035C7794AE83A88B90C35E2C4329AE45A5F4EF1
Certificate serial:       0409C9846E71CEB558F42E9ECF8636F35EE3C562
Authority key identifier: 40:35:C7:79:4A:E8:3A:88:B9:0C:35:E2:C4:32:9A:E4:5A:5F:4E:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4035C7794AE83A88B90C35E2C4329AE45A5F4EF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/2/3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa
Signing time:             Mon 15 Jan 2024 00:42:56 +0000
ROA not before:           Mon 15 Jan 2024 00:37:56 +0000
ROA not after:            Mon 13 Jan 2025 00:42:56 +0000
asID:                     271484
IP address blocks:        181.233.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:09:c9:84:6e:71:ce:b5:58:f4:2e:9e:cf:86:36:f3:5e:e3:c5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4035C7794AE83A88B90C35E2C4329AE45A5F4EF1
        Validity
            Not Before: Jan 15 00:37:56 2024 GMT
            Not After : Jan 13 00:42:56 2025 GMT
        Subject: CN=3D5E4B07C8585C9443F91139A689743BD2BDA6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4b:0f:3e:d7:88:6a:f7:9c:09:ae:9b:55:94:
                    a6:f9:ee:a7:52:45:41:c4:35:bd:04:21:4e:ca:9c:
                    cb:3f:b3:07:97:0f:81:97:64:3f:7b:d2:a2:7f:ad:
                    66:f9:df:b6:6d:c4:7e:c4:5a:c8:0a:1c:d0:6e:3c:
                    32:ca:33:00:50:d1:95:67:25:94:b4:57:55:a6:4d:
                    fd:73:ce:ba:cb:2e:13:3a:27:18:7b:ba:4b:de:9e:
                    1e:a8:9f:1e:3a:f8:08:65:58:03:94:05:19:40:19:
                    9b:4b:bf:e9:fc:00:ca:b8:a1:c3:08:02:06:29:cf:
                    73:70:74:f1:a7:9b:a6:fb:d0:fc:30:bf:78:67:9c:
                    6f:1a:79:16:ac:f9:7b:6b:ea:e9:da:08:58:a3:94:
                    15:19:61:45:b9:60:df:7b:64:b8:95:3c:fb:44:1b:
                    44:f6:a9:22:07:54:d8:1a:36:99:17:a3:b9:91:3d:
                    41:cd:ff:50:b7:70:6d:00:de:35:9d:a8:42:8e:e0:
                    0c:5b:81:70:2d:08:62:47:8b:52:c0:e3:aa:f4:52:
                    51:0e:80:91:f3:e0:87:76:18:1c:36:e7:4f:9f:b6:
                    7b:1d:4f:1d:45:ac:48:d9:16:28:3a:da:41:39:de:
                    bd:b6:3e:5e:78:0e:c7:9c:e5:b5:c8:c5:94:c7:25:
                    89:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5E:4B:07:C8:58:5C:94:43:F9:11:39:A6:89:74:3B:D2:BD:A6:F1
            X509v3 Authority Key Identifier:
                keyid:40:35:C7:79:4A:E8:3A:88:B9:0C:35:E2:C4:32:9A:E4:5A:5F:4E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/2/4035C7794AE83A88B90C35E2C4329AE45A5F4EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4035C7794AE83A88B90C35E2C4329AE45A5F4EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/2/3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:af:99:ef:db:8e:63:a8:76:16:39:c2:2e:7d:88:fb:ca:6a:
         2d:7a:f8:ef:5a:2d:a0:6b:a8:39:d7:2e:8d:41:07:53:24:5d:
         49:11:c6:c0:04:1c:e5:9f:bf:5d:87:05:95:e4:7f:0a:80:29:
         b6:1a:b7:0a:dc:a6:b8:d3:66:ce:96:a6:bf:1d:bc:67:a7:f1:
         a2:40:9d:85:29:4f:7b:9a:b9:11:17:b6:e5:39:2b:5f:45:5a:
         c5:b4:8a:a9:49:f9:8e:95:29:7b:76:dd:6e:e4:63:67:b3:fb:
         b1:f0:cc:ad:6b:dd:fd:da:98:26:23:cf:d0:3b:b5:c5:9c:66:
         ac:bd:87:d3:8c:8b:60:00:2d:0c:d0:fc:20:23:9a:fc:bb:e4:
         79:ae:11:e9:4b:4c:c2:b6:0d:b1:47:f6:1f:67:4b:82:f4:25:
         f0:1f:00:2e:f9:d9:b7:c4:e1:9e:84:9c:4f:6d:2e:cf:c0:94:
         6f:6b:e5:ac:ef:53:1b:f0:6c:30:4d:92:ec:54:32:7b:23:f9:
         21:ec:8f:b2:38:22:df:a5:0f:ee:12:0a:9e:94:bb:be:4f:32:
         18:7c:4a:19:06:67:81:f3:f4:f0:9c:fb:8d:30:81:23:1c:41:
         0f:f2:65:88:db:91:c3:6a:90:82:ff:94:9b:13:19:fd:4f:e3:
         33:48:fb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org