Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/2/3138312e3233332e31372e3132382f32352d3235203d3e20323731343834.roa
File:                     3138312e3233332e31372e3132382f32352d3235203d3e20323731343834.roa (raw, json)
Hash identifier:          bBoUJUkdA4QhT1FF2gCTtuAobDq70NstV4VKRmLUY4c=
Subject key identifier:   A1:68:F3:91:CA:45:1A:B4:8B:BF:F3:F5:70:59:FC:BC:D7:A3:5E:30
Certificate issuer:       /CN=4035C7794AE83A88B90C35E2C4329AE45A5F4EF1
Certificate serial:       56425D9FFC5B2A208BA6565FB7247D531CC69E19
Authority key identifier: 40:35:C7:79:4A:E8:3A:88:B9:0C:35:E2:C4:32:9A:E4:5A:5F:4E:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4035C7794AE83A88B90C35E2C4329AE45A5F4EF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/2/3138312e3233332e31372e3132382f32352d3235203d3e20323731343834.roa
Signing time:             Mon 15 Jan 2024 00:42:55 +0000
ROA not before:           Mon 15 Jan 2024 00:37:55 +0000
ROA not after:            Mon 13 Jan 2025 00:42:55 +0000
asID:                     271484
IP address blocks:        181.233.17.128/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:42:5d:9f:fc:5b:2a:20:8b:a6:56:5f:b7:24:7d:53:1c:c6:9e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4035C7794AE83A88B90C35E2C4329AE45A5F4EF1
        Validity
            Not Before: Jan 15 00:37:55 2024 GMT
            Not After : Jan 13 00:42:55 2025 GMT
        Subject: CN=A168F391CA451AB48BBFF3F57059FCBCD7A35E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:61:49:65:e0:b9:f1:94:df:2e:b0:b2:72:
                    cd:88:d9:cf:08:a0:ed:6f:00:38:cc:a6:fa:d3:83:
                    05:77:16:d8:c7:a5:b9:d5:cb:ce:3a:83:9d:79:91:
                    9a:8a:75:a4:93:90:ad:a9:31:b6:f4:8f:9b:09:33:
                    e8:6b:53:1a:84:3e:12:df:b2:e8:3f:c8:8a:06:cf:
                    a0:26:5e:09:64:c1:2a:36:ad:66:5a:80:64:55:18:
                    dc:b6:7c:e4:80:29:7e:7c:65:9b:b0:e6:32:68:02:
                    29:cd:63:81:ba:18:0e:55:ed:cb:2d:8b:2f:08:d1:
                    0d:ba:01:6a:71:5c:c4:1a:65:23:b9:98:7d:47:a2:
                    dd:bb:da:49:f1:4a:17:64:86:a0:bb:11:72:37:7a:
                    f4:0c:f9:d0:1c:8b:3d:80:4b:83:6d:a2:8b:5d:fe:
                    92:36:2c:5c:ff:51:0f:29:76:aa:3a:55:24:94:ea:
                    fd:a0:86:62:30:58:7c:c4:29:d4:9c:64:62:67:d3:
                    be:01:af:49:33:2f:b0:6b:cc:f6:64:d1:ed:e2:c5:
                    c4:73:b7:f8:75:fe:20:bf:d2:00:05:2a:03:cd:36:
                    a2:ee:33:be:0c:86:59:50:17:8c:16:4e:51:dd:c0:
                    98:f5:cb:cd:27:c2:d1:17:be:9f:1c:5d:03:50:48:
                    6c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:68:F3:91:CA:45:1A:B4:8B:BF:F3:F5:70:59:FC:BC:D7:A3:5E:30
            X509v3 Authority Key Identifier:
                keyid:40:35:C7:79:4A:E8:3A:88:B9:0C:35:E2:C4:32:9A:E4:5A:5F:4E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/2/4035C7794AE83A88B90C35E2C4329AE45A5F4EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4035C7794AE83A88B90C35E2C4329AE45A5F4EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/2/3138312e3233332e31372e3132382f32352d3235203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.17.128/25

    Signature Algorithm: sha256WithRSAEncryption
         55:1d:7f:73:9a:5a:0b:d8:de:61:f5:ed:88:13:e7:3f:5c:49:
         03:d2:72:ff:70:15:85:79:37:f6:25:50:b0:57:10:c5:a4:e6:
         3a:bc:fa:5f:22:68:bb:89:f1:16:68:92:30:98:91:26:cf:4a:
         dc:8a:4d:a1:81:c2:1e:22:01:e9:61:87:41:61:7e:c0:f9:e8:
         bc:d1:66:65:d1:ba:c6:0a:0f:27:6d:a1:7f:90:a2:91:c6:ea:
         e5:a0:08:43:17:30:b9:22:c6:d2:4d:d2:b1:7e:c0:1f:f3:6b:
         c1:9c:3e:3c:94:cd:aa:59:8c:a0:09:2e:7a:31:5e:f7:d1:e9:
         85:90:58:0f:2e:ac:84:a1:c5:98:2e:da:63:84:a1:f2:aa:72:
         a2:a9:3a:f5:f0:b3:1d:0f:80:99:08:22:24:ba:97:95:36:9b:
         f9:29:bf:83:98:a8:2c:a8:0e:77:28:2c:da:3f:a0:e5:ee:1f:
         57:d4:e8:31:69:25:8c:dd:51:6b:6b:51:70:e5:5f:19:27:96:
         27:5a:31:91:fa:6a:4f:39:80:cc:90:d1:f6:43:e0:75:74:ea:
         98:76:46:f1:3f:89:82:25:a9:04:69:40:39:57:cb:c6:bc:56:
         29:cc:a0:6d:e6:26:67:3b:b1:c6:39:03:0b:00:88:0b:22:17:
         5c:ec:82:34
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUVkJdn/xbKiCLplZftyR9UxzGnhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAzNUM3Nzk0QUU4M0E4OEI5MEMzNUUyQzQzMjlBRTQ1
QTVGNEVGMTAeFw0yNDAxMTUwMDM3NTVaFw0yNTAxMTMwMDQyNTVaMDMxMTAvBgNV
BAMTKEExNjhGMzkxQ0E0NTFBQjQ4QkJGRjNGNTcwNTlGQ0JDRDdBMzVFMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ZmFJZeC58ZTfLrCycs2I2c8I
oO1vADjMpvrTgwV3FtjHpbnVy846g515kZqKdaSTkK2pMbb0j5sJM+hrUxqEPhLf
sug/yIoGz6AmXglkwSo2rWZagGRVGNy2fOSAKX58ZZuw5jJoAinNY4G6GA5V7cst
iy8I0Q26AWpxXMQaZSO5mH1Hot272knxShdkhqC7EXI3evQM+dAciz2AS4Ntootd
/pI2LFz/UQ8pdqo6VSSU6v2ghmIwWHzEKdScZGJn074Br0kzL7BrzPZk0e3ixcRz
t/h1/iC/0gAFKgPNNqLuM74MhllQF4wWTlHdwJj1y80nwtEXvp8cXQNQSGxRAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUoWjzkcpFGrSLv/P1cFn8vNejXjAwHwYDVR0j
BBgwFoAUQDXHeUroOoi5DDXixDKa5FpfTvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFZyUGRDckJwdURwZnFVeWlKYkYyaWpSdmp0Y0tQclhVa1RWN3lMdmdv
azQvMi80MDM1Qzc3OTRBRTgzQTg4QjkwQzM1RTJDNDMyOUFFNDVBNUY0RUYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQwMzVDNzc5NEFFODNBODhC
OTBDMzVFMkM0MzI5QUU0NUE1RjRFRjEuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRWclBkQ3JCcHVEcGZxVXlpSmJGMmlqUnZqdGNLUHJYVWtUVjd5THZnb2s0LzIv
MzEzODMxMmUzMjMzMzMyZTMxMzcyZTMxMzIzODJmMzIzNTJkMzIzNTIwM2QzZTIw
MzIzNzMxMzQzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsG
AQUFBwEHAQH/BBEwDzANBAIAATAHAwUHtekRgDANBgkqhkiG9w0BAQsFAAOCAQEA
VR1/c5paC9jeYfXtiBPnP1xJA9Jy/3AVhXk39iVQsFcQxaTmOrz6XyJou4nxFmiS
MJiRJs9K3IpNoYHCHiIB6WGHQWF+wPnovNFmZdG6xgoPJ22hf5Cikcbq5aAIQxcw
uSLG0k3SsX7AH/NrwZw+PJTNqlmMoAkuejFe99HphZBYDy6shKHFmC7aY4Sh8qpy
oqk69fCzHQ+AmQgiJLqXlTab+Sm/g5ioLKgOdygs2j+g5e4fV9ToMWkljN1Ra2tR
cOVfGSeWJ1oxkfpqTzmAzJDR9kPgdXTqmHZG8T+JgiWpBGlAOVfLxrxWKcygbeYm
ZzuxxjkDCwCICyIXXOyCNA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org