Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133322e302f32322d3232203d3e20323637343234.roa
File:                     3138312e3139312e3133322e302f32322d3232203d3e20323637343234.roa (raw, json)
Hash identifier:          WAV1dJN8gEpxSoOVPmGN8y0Xy7Oih3gKy36epsABYsI=
Subject key identifier:   0A:7C:1B:C0:0F:B8:A2:DC:20:BD:D6:FA:86:B4:61:79:E1:5E:6C:E4
Certificate issuer:       /CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
Certificate serial:       37E62D48F92F9CA15651CEF1C279EA9ADF9F541A
Authority key identifier: A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133322e302f32322d3232203d3e20323637343234.roa
Signing time:             Mon 25 Sep 2023 21:42:01 +0000
ROA not before:           Mon 25 Sep 2023 21:37:01 +0000
ROA not after:            Mon 23 Sep 2024 21:42:01 +0000
asID:                     267424
IP address blocks:        181.191.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e6:2d:48:f9:2f:9c:a1:56:51:ce:f1:c2:79:ea:9a:df:9f:54:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
        Validity
            Not Before: Sep 25 21:37:01 2023 GMT
            Not After : Sep 23 21:42:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6c:b0:05:1f:d0:2c:94:7d:13:4b:6e:47:33:
                    da:fa:03:66:5e:03:f2:f2:83:c3:07:13:f8:61:9d:
                    86:53:7b:dc:1b:89:ff:ee:52:78:45:dd:a9:02:dc:
                    ba:ad:86:41:33:5b:4e:7d:29:88:2f:53:c9:09:29:
                    31:e7:70:27:e6:63:0d:b5:af:16:28:2b:00:f4:92:
                    d7:4d:c7:4e:20:9b:a4:ba:42:e6:e7:09:3d:e5:9e:
                    41:95:c3:24:0e:34:ba:74:fe:76:29:47:eb:19:5c:
                    1d:d3:e6:f4:e8:55:77:f9:c3:39:e6:d1:b9:b8:30:
                    df:ec:40:8e:9d:d5:1c:ab:25:64:dd:4b:76:84:ec:
                    da:d1:a3:f2:52:24:df:fc:09:75:e8:dc:7e:a1:30:
                    31:b9:cc:67:57:83:92:b8:05:75:ed:5c:88:2e:28:
                    78:df:f7:14:ae:0d:a7:9e:62:7a:7f:b3:e5:28:3f:
                    20:d9:32:19:1e:b1:ad:57:12:17:1b:42:84:dd:09:
                    3f:a2:cf:87:af:04:f6:84:f9:2a:ec:ad:56:76:de:
                    c7:a9:a4:67:8b:09:81:38:57:4e:85:ad:a4:ad:d0:
                    69:c1:9e:8e:db:13:fe:fa:7e:69:45:86:ea:74:2e:
                    75:f3:ad:63:a0:42:36:92:28:b3:b1:f6:3a:22:e1:
                    91:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7C:1B:C0:0F:B8:A2:DC:20:BD:D6:FA:86:B4:61:79:E1:5E:6C:E4
            X509v3 Authority Key Identifier:
                keyid:A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133322e302f32322d3232203d3e20323637343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:29:56:1f:dd:76:a3:97:41:60:51:8f:d2:95:e7:d5:ef:76:
         63:9c:9e:f0:8f:ab:54:d3:8c:22:7d:8e:85:26:f3:f2:4e:1c:
         87:ee:10:70:67:60:7c:3d:3b:19:f5:bc:2a:c2:6b:ff:e0:e4:
         50:7e:8f:6b:08:e7:7f:4f:b2:57:94:c8:55:50:da:30:24:4a:
         7a:a8:11:80:54:8f:b7:ec:e9:dd:31:dd:c9:43:8f:61:dc:24:
         14:c7:32:f7:63:f3:69:87:31:01:fd:dd:d7:12:18:d7:99:11:
         8a:e4:ac:e9:d8:53:1a:98:dd:31:72:a8:0e:7c:05:39:3c:c7:
         00:5f:5e:39:bf:c6:7a:71:7a:b6:e4:d8:2d:d9:c0:bd:f4:15:
         73:51:8f:7d:92:41:2b:14:5c:dc:63:b9:db:c7:1b:98:54:14:
         aa:24:96:99:9d:93:8d:6f:42:28:b5:c5:ea:de:8c:fb:e9:57:
         df:a0:d6:2f:47:1b:e4:3b:db:3a:92:e9:e4:61:47:c2:14:e6:
         0d:55:7f:33:2c:07:06:d4:4f:93:1c:cc:e6:a7:e3:f8:d2:7f:
         df:d3:1e:4d:78:3c:79:68:f4:d5:a5:13:90:3a:c5:a1:1b:c8:
         7b:6e:8d:52:fe:56:0c:a6:a0:89:f3:ed:22:23:bd:53:f0:ae:
         7b:38:65:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org