Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133322e302f32332d3233203d3e20323637343234.roa
File:                     3138312e3139312e3133322e302f32332d3233203d3e20323637343234.roa (raw, json)
Hash identifier:          1yI903TPztpzF/oegve/r6hGTxpirxE3b3iDUSLQcHM=
Subject key identifier:   87:0B:31:49:55:73:D1:46:9C:20:FE:32:37:3D:7B:C1:D5:49:21:19
Certificate issuer:       /CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
Certificate serial:       6AD9FDB774A6A9543ED8C1C65B0F17FB7C391C52
Authority key identifier: A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133322e302f32332d3233203d3e20323637343234.roa
Signing time:             Sun 29 Oct 2023 06:52:00 +0000
ROA not before:           Sun 29 Oct 2023 06:47:00 +0000
ROA not after:            Sun 27 Oct 2024 06:52:00 +0000
asID:                     267424
IP address blocks:        181.191.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d9:fd:b7:74:a6:a9:54:3e:d8:c1:c6:5b:0f:17:fb:7c:39:1c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
        Validity
            Not Before: Oct 29 06:47:00 2023 GMT
            Not After : Oct 27 06:52:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:63:2c:7c:81:8d:ab:2d:b8:6e:b3:5a:59:a2:
                    5a:b4:6f:7f:ce:be:5e:67:2b:d1:36:6e:54:9b:d5:
                    24:54:cd:90:79:5b:68:4d:b4:7f:d4:85:35:00:a3:
                    13:97:c0:a2:2d:d6:8c:5e:a9:38:bc:91:c1:8e:0a:
                    fc:87:c1:f7:1d:cc:05:e1:fa:58:37:9f:7c:4d:c6:
                    28:92:0c:04:1f:b2:f1:5a:bd:89:c7:56:b8:9a:d1:
                    87:97:5d:c8:f5:09:c8:fe:02:3c:2b:ca:2b:eb:72:
                    3d:07:6f:f2:54:f6:05:a7:e8:f7:44:b8:3b:8c:d3:
                    e4:61:d3:05:69:ca:f2:21:e5:53:bd:c3:06:46:0e:
                    c5:53:10:b4:a0:06:9f:d2:b7:63:98:95:02:f1:8c:
                    5c:bd:b4:6e:63:6c:fa:dc:e7:6d:30:86:f7:ff:90:
                    99:5d:cf:9e:1c:bb:93:56:f3:10:11:b7:4c:a6:46:
                    d8:55:8e:f8:c0:81:c7:25:80:d3:05:f2:c5:45:7f:
                    74:e8:8f:e4:4b:ec:5c:ea:5c:cd:d3:82:bf:00:b7:
                    95:49:88:fb:05:4d:aa:55:57:a1:ba:94:77:73:f0:
                    50:7a:6a:63:5a:7c:54:4d:b3:e5:70:22:37:fb:86:
                    6a:82:aa:76:01:a5:50:41:3d:0d:f5:e1:55:e3:da:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0B:31:49:55:73:D1:46:9C:20:FE:32:37:3D:7B:C1:D5:49:21:19
            X509v3 Authority Key Identifier:
                keyid:A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133322e302f32332d3233203d3e20323637343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:4f:cc:b2:d0:75:52:0e:3e:b6:0d:26:c2:07:e0:74:ee:ca:
         02:f9:1b:a3:7e:a6:49:ed:31:04:5d:8a:7a:5a:95:0f:6a:1e:
         61:9f:d9:6c:6d:38:44:d2:3f:62:b3:6e:31:ba:be:8f:b5:47:
         3b:ee:a8:2a:e1:2d:eb:4f:ba:bc:ca:b9:c1:5c:f7:94:df:e9:
         e7:8b:a9:db:34:7a:c1:7e:c1:75:79:80:98:42:5f:d6:b7:63:
         98:e7:08:53:45:c0:c3:a4:14:0f:10:8b:86:6b:bb:17:79:07:
         9c:71:77:ba:22:b5:e2:d5:ab:5d:4f:37:4e:16:cb:bc:fa:ac:
         68:22:4f:53:87:cb:00:4d:79:8c:a5:74:b0:0c:73:bc:d4:85:
         db:6f:b7:37:53:9a:cf:35:b8:f6:50:3b:91:d3:dd:85:e6:23:
         b7:a2:52:66:ea:13:c5:b5:00:86:88:8e:0c:fb:11:4e:f1:05:
         e3:49:f4:e2:34:6c:5f:09:7f:2e:9f:f5:a5:d3:bd:e4:c7:8b:
         3a:b0:96:f1:b1:fa:09:f5:1f:a1:6e:9f:9a:7f:1d:64:cf:e3:
         39:f3:e6:27:50:30:f2:dc:53:7b:9e:ea:5f:24:2b:60:bc:00:
         8b:99:54:3a:57:e9:c2:36:3b:72:23:9a:6d:25:a4:a3:67:fd:
         e7:6e:7f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org