Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133342e302f32332d3233203d3e20323637343234.roa
File:                     3138312e3139312e3133342e302f32332d3233203d3e20323637343234.roa (raw, json)
Hash identifier:          3E3JXNUdiSb1vf0mXm5n3SfTmS7ojh8QfBzhq+Lh9Q8=
Subject key identifier:   7D:65:59:29:2A:7E:43:8A:06:4A:B1:EC:F0:6E:DF:88:3D:46:AD:EA
Certificate issuer:       /CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
Certificate serial:       26DD0F76BE14821B1DF6C29E4DB285DFC727A615
Authority key identifier: A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133342e302f32332d3233203d3e20323637343234.roa
Signing time:             Sun 29 Oct 2023 06:52:00 +0000
ROA not before:           Sun 29 Oct 2023 06:47:00 +0000
ROA not after:            Sun 27 Oct 2024 06:52:00 +0000
asID:                     267424
IP address blocks:        181.191.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:dd:0f:76:be:14:82:1b:1d:f6:c2:9e:4d:b2:85:df:c7:27:a6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
        Validity
            Not Before: Oct 29 06:47:00 2023 GMT
            Not After : Oct 27 06:52:00 2024 GMT
        Subject: CN=3082010A0282010100D938CEF90E35024B834766ED8591387252E1D5185600097E1AAA5F4F09FB00B75950C5EE026F8E77D67623FA6D1FC7BC2C9BB01C771363E37E13E495A799404754D9F7E6EC088F3479075C55D53FA6062279BB42C5D51A771708F15BC6A96B95B9389AFB9AE8B7971B1B2ACB7C60B04658C13D55831BA00CF302AA155E5AE8F218E54F21E53FA98F75EBA6D866E02D280BF09F9CA99D9C6CA32E1D14D3D5CEDFF4F9CEEC69E61D637483AD2349F71CDC9D3A721744488E48D6621A0C394F93A5D1C2DAF408F7ABC869DFEFA51EC3F801F141AC94352ED953A8924DDDB0F0E78F9A3E9B6C2D4C2353936663A1303D8232B77549FC228F33B0B1450C260365C0A50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:38:ce:f9:0e:35:02:4b:83:47:66:ed:85:91:
                    38:72:52:e1:d5:18:56:00:09:7e:1a:aa:5f:4f:09:
                    fb:00:b7:59:50:c5:ee:02:6f:8e:77:d6:76:23:fa:
                    6d:1f:c7:bc:2c:9b:b0:1c:77:13:63:e3:7e:13:e4:
                    95:a7:99:40:47:54:d9:f7:e6:ec:08:8f:34:79:07:
                    5c:55:d5:3f:a6:06:22:79:bb:42:c5:d5:1a:77:17:
                    08:f1:5b:c6:a9:6b:95:b9:38:9a:fb:9a:e8:b7:97:
                    1b:1b:2a:cb:7c:60:b0:46:58:c1:3d:55:83:1b:a0:
                    0c:f3:02:aa:15:5e:5a:e8:f2:18:e5:4f:21:e5:3f:
                    a9:8f:75:eb:a6:d8:66:e0:2d:28:0b:f0:9f:9c:a9:
                    9d:9c:6c:a3:2e:1d:14:d3:d5:ce:df:f4:f9:ce:ec:
                    69:e6:1d:63:74:83:ad:23:49:f7:1c:dc:9d:3a:72:
                    17:44:48:8e:48:d6:62:1a:0c:39:4f:93:a5:d1:c2:
                    da:f4:08:f7:ab:c8:69:df:ef:a5:1e:c3:f8:01:f1:
                    41:ac:94:35:2e:d9:53:a8:92:4d:dd:b0:f0:e7:8f:
                    9a:3e:9b:6c:2d:4c:23:53:93:66:63:a1:30:3d:82:
                    32:b7:75:49:fc:22:8f:33:b0:b1:45:0c:26:03:65:
                    c0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:65:59:29:2A:7E:43:8A:06:4A:B1:EC:F0:6E:DF:88:3D:46:AD:EA
            X509v3 Authority Key Identifier:
                keyid:A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133342e302f32332d3233203d3e20323637343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:24:51:91:8d:b2:dc:58:aa:79:bf:09:11:ad:e1:82:53:dd:
         7b:e8:f0:8c:18:0c:76:98:5c:4b:7f:aa:75:d4:fb:a2:df:35:
         dc:da:aa:5c:0a:d2:18:d4:6d:3e:6f:1d:c6:3e:37:99:89:fd:
         31:1b:68:59:95:b6:b7:1e:9d:6f:00:b0:77:5d:cc:f8:95:a2:
         5a:c5:33:9d:5f:73:b2:12:96:a4:8f:e8:b2:bc:a5:22:38:90:
         06:8d:92:54:45:f2:47:20:1e:c4:da:14:e8:15:19:c0:64:1f:
         c7:6b:18:65:f4:b5:3c:26:a4:bf:a9:a3:69:6f:de:a5:d5:f5:
         6c:8b:84:a8:4e:7f:8c:11:19:7b:62:2f:7b:2d:b7:db:9f:e3:
         7d:89:53:2a:1e:7e:88:c7:28:ae:35:cb:e3:59:27:72:56:a6:
         74:51:86:89:ea:59:03:55:54:d2:a9:4f:13:7f:dc:ce:78:da:
         e1:ba:2a:31:d8:fb:d7:b6:c6:2b:98:e4:33:47:aa:8e:f8:9d:
         3d:e2:2f:41:96:e0:25:c2:10:7e:e3:25:8f:97:70:84:70:30:
         d8:8d:da:88:8b:5e:5a:44:d1:94:15:08:85:47:c5:e6:6b:56:
         9e:f4:32:56:92:09:00:13:f9:b3:c1:b1:fc:26:9c:48:a1:df:
         6f:f4:fc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org