Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133352e302f32342d3234203d3e20323637343234.roa
File:                     3138312e3139312e3133352e302f32342d3234203d3e20323637343234.roa (raw, json)
Hash identifier:          yANiefhOd8diTk/d0Zf5HdZYEw9ZNJ2tFJz2Ipq85KA=
Subject key identifier:   F2:96:20:A6:4E:87:18:86:8A:0F:85:74:E0:72:89:D2:6C:1D:16:E5
Certificate issuer:       /CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
Certificate serial:       4D6CCD8B966BB2B6368F3DF4F481ADF427324E8E
Authority key identifier: A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133352e302f32342d3234203d3e20323637343234.roa
Signing time:             Mon 25 Sep 2023 21:44:01 +0000
ROA not before:           Mon 25 Sep 2023 21:39:01 +0000
ROA not after:            Mon 23 Sep 2024 21:44:01 +0000
asID:                     267424
IP address blocks:        181.191.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6c:cd:8b:96:6b:b2:b6:36:8f:3d:f4:f4:81:ad:f4:27:32:4e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
        Validity
            Not Before: Sep 25 21:39:01 2023 GMT
            Not After : Sep 23 21:44:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e9:f8:60:07:0c:6e:1d:dc:ec:56:91:38:dc:
                    77:9d:71:9f:93:78:da:90:bc:43:69:20:59:d1:1b:
                    07:1c:d2:e5:95:78:9f:bd:ff:a0:2a:a8:75:d5:c0:
                    e8:1f:82:30:20:9c:f8:43:fe:96:0f:31:2a:94:0e:
                    0a:8d:24:64:d2:4f:79:d6:a7:2b:d1:57:69:73:e1:
                    81:59:c2:e9:60:1c:8b:7a:43:61:ec:e2:63:07:72:
                    6a:6f:42:9e:57:e1:cf:40:75:e1:04:2d:17:1b:36:
                    57:36:14:f7:3d:f9:8a:66:dd:79:b2:28:9c:0d:00:
                    bd:1d:fb:68:ad:2c:b9:1b:87:9f:8e:75:66:3a:35:
                    fe:70:b0:39:42:98:7f:4b:9c:3c:9e:58:31:97:39:
                    e4:28:78:a2:51:36:7d:c1:8e:30:c1:c6:10:99:69:
                    ff:63:4d:ea:ff:43:09:25:73:4c:cc:6b:4b:fc:70:
                    79:3a:99:c8:77:8c:fd:3f:f5:8d:45:53:ad:f3:bd:
                    ef:d1:47:15:52:9d:45:75:b2:82:a2:8d:a2:e1:86:
                    f6:03:1c:9e:d5:3c:fb:5e:aa:f7:1c:3d:ec:8c:89:
                    0b:d2:51:c7:31:4d:15:4f:c9:4e:19:df:07:76:f2:
                    06:f7:97:c4:65:10:f7:61:75:9e:32:41:a8:35:7c:
                    3e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:96:20:A6:4E:87:18:86:8A:0F:85:74:E0:72:89:D2:6C:1D:16:E5
            X509v3 Authority Key Identifier:
                keyid:A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/3138312e3139312e3133352e302f32342d3234203d3e20323637343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:65:f3:52:cc:0f:58:58:55:e5:d1:a7:c2:57:0e:1d:42:14:
         b3:9e:aa:a1:74:4d:2d:2b:03:25:a1:e6:97:ab:14:65:3f:00:
         a9:20:e8:d1:3d:bf:8a:18:76:3a:61:80:11:5e:b7:63:3e:36:
         3b:2e:54:dd:ce:0b:09:c0:ad:9c:67:ea:07:cd:db:d2:b1:f9:
         35:67:c0:cc:cf:52:37:71:d7:e8:8f:64:7b:8b:eb:66:2a:c9:
         00:02:82:a3:24:54:98:de:59:e6:20:eb:b9:63:2a:d5:11:e1:
         cc:5b:78:c1:75:81:99:09:57:0b:9e:3b:6d:f4:93:00:43:96:
         bb:90:0b:c3:c4:91:a4:02:6d:e5:11:44:32:4c:fd:fd:3b:a2:
         61:f8:f7:75:50:0a:60:d7:69:b8:08:95:3f:8f:ff:38:59:9e:
         4c:59:b3:41:aa:dc:3c:c0:af:e5:8e:b1:ed:c9:aa:aa:b8:4b:
         b7:c2:46:0d:5f:88:47:c6:cd:37:1b:5b:24:b5:89:90:b2:2c:
         b6:22:84:69:03:0a:d7:bb:8c:75:0a:db:2f:ef:87:ed:43:4c:
         bb:ec:5c:0c:2f:5f:21:37:21:e3:8c:27:b5:50:44:94:fe:3d:
         a4:58:b4:11:44:40:ee:ce:cc:c1:a5:66:a9:77:11:32:f7:5d:
         a1:8c:d7:5f
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUTWzNi5ZrsrY2jz309IGt9CcyTo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdEMUU2OUY1NzgwN0MxRUQwMkNBNDU5NzFBRDE0RURB
MzkzMUYyRTAeFw0yMzA5MjUyMTM5MDFaFw0yNDA5MjMyMTQ0MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0FFOUY4NjAwNzBDNkUxRERD
RUM1NjkxMzhEQzc3OUQ3MTlGOTM3OERBOTBCQzQzNjkyMDU5RDExQjA3MUNEMkU1
OTU3ODlGQkRGRkEwMkFBODc1RDVDMEU4MUY4MjMwMjA5Q0Y4NDNGRTk2MEYzMTJB
OTQwRTBBOEQyNDY0RDI0Rjc5RDZBNzJCRDE1NzY5NzNFMTgxNTlDMkU5NjAxQzhC
N0E0MzYxRUNFMjYzMDc3MjZBNkY0MjlFNTdFMUNGNDA3NUUxMDQyRDE3MUIzNjU3
MzYxNEY3M0RGOThBNjZERDc5QjIyODlDMEQwMEJEMURGQjY4QUQyQ0I5MUI4NzlG
OEU3NTY2M0EzNUZFNzBCMDM5NDI5ODdGNEI5QzNDOUU1ODMxOTczOUU0Mjg3OEEy
NTEzNjdEQzE4RTMwQzFDNjEwOTk2OUZGNjM0REVBRkY0MzA5MjU3MzRDQ0M2QjRC
RkM3MDc5M0E5OUM4Nzc4Q0ZEM0ZGNThENDU1M0FERjNCREVGRDE0NzE1NTI5RDQ1
NzVCMjgyQTI4REEyRTE4NkY2MDMxQzlFRDUzQ0ZCNUVBQUY3MUMzREVDOEM4OTBC
RDI1MUM3MzE0RDE1NEZDOTRFMTlERjA3NzZGMjA2Rjc5N0M0NjUxMEY3NjE3NTlF
MzI0MUE4MzU3QzNFMjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyun4YAcMbh3c7FaRONx3nXGfk3jakLxDaSBZ0RsHHNLllXifvf+g
Kqh11cDoH4IwIJz4Q/6WDzEqlA4KjSRk0k951qcr0Vdpc+GBWcLpYByLekNh7OJj
B3Jqb0KeV+HPQHXhBC0XGzZXNhT3PfmKZt15siicDQC9HftorSy5G4efjnVmOjX+
cLA5Qph/S5w8nlgxlznkKHiiUTZ9wY4wwcYQmWn/Y03q/0MJJXNMzGtL/HB5OpnI
d4z9P/WNRVOt873v0UcVUp1FdbKCoo2i4Yb2Axye1Tz7Xqr3HD3sjIkL0lHHMU0V
T8lOGd8HdvIG95fEZRD3YXWeMkGoNXw+IQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FPKWIKZOhxiGig+FdOByidJsHRblMB8GA1UdIwQYMBaAFKfR5p9XgHwe0CykWXGt
FO2jkx8uMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzUyUmdqamc4eGp6TlFq
eG10dERMZDlDSGE4Z0ZQMTNxSFY0WjExb05YWVFLLzAvQTdEMUU2OUY1NzgwN0Mx
RUQwMkNBNDU5NzFBRDE0RURBMzkzMUYyRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BN0QxRTY5RjU3ODA3QzFFRDAyQ0E0NTk3MUFEMTRFREEzOTMx
RjJFLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81MlJnampnOHhqek5RanhtdHRE
TGQ5Q0hhOGdGUDEzcUhWNFoxMW9OWFlRSy8wLzMxMzgzMTJlMzEzOTMxMmUzMTMz
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzczNDMyMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC1v4cwDQYJKoZIhvcNAQELBQADggEBAG5l81LMD1hYVeXRp8JXDh1CFLOeqqF0
TS0rAyWh5perFGU/AKkg6NE9v4oYdjphgBFet2M+NjsuVN3OCwnArZxn6gfN29Kx
+TVnwMzPUjdx1+iPZHuL62YqyQACgqMkVJjeWeYg67ljKtUR4cxbeMF1gZkJVwue
O230kwBDlruQC8PEkaQCbeURRDJM/f07omH493VQCmDXabgIlT+P/zhZnkxZs0Gq
3DzAr+WOse3Jqqq4S7fCRg1fiEfGzTcbWyS1iZCyLLYihGkDCte7jHUK2y/vh+1D
TLvsXAwvXyE3IeOMJ7VQRJT+PaRYtBFEQO7OzMGlZql3ETL3XaGM118=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org