Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/0/3138312e3232342e35392e302f32342d3234203d3e20323731353332.roa
File:                     3138312e3232342e35392e302f32342d3234203d3e20323731353332.roa (raw, json)
Hash identifier:          7u6+thG8wJdtKHIlvpQiY/yVnw5wL+RkiFnTXq1pYCc=
Subject key identifier:   FE:8D:9E:86:10:B4:0A:45:29:DC:47:3E:13:8F:1E:C1:1D:64:01:F6
Certificate issuer:       /CN=C3BB815C271D24E3C39EF0273BE78B0E1E7E69AF
Certificate serial:       6C79A402CBF4F2AD9C55BDDE354229616C108D9A
Authority key identifier: C3:BB:81:5C:27:1D:24:E3:C3:9E:F0:27:3B:E7:8B:0E:1E:7E:69:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3BB815C271D24E3C39EF0273BE78B0E1E7E69AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/0/3138312e3232342e35392e302f32342d3234203d3e20323731353332.roa
Signing time:             Tue 02 Jan 2024 20:49:36 +0000
ROA not before:           Tue 02 Jan 2024 20:44:36 +0000
ROA not after:            Tue 31 Dec 2024 20:49:36 +0000
asID:                     271532
IP address blocks:        181.224.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:79:a4:02:cb:f4:f2:ad:9c:55:bd:de:35:42:29:61:6c:10:8d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3BB815C271D24E3C39EF0273BE78B0E1E7E69AF
        Validity
            Not Before: Jan  2 20:44:36 2024 GMT
            Not After : Dec 31 20:49:36 2024 GMT
        Subject: CN=FE8D9E8610B40A4529DC473E138F1EC11D6401F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ed:1b:aa:0c:4a:bd:e5:a2:b9:7b:b3:05:38:
                    6b:8a:89:a9:1d:c4:46:06:bd:51:93:e6:da:7e:96:
                    63:a3:87:2a:86:05:ef:92:72:63:0b:3b:16:9b:a2:
                    ba:ca:81:42:1a:b9:52:5f:59:f2:e4:10:63:5a:e4:
                    23:fc:4c:36:48:11:fa:2c:e2:a0:9a:48:06:18:0a:
                    ea:f5:7d:89:8a:94:08:44:b7:96:f2:b4:42:07:db:
                    da:d5:d8:67:85:6e:d6:b3:2b:47:9c:1a:1c:e6:2c:
                    5c:f3:45:f8:e4:0d:bc:32:db:28:6c:77:77:e6:26:
                    ac:fc:a6:a1:73:e8:0e:0c:45:22:ba:85:09:ee:00:
                    9e:fb:25:7e:84:89:dd:bc:5e:50:d1:38:ae:5c:08:
                    03:59:0e:3b:97:57:c1:54:50:7d:e7:76:fc:cd:03:
                    c6:c6:53:24:0a:62:2d:2b:ec:a1:58:a8:2a:4d:27:
                    8d:4d:d9:c4:b8:60:a0:46:2b:36:96:74:ec:25:8d:
                    ea:c9:c1:7c:d9:96:56:b5:19:5b:e6:e6:df:01:bc:
                    e9:61:e3:66:e9:3d:c2:b5:d2:7c:1f:ef:05:a1:0e:
                    71:23:9f:36:9b:d3:6d:92:2c:38:80:26:54:a1:b8:
                    39:4b:0f:89:b0:03:82:b4:ff:00:4b:26:82:bb:38:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8D:9E:86:10:B4:0A:45:29:DC:47:3E:13:8F:1E:C1:1D:64:01:F6
            X509v3 Authority Key Identifier:
                keyid:C3:BB:81:5C:27:1D:24:E3:C3:9E:F0:27:3B:E7:8B:0E:1E:7E:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/0/C3BB815C271D24E3C39EF0273BE78B0E1E7E69AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3BB815C271D24E3C39EF0273BE78B0E1E7E69AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/0/3138312e3232342e35392e302f32342d3234203d3e20323731353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:06:ae:5b:5e:ad:34:f5:85:ec:cb:db:b4:88:d2:75:af:fc:
         0f:74:50:0d:5f:c2:8e:2c:64:38:8a:f7:cd:17:5a:ce:9a:73:
         9f:6f:e3:24:a0:7c:8c:30:72:7b:30:39:94:cd:4a:40:c3:da:
         09:15:f1:32:f3:99:31:c8:4e:b0:ef:04:d7:87:ce:2b:d6:3f:
         7e:61:75:20:c9:08:6a:d7:eb:27:04:10:25:b7:f9:99:64:72:
         fd:ae:8b:af:1f:30:4c:98:30:e4:a3:5c:6d:8b:32:f0:b2:a4:
         6e:bc:3b:a9:d8:b9:a3:46:31:0d:fc:03:ec:c9:c8:11:ad:b4:
         57:ac:f8:2c:74:76:2b:e3:5e:0d:02:c2:35:d0:6e:82:b8:d0:
         6c:c4:53:39:63:a6:7d:81:04:fc:b3:40:49:c9:d8:b9:92:d3:
         c5:d8:c2:84:1c:6e:a0:51:2c:f2:9f:22:6e:fe:e4:e1:45:47:
         03:c6:35:f3:48:a8:ee:1c:98:c6:b3:7d:25:37:77:e7:ae:6b:
         f6:10:c3:93:b2:fc:1b:21:4a:a4:6b:f3:20:6f:55:05:6a:7a:
         79:8e:33:f5:ad:fe:26:c9:03:66:e6:c1:fe:09:5d:33:16:45:
         a3:7a:37:71:be:22:33:49:55:02:c6:dd:cf:91:e5:fd:a9:76:
         ef:44:4f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org