Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32322d3232203d3e20323731363236.roa
File:                     3138312e3138392e38302e302f32322d3232203d3e20323731363236.roa (raw, json)
Hash identifier:          BJBtB5KIhiBb02VPQLghrg63EGFawGMt3KnydTD6eeA=
Subject key identifier:   5C:28:CB:C3:30:7D:4C:50:59:57:2A:A9:21:AF:2F:50:8E:FF:1F:D9
Certificate issuer:       /CN=6C68F4E439F49730F3B62FC2F240863A8AB2A820
Certificate serial:       4936377B3344BB49070699B59EC040F091D84BD0
Authority key identifier: 6C:68:F4:E4:39:F4:97:30:F3:B6:2F:C2:F2:40:86:3A:8A:B2:A8:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C68F4E439F49730F3B62FC2F240863A8AB2A820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32322d3232203d3e20323731363236.roa
Signing time:             Tue 04 Jul 2023 16:12:45 +0000
ROA not before:           Tue 04 Jul 2023 16:07:45 +0000
ROA not after:            Tue 02 Jul 2024 16:12:45 +0000
asID:                     271626
IP address blocks:        181.189.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:36:37:7b:33:44:bb:49:07:06:99:b5:9e:c0:40:f0:91:d8:4b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C68F4E439F49730F3B62FC2F240863A8AB2A820
        Validity
            Not Before: Jul  4 16:07:45 2023 GMT
            Not After : Jul  2 16:12:45 2024 GMT
        Subject: CN=5C28CBC3307D4C5059572AA921AF2F508EFF1FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8a:10:63:79:5f:49:46:e4:be:8f:6f:d4:f9:
                    97:d6:63:7b:d8:78:26:58:09:5c:61:57:35:7c:3f:
                    09:5e:e0:ed:f8:52:2f:ad:3b:1a:04:e9:fb:fb:8b:
                    4b:76:42:cd:63:86:c6:1d:14:c0:0b:d2:0a:87:83:
                    13:1c:6d:e0:1b:2f:38:2c:d3:27:ae:f0:db:f7:e1:
                    c7:30:21:40:9e:e9:41:8c:7f:c1:cf:fa:64:ee:ab:
                    79:fa:11:e2:e4:18:ae:d7:cd:33:d7:85:14:ff:27:
                    ad:6d:f4:4f:0d:37:7c:e1:26:5a:6a:c5:f3:99:19:
                    a3:c1:ba:55:c0:1e:df:13:48:94:cb:07:29:82:50:
                    1f:72:71:f9:33:db:94:f9:df:29:7e:9a:4f:3c:60:
                    39:8a:8a:42:ee:e6:a3:1d:2e:7b:c0:b2:42:e8:39:
                    81:ca:69:ec:9b:76:73:59:52:fe:51:63:e5:cb:9f:
                    18:a7:0a:a8:d6:79:8d:4d:00:34:66:c2:ce:d0:a8:
                    be:fc:41:52:48:64:cb:39:b7:bf:e1:00:93:38:73:
                    2c:a9:51:3e:4e:56:4b:12:5a:95:c4:dd:61:f2:dd:
                    91:87:4c:c6:48:c1:15:37:b9:98:01:e5:6c:f4:1a:
                    94:fa:81:6b:47:95:ca:c7:e3:39:4c:62:37:fa:96:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:28:CB:C3:30:7D:4C:50:59:57:2A:A9:21:AF:2F:50:8E:FF:1F:D9
            X509v3 Authority Key Identifier:
                keyid:6C:68:F4:E4:39:F4:97:30:F3:B6:2F:C2:F2:40:86:3A:8A:B2:A8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/6C68F4E439F49730F3B62FC2F240863A8AB2A820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C68F4E439F49730F3B62FC2F240863A8AB2A820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32322d3232203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:83:64:8d:93:9b:46:76:de:f6:f8:4c:cf:ff:0a:ba:23:91:
         ce:2f:4e:f2:a8:d0:ef:cc:31:13:8a:65:b2:21:d3:e0:de:e1:
         e6:67:96:24:af:71:e7:f5:9c:16:fa:3c:24:20:5c:92:6f:c7:
         b8:6d:4f:83:c2:f0:2f:94:0d:18:f0:c6:f7:96:38:e2:5e:2d:
         08:55:2b:87:eb:dd:82:27:77:ad:84:43:20:84:2d:ce:fb:9b:
         66:49:d1:b2:e5:d4:7e:b7:46:1e:9b:da:d3:87:d1:5b:a5:ec:
         83:bd:fc:8f:e3:4d:e5:82:59:2d:9b:4c:38:71:81:03:49:9e:
         6a:06:d1:d7:3d:4d:a9:9e:91:e7:ad:40:8f:0a:c3:e7:ea:59:
         34:20:61:05:cd:e9:fc:59:c7:d8:a7:b0:06:79:97:d2:46:00:
         53:80:ce:8d:9b:d4:b4:58:b9:a6:01:07:61:eb:26:c2:95:6a:
         78:da:e3:b6:ef:f4:66:d8:64:67:5c:82:01:a9:10:36:08:5a:
         0d:7d:b4:fc:eb:ac:8e:e8:81:ed:e8:a5:fd:9c:40:82:dc:f6:
         38:59:89:55:93:f7:ba:a3:61:04:03:73:8a:6b:4d:07:69:b6:
         81:6d:38:aa:91:bb:00:2d:5a:e6:5e:fc:ff:01:59:1b:93:81:
         34:0d:29:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org