Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32332d3233203d3e20323731363236.roa
File:                     3138312e3138392e38302e302f32332d3233203d3e20323731363236.roa (raw, json)
Hash identifier:          2en0NOK2cOstBJTfo7yuvqHqQ9dQ33cp0eBFmPDuS+o=
Subject key identifier:   14:95:E8:D1:F1:7D:05:FC:F1:EE:AF:87:FE:0A:3F:77:DB:39:4D:95
Certificate issuer:       /CN=7CCC3730AB96C8791F76B6B375181C8C241DAE83
Certificate serial:       0BAA41C7201DFE142C894DBE47B5D34B3C5AFDC6
Authority key identifier: 7C:CC:37:30:AB:96:C8:79:1F:76:B6:B3:75:18:1C:8C:24:1D:AE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CCC3730AB96C8791F76B6B375181C8C241DAE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32332d3233203d3e20323731363236.roa
Signing time:             Tue 14 Dec 2021 15:58:35 +0000
ROA not before:           Tue 14 Dec 2021 15:53:35 +0000
ROA not after:            Tue 13 Dec 2022 15:58:35 +0000
asID:                     271626
IP address blocks:        181.189.80.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:aa:41:c7:20:1d:fe:14:2c:89:4d:be:47:b5:d3:4b:3c:5a:fd:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CCC3730AB96C8791F76B6B375181C8C241DAE83
        Validity
            Not Before: Dec 14 15:53:35 2021 GMT
            Not After : Dec 13 15:58:35 2022 GMT
        Subject: CN=3082010A0282010100BF531966A1C29CC61433199E506635497843074CEEF54F2D403D2F6025D153AED8FF042C4AA54A4ECB36947DCE9F74592615C078B6ADF941D0633A39F3F4D04BA161C70085806F03417D40329C4A330BBA5BF6475E9445B6E3346C8E892FFA8EBC04154EDE6D3BC20DF29BFBEECE30EF39204C7EB237DD176092A90E313ED883CBE633121805577589F2895F6472FC4F2FAF33CD91D8D3F3FAA57C51179819695BFEC3CB293AEA535F4061CB41E744D3C6454750F3DC68995184A78BD7A3C6347D97F1A77F81F786236E6A6E6C2BAD19383931C92B4875E760A7E0C8C547B9EC39DD69600F47631C5E363CA68626E3207C313F09A28DA268B15BE1CBDCDDEF650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:19:66:a1:c2:9c:c6:14:33:19:9e:50:66:
                    35:49:78:43:07:4c:ee:f5:4f:2d:40:3d:2f:60:25:
                    d1:53:ae:d8:ff:04:2c:4a:a5:4a:4e:cb:36:94:7d:
                    ce:9f:74:59:26:15:c0:78:b6:ad:f9:41:d0:63:3a:
                    39:f3:f4:d0:4b:a1:61:c7:00:85:80:6f:03:41:7d:
                    40:32:9c:4a:33:0b:ba:5b:f6:47:5e:94:45:b6:e3:
                    34:6c:8e:89:2f:fa:8e:bc:04:15:4e:de:6d:3b:c2:
                    0d:f2:9b:fb:ee:ce:30:ef:39:20:4c:7e:b2:37:dd:
                    17:60:92:a9:0e:31:3e:d8:83:cb:e6:33:12:18:05:
                    57:75:89:f2:89:5f:64:72:fc:4f:2f:af:33:cd:91:
                    d8:d3:f3:fa:a5:7c:51:17:98:19:69:5b:fe:c3:cb:
                    29:3a:ea:53:5f:40:61:cb:41:e7:44:d3:c6:45:47:
                    50:f3:dc:68:99:51:84:a7:8b:d7:a3:c6:34:7d:97:
                    f1:a7:7f:81:f7:86:23:6e:6a:6e:6c:2b:ad:19:38:
                    39:31:c9:2b:48:75:e7:60:a7:e0:c8:c5:47:b9:ec:
                    39:dd:69:60:0f:47:63:1c:5e:36:3c:a6:86:26:e3:
                    20:7c:31:3f:09:a2:8d:a2:68:b1:5b:e1:cb:dc:dd:
                    ef:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:95:E8:D1:F1:7D:05:FC:F1:EE:AF:87:FE:0A:3F:77:DB:39:4D:95
            X509v3 Authority Key Identifier:
                keyid:7C:CC:37:30:AB:96:C8:79:1F:76:B6:B3:75:18:1C:8C:24:1D:AE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/7CCC3730AB96C8791F76B6B375181C8C241DAE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CCC3730AB96C8791F76B6B375181C8C241DAE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32332d3233203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:35:50:76:1c:a9:21:c3:d3:c6:3a:d5:93:40:36:7c:25:9d:
         57:e0:5e:1a:e0:40:f2:03:6a:b0:d4:aa:48:13:28:f8:64:a0:
         1a:66:e7:43:a0:be:52:28:92:00:b9:9c:e6:78:c4:fb:b9:88:
         f0:a1:6f:40:90:60:d2:1f:00:26:b8:bc:90:18:6c:8b:69:ed:
         6a:ea:29:15:20:c6:c5:5c:fe:fd:99:32:fd:c8:50:8b:82:cd:
         1c:e5:09:21:28:15:65:e3:aa:21:46:a0:05:46:fe:e1:fa:b0:
         c2:5f:8c:33:dd:0b:f2:02:39:54:98:38:6e:97:e4:45:be:dd:
         ae:20:49:73:bc:af:2e:c0:cf:f9:85:2c:76:a9:1a:b6:62:2b:
         a2:c4:02:ed:d5:76:bd:15:e1:a3:5f:d8:0e:7f:7b:9a:a3:49:
         45:9b:f4:88:29:c8:16:1d:8f:4b:4f:7e:28:6b:02:3d:21:51:
         c9:9e:66:83:ee:68:06:30:55:f6:7e:30:28:d5:3f:6a:b2:5b:
         65:91:c9:a1:3c:02:9c:29:94:1c:5e:66:9c:43:03:22:a7:24:
         07:7a:59:83:de:27:b1:25:e4:ef:7b:2e:7f:90:06:61:a0:07:
         30:29:ac:af:7a:2a:4f:32:78:8a:c7:88:cc:33:fa:f3:08:96:
         9a:e2:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org