Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38322e302f32332d3233203d3e20323731363236.roa
File:                     3138312e3138392e38322e302f32332d3233203d3e20323731363236.roa (raw, json)
Hash identifier:          u9dBT9oI/yOFcEGgzsjoLBi2Zk1KhW0ZMqEwM80CqJU=
Subject key identifier:   77:13:98:0A:64:72:E1:C0:F6:A0:9F:95:4B:AE:22:AD:9A:88:E9:9E
Certificate issuer:       /CN=7CCC3730AB96C8791F76B6B375181C8C241DAE83
Certificate serial:       707C950A17C739E11108706A0F792D34E5D83129
Authority key identifier: 7C:CC:37:30:AB:96:C8:79:1F:76:B6:B3:75:18:1C:8C:24:1D:AE:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CCC3730AB96C8791F76B6B375181C8C241DAE83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38322e302f32332d3233203d3e20323731363236.roa
Signing time:             Thu 23 Dec 2021 21:10:13 +0000
ROA not before:           Thu 23 Dec 2021 21:05:13 +0000
ROA not after:            Thu 22 Dec 2022 21:10:13 +0000
asID:                     271626
IP address blocks:        181.189.82.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7c:95:0a:17:c7:39:e1:11:08:70:6a:0f:79:2d:34:e5:d8:31:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CCC3730AB96C8791F76B6B375181C8C241DAE83
        Validity
            Not Before: Dec 23 21:05:13 2021 GMT
            Not After : Dec 22 21:10:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:9b:d4:7e:ec:1f:db:94:79:b3:9a:ff:ac:
                    c4:26:26:2e:b5:10:3d:d0:6a:dd:da:7a:c8:11:c4:
                    fa:27:7d:74:fa:ac:51:11:c8:63:d2:b2:20:a5:76:
                    73:7f:ce:c4:b4:a3:15:6d:5d:a2:52:cd:0c:16:56:
                    9d:dd:3f:7a:14:3d:e5:2c:cf:96:db:a7:91:ba:4a:
                    c2:fa:e3:44:a1:1c:c9:65:5b:e7:a0:04:d2:80:34:
                    2e:36:9a:70:6d:ad:cf:d9:e5:ff:47:0c:41:49:f8:
                    fb:9a:36:ad:1d:75:f0:36:8d:b9:23:70:ca:29:b5:
                    5b:67:9b:d7:09:58:fe:3c:30:8e:e9:a4:cc:54:de:
                    32:0a:8e:3c:40:b6:2e:c9:49:12:40:69:66:c4:ae:
                    39:02:e7:16:b0:c7:69:2d:1d:29:4f:87:3a:87:aa:
                    cd:cc:d4:a1:b7:9e:a3:cb:9b:13:6f:a5:17:05:1d:
                    b4:22:a7:e4:25:c9:e3:0e:cb:bf:0d:0b:31:d5:e7:
                    bd:ae:e0:00:65:e4:89:a8:ae:f7:ef:14:b2:17:31:
                    d0:5b:64:77:c0:50:91:e5:fd:5d:15:a6:59:96:83:
                    f6:72:bb:1a:5b:66:a1:3e:00:e4:c2:7c:af:b7:58:
                    4f:4f:4e:b5:3e:d9:fc:36:28:3c:b0:54:24:fd:97:
                    ac:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:13:98:0A:64:72:E1:C0:F6:A0:9F:95:4B:AE:22:AD:9A:88:E9:9E
            X509v3 Authority Key Identifier:
                keyid:7C:CC:37:30:AB:96:C8:79:1F:76:B6:B3:75:18:1C:8C:24:1D:AE:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/7CCC3730AB96C8791F76B6B375181C8C241DAE83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CCC3730AB96C8791F76B6B375181C8C241DAE83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38322e302f32332d3233203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:c4:83:29:dc:68:a0:27:a3:17:a4:2e:1a:57:86:2e:84:03:
         81:70:c0:9c:d9:c2:5a:44:98:f4:d5:ec:f8:3e:e7:61:7d:68:
         7a:d7:ea:c2:78:bf:6d:a3:62:da:6f:78:66:23:99:be:01:11:
         96:f0:bc:71:23:e6:68:7d:51:51:99:78:28:58:75:ae:44:a6:
         da:2c:08:54:d6:a0:34:53:e1:50:51:29:7b:36:7b:66:a8:dc:
         5a:7d:c6:8f:fd:a3:9c:7f:f1:91:b2:f2:ff:3b:09:92:c6:e1:
         22:58:71:b0:88:30:de:b6:d3:38:96:e8:40:d9:da:f2:71:af:
         41:72:55:75:f3:ed:24:ea:64:c3:df:d7:ae:64:ff:f9:7a:ea:
         7f:be:6e:41:65:c4:83:0a:9e:28:f1:fe:5c:36:26:79:3f:fd:
         3d:b5:82:33:bf:42:d1:1b:b7:33:35:45:4a:56:5c:c9:96:14:
         4d:90:2e:09:5a:c5:a2:af:2e:a0:ec:b3:9f:5d:d1:f5:b8:fc:
         c9:8f:ae:8a:31:a1:04:23:be:79:97:82:05:41:d6:f6:c4:9f:
         de:96:f5:f8:62:33:4c:8f:21:37:9f:aa:57:45:00:3e:2e:b8:
         3b:a0:67:71:d9:69:26:25:67:b8:e5:d7:68:91:3b:dc:cc:f7:
         27:c9:c8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org