Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e302e302f32322d3232203d3e20323731343134.roa
File:                     3138312e3232342e302e302f32322d3232203d3e20323731343134.roa (raw, json)
Hash identifier:          FBiVspkyVobf7qUzhfjT9mqnUguQUX+KFVcJcwMoJHQ=
Subject key identifier:   E1:6B:52:31:B4:63:BB:44:BD:27:37:C0:2D:2C:A9:4B:11:E8:1D:AE
Certificate issuer:       /CN=FDF912AB43D9EC498247AB2AA097FCC4CF726502
Certificate serial:       18B13813AC1983DF8DB7B784ADAF0C83E1B24B37
Authority key identifier: FD:F9:12:AB:43:D9:EC:49:82:47:AB:2A:A0:97:FC:C4:CF:72:65:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e302e302f32322d3232203d3e20323731343134.roa
Signing time:             Thu 24 Mar 2022 12:28:35 +0000
ROA not before:           Thu 24 Mar 2022 12:23:35 +0000
ROA not after:            Thu 23 Mar 2023 12:28:35 +0000
asID:                     271414
IP address blocks:        181.224.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b1:38:13:ac:19:83:df:8d:b7:b7:84:ad:af:0c:83:e1:b2:4b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDF912AB43D9EC498247AB2AA097FCC4CF726502
        Validity
            Not Before: Mar 24 12:23:35 2022 GMT
            Not After : Mar 23 12:28:35 2023 GMT
        Subject: CN=E16B5231B463BB44BD2737C02D2CA94B11E81DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:5a:c2:b0:87:16:99:50:e0:c5:b7:fb:51:
                    cd:dc:e3:cd:ed:fb:ab:05:28:4e:eb:b7:4f:b2:d2:
                    be:36:f0:58:e8:dc:80:e9:4b:03:70:c5:3c:84:61:
                    d5:a5:28:5a:81:09:63:34:52:e6:89:fa:2e:a6:cb:
                    ba:0b:d9:eb:da:f5:f2:e6:24:ed:b2:ed:68:32:d0:
                    b0:40:29:36:4a:33:57:5f:52:96:0c:ea:e8:99:67:
                    53:dc:73:c3:78:52:82:bc:04:b0:68:c8:84:09:dd:
                    89:89:3e:9c:a9:19:bd:36:c8:25:df:e7:c9:a7:2b:
                    d9:57:0b:e4:cc:f9:40:59:99:b4:c3:09:05:f8:98:
                    b1:99:45:7a:f0:9c:0e:ea:c9:bc:08:25:8e:ee:82:
                    43:81:9f:60:6f:9a:17:42:4a:3a:bd:1d:41:b6:95:
                    38:ba:72:37:d5:13:e9:32:bd:ed:2a:cc:39:76:0a:
                    17:a9:f6:d5:5e:2d:52:ec:06:c6:b3:84:4e:a6:25:
                    0c:71:32:b7:17:90:4c:77:8c:93:cb:59:5c:8e:e5:
                    34:9a:73:cb:5d:4e:8c:4f:43:87:3b:95:d8:0b:25:
                    49:d4:da:e2:c9:a2:b6:a3:69:29:49:07:49:98:60:
                    99:38:fa:fb:33:ec:71:75:84:21:38:c7:ca:cc:f2:
                    4b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6B:52:31:B4:63:BB:44:BD:27:37:C0:2D:2C:A9:4B:11:E8:1D:AE
            X509v3 Authority Key Identifier:
                keyid:FD:F9:12:AB:43:D9:EC:49:82:47:AB:2A:A0:97:FC:C4:CF:72:65:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e302e302f32322d3232203d3e20323731343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:63:3a:f6:4b:43:dd:b0:c7:3b:2c:f4:4a:d2:64:c5:73:cf:
         1f:a2:e7:e9:e1:8f:35:d2:0f:3c:08:ad:fc:3e:34:c2:a6:09:
         06:98:4d:bd:ea:4c:3a:e9:74:60:fe:09:3e:45:a8:8b:93:0d:
         cd:81:65:b6:6c:75:f3:03:72:49:2e:45:02:81:c8:0d:9d:ac:
         1f:89:30:46:2b:02:85:0a:17:fc:4f:1a:be:8e:9b:93:2c:a6:
         38:5b:2e:95:09:8f:af:ca:16:41:81:40:7d:97:01:1c:45:c6:
         86:9a:c6:10:c1:ac:43:2a:71:8f:a7:0c:a6:ec:b2:17:a6:3c:
         01:4e:03:0a:66:7f:5b:36:d4:96:08:f2:0b:12:c9:f4:f4:dd:
         df:9e:9d:9e:b9:e9:05:84:e7:e1:01:b9:5c:24:ca:1b:de:28:
         14:c0:35:9a:ff:e6:b5:df:17:7b:24:28:8a:ec:51:25:b3:5d:
         e7:6c:30:fe:c7:cf:53:12:5b:91:8c:b3:9b:0c:55:ed:38:ba:
         1b:45:6e:d7:6e:39:80:a0:b5:1e:ac:a2:23:0b:77:3a:60:8e:
         03:09:b3:50:73:93:0b:c1:86:92:22:42:f9:24:8a:23:f3:5a:
         73:2d:e3:29:7a:b1:74:88:61:06:2b:d2:b4:5a:c9:3e:d5:a1:
         96:5e:d0:7d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGLE4E6wZg9+Nt7eEra8Mg+GySzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRGOTEyQUI0M0Q5RUM0OTgyNDdBQjJBQTA5N0ZDQzRD
RjcyNjUwMjAeFw0yMjAzMjQxMjIzMzVaFw0yMzAzMjMxMjI4MzVaMDMxMTAvBgNV
BAMTKEUxNkI1MjMxQjQ2M0JCNDRCRDI3MzdDMDJEMkNBOTRCMTFFODFEQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDx1rCsIcWmVDgxbf7Uc3c483t
+6sFKE7rt0+y0r428Fjo3IDpSwNwxTyEYdWlKFqBCWM0UuaJ+i6my7oL2eva9fLm
JO2y7Wgy0LBAKTZKM1dfUpYM6uiZZ1Pcc8N4UoK8BLBoyIQJ3YmJPpypGb02yCXf
58mnK9lXC+TM+UBZmbTDCQX4mLGZRXrwnA7qybwIJY7ugkOBn2BvmhdCSjq9HUG2
lTi6cjfVE+kyve0qzDl2Chep9tVeLVLsBsazhE6mJQxxMrcXkEx3jJPLWVyO5TSa
c8tdToxPQ4c7ldgLJUnU2uLJorajaSlJB0mYYJk4+vsz7HF1hCE4x8rM8kuNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4WtSMbRju0S9JzfALSypSxHoHa4wHwYDVR0j
BBgwFoAU/fkSq0PZ7EmCR6sqoJf8xM9yZQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWkxQXZyQ0Y2Smhyc0Nmam5NZVJObXZkNlZodU1LeWJjZ3NRRzRVcm1z
WHcvMC9GREY5MTJBQjQzRDlFQzQ5ODI0N0FCMkFBMDk3RkNDNENGNzI2NTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZERjkxMkFCNDNEOUVDNDk4
MjQ3QUIyQUEwOTdGQ0M0Q0Y3MjY1MDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVpMUF2ckNGNkpocnNDZmpuTWVSTm12ZDZWaHVNS3liY2dzUUc0VXJtc1h3LzAv
MzEzODMxMmUzMjMyMzQyZTMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMx
MzQzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCteAAMA0GCSqGSIb3DQEBCwUAA4IBAQCzYzr2S0Pd
sMc7LPRK0mTFc88foufp4Y810g88CK38PjTCpgkGmE296kw66XRg/gk+RaiLkw3N
gWW2bHXzA3JJLkUCgcgNnawfiTBGKwKFChf8Txq+jpuTLKY4Wy6VCY+vyhZBgUB9
lwEcRcaGmsYQwaxDKnGPpwym7LIXpjwBTgMKZn9bNtSWCPILEsn09N3fnp2euekF
hOfhAblcJMob3igUwDWa/+a13xd7JCiK7FEls13nbDD+x89TEluRjLObDFXtOLob
RW7XbjmAoLUerKIjC3c6YI4DCbNQc5MLwYaSIkL5JIoj81pzLeMperF0iGEGK9K0
Wsk+1aGWXtB9
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org