Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e302e302f32322d3233203d3e20323731343134.roa
File:                     3138312e3232342e302e302f32322d3233203d3e20323731343134.roa (raw, json)
Hash identifier:          tb7fZGbN1gZ8cb5hawJpfScyPOJT9TM0+99lY/jwyOM=
Subject key identifier:   46:A9:F1:58:CD:4F:0B:AB:6E:67:EB:6F:2D:DA:AA:68:10:38:70:D2
Certificate issuer:       /CN=FDF912AB43D9EC498247AB2AA097FCC4CF726502
Certificate serial:       33357F0EDC875158BE4E2631416B5B7EEFA2BAEC
Authority key identifier: FD:F9:12:AB:43:D9:EC:49:82:47:AB:2A:A0:97:FC:C4:CF:72:65:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e302e302f32322d3233203d3e20323731343134.roa
Signing time:             Mon 21 Mar 2022 14:53:30 +0000
ROA not before:           Mon 21 Mar 2022 14:48:30 +0000
ROA not after:            Mon 20 Mar 2023 14:53:30 +0000
asID:                     271414
IP address blocks:        181.224.0.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:35:7f:0e:dc:87:51:58:be:4e:26:31:41:6b:5b:7e:ef:a2:ba:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDF912AB43D9EC498247AB2AA097FCC4CF726502
        Validity
            Not Before: Mar 21 14:48:30 2022 GMT
            Not After : Mar 20 14:53:30 2023 GMT
        Subject: CN=46A9F158CD4F0BAB6E67EB6F2DDAAA68103870D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:26:aa:27:fc:00:cb:f8:02:24:a4:1f:4c:
                    a0:30:13:20:d9:37:92:67:ad:07:04:52:41:48:f9:
                    92:19:a7:c8:c2:7c:82:8a:8e:74:2b:fd:ed:fa:05:
                    36:e6:23:3c:c5:d6:5a:f8:ce:67:3d:d1:39:ab:de:
                    d9:00:2e:30:ec:bb:7a:a2:1c:5c:24:27:8b:f8:b3:
                    58:a4:c3:82:a8:7b:d2:9e:6f:94:c1:3d:12:cc:82:
                    13:cc:50:08:b6:4a:bc:fa:d2:14:49:27:86:6d:f8:
                    2f:ae:0d:23:0f:4c:6c:ca:4f:c2:86:3b:ed:64:28:
                    40:7d:1a:5f:a0:60:9e:fb:b9:43:56:48:ad:7c:10:
                    eb:b5:3f:7f:97:69:68:b2:4c:65:9e:03:c8:e7:48:
                    aa:88:18:28:7b:59:82:2f:83:91:b6:e5:b1:e2:22:
                    e5:eb:22:7f:6e:a7:f6:ab:25:35:14:17:3c:50:17:
                    93:97:fd:bf:27:92:a8:18:db:80:d5:9b:72:8c:51:
                    8c:6a:a8:d0:c4:bb:7b:66:e3:0b:fa:ab:d1:27:be:
                    bf:65:6c:c0:b4:60:4b:61:16:77:ba:43:b8:d6:bd:
                    a0:04:4f:97:ea:51:cb:95:57:39:ad:62:0d:2f:bd:
                    85:19:71:33:14:cc:5a:95:08:dd:84:67:f6:47:e2:
                    a1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A9:F1:58:CD:4F:0B:AB:6E:67:EB:6F:2D:DA:AA:68:10:38:70:D2
            X509v3 Authority Key Identifier:
                keyid:FD:F9:12:AB:43:D9:EC:49:82:47:AB:2A:A0:97:FC:C4:CF:72:65:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e302e302f32322d3233203d3e20323731343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:0b:ff:25:7f:07:2b:4d:b5:22:5a:42:fb:b1:c7:fe:a2:6c:
         c1:1e:c3:5a:6b:9a:41:29:d1:72:db:e9:83:8a:76:23:2c:7f:
         5c:20:0d:62:79:f6:24:01:28:a9:13:1f:26:e4:f7:c8:85:32:
         38:25:3f:10:89:05:fd:7b:ec:2f:bf:b8:a6:5d:6c:36:ab:ed:
         7f:fd:08:73:04:45:dc:20:bd:70:49:d0:b0:2d:54:61:e0:06:
         84:71:7e:53:21:fa:3c:d6:97:a9:a1:a9:4e:9e:e5:8e:12:93:
         fc:ce:e8:8b:ab:5a:23:fb:74:ac:2d:90:cd:c7:88:32:15:b1:
         c9:61:a5:1d:dc:df:0f:d2:91:0a:67:fc:96:39:72:0f:77:5b:
         de:a2:f3:8a:48:2f:31:62:7c:f5:53:7f:d1:3d:31:30:17:ca:
         31:ed:21:15:fa:04:cb:51:a7:5c:99:72:9d:17:e7:8f:60:25:
         4e:db:a8:89:cb:3d:48:c3:59:69:b4:96:45:1a:86:af:61:3e:
         12:e3:8a:0f:54:21:f6:20:4f:65:e1:cc:7d:48:94:f7:f1:73:
         92:dd:7c:9c:c6:60:ec:d0:af:e5:ce:37:3a:a0:39:bb:fe:e4:
         e6:a3:b0:19:b8:c0:e1:4a:e7:d3:2c:c6:cf:18:e9:8b:eb:3a:
         9a:da:71:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org