Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e302e302f32322d3234203d3e20323731343134.roa
File:                     3138312e3232342e302e302f32322d3234203d3e20323731343134.roa (raw, json)
Hash identifier:          wGjxbeZ0Yivv2d0gZDMwX6yYp+Jq28iwR9yZI/tY/Ds=
Subject key identifier:   99:91:11:C3:43:58:AB:0C:51:56:94:BB:B0:07:2A:C7:33:42:13:4E
Certificate issuer:       /CN=FDF912AB43D9EC498247AB2AA097FCC4CF726502
Certificate serial:       4A77993F41772C77F7D69613F2AFF473D4ADF155
Authority key identifier: FD:F9:12:AB:43:D9:EC:49:82:47:AB:2A:A0:97:FC:C4:CF:72:65:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e302e302f32322d3234203d3e20323731343134.roa
Signing time:             Tue 03 May 2022 12:25:09 +0000
ROA not before:           Tue 03 May 2022 12:20:09 +0000
ROA not after:            Tue 02 May 2023 12:25:09 +0000
asID:                     271414
IP address blocks:        181.224.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:77:99:3f:41:77:2c:77:f7:d6:96:13:f2:af:f4:73:d4:ad:f1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDF912AB43D9EC498247AB2AA097FCC4CF726502
        Validity
            Not Before: May  3 12:20:09 2022 GMT
            Not After : May  2 12:25:09 2023 GMT
        Subject: CN=999111C34358AB0C515694BBB0072AC73342134E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:88:03:e1:ca:1c:64:90:6e:f6:8b:b0:a9:
                    7f:41:c8:4c:b6:5c:79:a0:69:2b:f6:8e:d3:c1:ba:
                    1b:bd:d2:d5:4b:6d:82:70:23:81:09:7e:19:0f:09:
                    e0:f8:99:a6:13:27:02:e5:81:d2:2f:e7:4b:c9:0e:
                    a4:64:3e:d7:6c:60:4b:e7:17:92:9f:2a:3a:d1:30:
                    42:d1:69:5d:fd:f7:ed:b5:2f:c4:42:63:0d:e1:21:
                    56:87:5c:1b:14:a0:1b:8c:21:47:0a:e5:ae:c9:2d:
                    39:0c:59:cc:2d:f0:b3:d8:12:7d:06:dc:d6:e3:63:
                    91:20:5b:97:86:24:72:dd:3b:26:4e:60:ff:1e:10:
                    7b:5a:8b:45:2e:f2:f5:02:c2:c2:94:d6:c6:c0:c6:
                    e8:11:61:60:b0:b5:78:ea:76:29:4e:37:54:c4:1f:
                    37:4a:84:b7:bb:f1:60:21:c2:b2:5b:e8:96:ac:51:
                    f0:66:1d:b9:74:94:44:1f:29:9e:53:d2:1b:fa:0a:
                    e2:c2:83:d7:08:a8:17:95:8b:b5:27:77:95:ea:f1:
                    59:96:f7:28:84:58:32:98:17:55:f9:52:a8:ee:f1:
                    58:fa:8f:83:16:57:f7:27:0a:6a:1c:d8:b6:80:96:
                    e2:37:4a:da:58:2d:3f:31:8d:fe:5f:7d:ec:ca:f1:
                    ee:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:91:11:C3:43:58:AB:0C:51:56:94:BB:B0:07:2A:C7:33:42:13:4E
            X509v3 Authority Key Identifier:
                keyid:FD:F9:12:AB:43:D9:EC:49:82:47:AB:2A:A0:97:FC:C4:CF:72:65:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e302e302f32322d3234203d3e20323731343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:15:15:8a:ac:2d:a6:02:86:1f:fe:f4:93:5a:cb:5c:1a:65:
         da:4d:53:73:b9:e2:37:22:97:57:87:ad:af:6d:41:d5:e0:94:
         7f:f1:00:d4:16:d2:1c:19:35:dc:9e:55:b0:1c:24:ed:f8:96:
         dc:bf:77:14:0e:55:41:49:39:cb:bd:6d:2e:cd:ed:17:04:b7:
         55:0d:67:7e:3f:80:3e:80:81:4b:73:07:cd:7e:da:dd:63:87:
         71:0c:56:5e:b9:cf:02:44:14:ab:c5:59:67:22:8c:3a:a7:14:
         de:d8:83:df:16:a2:1e:e7:86:fd:25:8d:05:49:81:a1:22:53:
         f1:ba:7d:dd:fa:77:64:4b:f8:38:f6:6a:ed:c6:5a:43:f6:d2:
         58:9c:7b:16:d0:78:8e:e1:8f:b0:f4:3b:3f:a0:10:40:9e:47:
         7a:2a:b1:e2:1c:5e:92:9c:c6:25:97:3a:10:73:9d:82:ee:0d:
         00:28:24:c1:bd:b9:d5:39:3e:46:7e:2f:58:6b:d4:42:03:55:
         7f:4b:a3:ca:17:d5:59:3a:26:75:6f:63:55:06:33:59:60:8e:
         1b:3a:97:e1:8a:20:1b:26:45:91:d6:a7:d1:5e:d2:2c:25:1c:
         5e:f8:8e:22:e8:e3:f4:ab:03:fb:95:d4:2c:c3:90:2f:63:0f:
         3f:85:57:96
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSneZP0F3LHf31pYT8q/0c9St8VUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRGOTEyQUI0M0Q5RUM0OTgyNDdBQjJBQTA5N0ZDQzRD
RjcyNjUwMjAeFw0yMjA1MDMxMjIwMDlaFw0yMzA1MDIxMjI1MDlaMDMxMTAvBgNV
BAMTKDk5OTExMUMzNDM1OEFCMEM1MTU2OTRCQkIwMDcyQUM3MzM0MjEzNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7qIgD4cocZJBu9ouwqX9ByEy2
XHmgaSv2jtPBuhu90tVLbYJwI4EJfhkPCeD4maYTJwLlgdIv50vJDqRkPtdsYEvn
F5KfKjrRMELRaV399+21L8RCYw3hIVaHXBsUoBuMIUcK5a7JLTkMWcwt8LPYEn0G
3NbjY5EgW5eGJHLdOyZOYP8eEHtai0Uu8vUCwsKU1sbAxugRYWCwtXjqdilON1TE
HzdKhLe78WAhwrJb6JasUfBmHbl0lEQfKZ5T0hv6CuLCg9cIqBeVi7Und5Xq8VmW
9yiEWDKYF1X5Uqju8Vj6j4MWV/cnCmoc2LaAluI3StpYLT8xjf5ffezK8e5tAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmZERw0NYqwxRVpS7sAcqxzNCE04wHwYDVR0j
BBgwFoAU/fkSq0PZ7EmCR6sqoJf8xM9yZQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWkxQXZyQ0Y2Smhyc0Nmam5NZVJObXZkNlZodU1LeWJjZ3NRRzRVcm1z
WHcvMC9GREY5MTJBQjQzRDlFQzQ5ODI0N0FCMkFBMDk3RkNDNENGNzI2NTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZERjkxMkFCNDNEOUVDNDk4
MjQ3QUIyQUEwOTdGQ0M0Q0Y3MjY1MDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVpMUF2ckNGNkpocnNDZmpuTWVSTm12ZDZWaHVNS3liY2dzUUc0VXJtc1h3LzAv
MzEzODMxMmUzMjMyMzQyZTMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMx
MzQzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCteAAMA0GCSqGSIb3DQEBCwUAA4IBAQBpFRWKrC2m
AoYf/vSTWstcGmXaTVNzueI3IpdXh62vbUHV4JR/8QDUFtIcGTXcnlWwHCTt+Jbc
v3cUDlVBSTnLvW0uze0XBLdVDWd+P4A+gIFLcwfNftrdY4dxDFZeuc8CRBSrxVln
Iow6pxTe2IPfFqIe54b9JY0FSYGhIlPxun3d+ndkS/g49mrtxlpD9tJYnHsW0HiO
4Y+w9Ds/oBBAnkd6KrHiHF6SnMYllzoQc52C7g0AKCTBvbnVOT5Gfi9Ya9RCA1V/
S6PKF9VZOiZ1b2NVBjNZYI4bOpfhiiAbJkWR1qfRXtIsJRxe+I4i6OP0qwP7ldQs
w5AvYw8/hVeW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org