Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e302e302f32332d3233203d3e20323731343134.roa
File:                     3138312e3232342e302e302f32332d3233203d3e20323731343134.roa (raw, json)
Hash identifier:          40KBZWl658ySl7/dysJoz9WmrTQKcSmcHGkpVBQxISQ=
Subject key identifier:   EF:08:7A:53:53:B6:4C:04:C1:5F:39:8C:90:EC:F8:3F:F3:82:CD:B8
Certificate issuer:       /CN=FDF912AB43D9EC498247AB2AA097FCC4CF726502
Certificate serial:       2347A99B78C84E1D03787C92AF7947CC0BEDD60C
Authority key identifier: FD:F9:12:AB:43:D9:EC:49:82:47:AB:2A:A0:97:FC:C4:CF:72:65:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e302e302f32332d3233203d3e20323731343134.roa
Signing time:             Mon 02 May 2022 22:02:57 +0000
ROA not before:           Mon 02 May 2022 21:57:57 +0000
ROA not after:            Mon 01 May 2023 22:02:57 +0000
asID:                     271414
IP address blocks:        181.224.0.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:47:a9:9b:78:c8:4e:1d:03:78:7c:92:af:79:47:cc:0b:ed:d6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDF912AB43D9EC498247AB2AA097FCC4CF726502
        Validity
            Not Before: May  2 21:57:57 2022 GMT
            Not After : May  1 22:02:57 2023 GMT
        Subject: CN=EF087A5353B64C04C15F398C90ECF83FF382CDB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:70:4d:2b:8c:90:65:75:a6:7f:fc:b6:65:
                    1a:51:d0:81:fc:24:d4:43:6e:19:f2:71:67:65:39:
                    98:d3:da:19:48:77:49:6f:4b:9c:d2:c3:03:90:ed:
                    55:b5:4c:2f:7f:69:9c:9c:e5:d2:f0:b6:14:dc:84:
                    53:cc:54:aa:a4:c1:0e:f0:c6:e0:81:b8:ad:d5:96:
                    91:95:b8:48:d7:f9:2d:4e:3a:af:5f:a2:bb:82:18:
                    77:ea:ff:ce:72:06:32:cf:dc:9a:9d:5d:63:f5:b8:
                    8a:c7:55:47:a6:5c:10:84:d1:51:e4:ef:7b:d7:9d:
                    de:6d:e1:76:7d:11:98:1d:62:99:8e:33:33:e0:49:
                    37:68:99:a5:b3:40:22:78:63:a1:d4:45:63:39:d2:
                    d0:2f:6c:fe:7b:aa:f3:45:2c:d8:5f:b1:ba:d7:af:
                    f1:1c:57:1f:a8:7c:93:68:74:6d:ba:9f:d7:70:a1:
                    cf:d6:13:83:b0:ec:cc:54:ff:18:9b:6c:79:15:3c:
                    44:4c:f6:a5:f8:12:d4:e4:73:22:15:7b:24:28:09:
                    54:a9:28:36:eb:af:8d:ac:2a:ea:32:c2:71:0c:ea:
                    ad:ea:e8:1c:43:ba:24:bf:b0:4e:db:13:ac:c8:3c:
                    9d:ee:0f:8b:19:29:a2:48:c2:f8:7d:7c:15:78:53:
                    ce:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:08:7A:53:53:B6:4C:04:C1:5F:39:8C:90:EC:F8:3F:F3:82:CD:B8
            X509v3 Authority Key Identifier:
                keyid:FD:F9:12:AB:43:D9:EC:49:82:47:AB:2A:A0:97:FC:C4:CF:72:65:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e302e302f32332d3233203d3e20323731343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:9c:3c:6f:24:11:82:80:0f:68:21:00:61:18:4c:7c:f1:1b:
         9b:99:f7:ff:b8:b4:51:f9:24:37:a3:99:62:a4:e8:6f:e2:4b:
         c2:cb:49:11:04:6e:d8:94:2d:12:a5:fb:6b:68:60:30:37:b2:
         3c:df:18:8b:01:90:82:16:aa:3b:34:2d:94:b5:75:16:1b:2e:
         52:4d:09:c7:18:d7:55:5f:a0:d6:06:d4:4c:69:75:2d:ad:61:
         7d:2c:82:03:f6:7f:00:36:0f:94:d9:b9:74:2d:29:8c:02:cb:
         21:88:eb:9f:3f:f8:b7:26:96:0e:34:93:c4:5f:0c:72:a7:92:
         7e:d6:30:a9:a2:df:dd:ed:9d:02:c0:0d:26:30:d2:ea:53:19:
         be:0d:5b:7a:d0:b8:14:12:30:a2:61:60:83:82:28:92:5c:5d:
         ad:55:c2:eb:0e:a1:2b:ba:f5:9d:80:85:eb:e8:fd:88:e7:30:
         52:78:4a:55:64:17:f4:a5:6c:cc:9f:70:e8:10:8a:6f:83:e6:
         b0:fe:4b:76:d3:03:52:da:fa:93:2d:43:d9:3e:eb:12:77:41:
         ab:ae:b0:90:79:1d:97:49:f3:79:7c:c0:ce:6b:78:ff:d6:fd:
         1d:ec:29:79:ef:e8:f9:1a:a1:83:63:fe:5a:a3:70:d5:c2:bf:
         03:01:7c:2e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUI0epm3jITh0DeHySr3lHzAvt1gwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRGOTEyQUI0M0Q5RUM0OTgyNDdBQjJBQTA5N0ZDQzRD
RjcyNjUwMjAeFw0yMjA1MDIyMTU3NTdaFw0yMzA1MDEyMjAyNTdaMDMxMTAvBgNV
BAMTKEVGMDg3QTUzNTNCNjRDMDRDMTVGMzk4QzkwRUNGODNGRjM4MkNEQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6J3BNK4yQZXWmf/y2ZRpR0IH8
JNRDbhnycWdlOZjT2hlId0lvS5zSwwOQ7VW1TC9/aZyc5dLwthTchFPMVKqkwQ7w
xuCBuK3VlpGVuEjX+S1OOq9foruCGHfq/85yBjLP3JqdXWP1uIrHVUemXBCE0VHk
73vXnd5t4XZ9EZgdYpmOMzPgSTdomaWzQCJ4Y6HURWM50tAvbP57qvNFLNhfsbrX
r/EcVx+ofJNodG26n9dwoc/WE4Ow7MxU/xibbHkVPERM9qX4EtTkcyIVeyQoCVSp
KDbrr42sKuoywnEM6q3q6BxDuiS/sE7bE6zIPJ3uD4sZKaJIwvh9fBV4U86BAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7wh6U1O2TATBXzmMkOz4P/OCzbgwHwYDVR0j
BBgwFoAU/fkSq0PZ7EmCR6sqoJf8xM9yZQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWkxQXZyQ0Y2Smhyc0Nmam5NZVJObXZkNlZodU1LeWJjZ3NRRzRVcm1z
WHcvMC9GREY5MTJBQjQzRDlFQzQ5ODI0N0FCMkFBMDk3RkNDNENGNzI2NTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZERjkxMkFCNDNEOUVDNDk4
MjQ3QUIyQUEwOTdGQ0M0Q0Y3MjY1MDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVpMUF2ckNGNkpocnNDZmpuTWVSTm12ZDZWaHVNS3liY2dzUUc0VXJtc1h3LzAv
MzEzODMxMmUzMjMyMzQyZTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMx
MzQzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBteAAMA0GCSqGSIb3DQEBCwUAA4IBAQACnDxvJBGC
gA9oIQBhGEx88Rubmff/uLRR+SQ3o5lipOhv4kvCy0kRBG7YlC0SpftraGAwN7I8
3xiLAZCCFqo7NC2UtXUWGy5STQnHGNdVX6DWBtRMaXUtrWF9LIID9n8ANg+U2bl0
LSmMAsshiOufP/i3JpYONJPEXwxyp5J+1jCpot/d7Z0CwA0mMNLqUxm+DVt60LgU
EjCiYWCDgiiSXF2tVcLrDqEruvWdgIXr6P2I5zBSeEpVZBf0pWzMn3DoEIpvg+aw
/kt20wNS2vqTLUPZPusSd0GrrrCQeR2XSfN5fMDOa3j/1v0d7Cl57+j5GqGDY/5a
o3DVwr8DAXwu
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org