Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e332e302f32342d3234203d3e20323731343134.roa
File:                     3138312e3232342e332e302f32342d3234203d3e20323731343134.roa (raw, json)
Hash identifier:          SXYlCwd8HTm+mFmuqADOHH7aIylUdA0CmQB2skeBoJ0=
Subject key identifier:   27:D4:62:EA:85:39:42:83:0A:A8:62:86:DB:76:17:3E:AC:C6:31:A2
Certificate issuer:       /CN=FDF912AB43D9EC498247AB2AA097FCC4CF726502
Certificate serial:       647253E38C0C4ED31D4CD236BB44B9A67AD3E63E
Authority key identifier: FD:F9:12:AB:43:D9:EC:49:82:47:AB:2A:A0:97:FC:C4:CF:72:65:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e332e302f32342d3234203d3e20323731343134.roa
Signing time:             Mon 02 May 2022 22:03:20 +0000
ROA not before:           Mon 02 May 2022 21:58:20 +0000
ROA not after:            Mon 01 May 2023 22:03:20 +0000
asID:                     271414
IP address blocks:        181.224.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:72:53:e3:8c:0c:4e:d3:1d:4c:d2:36:bb:44:b9:a6:7a:d3:e6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDF912AB43D9EC498247AB2AA097FCC4CF726502
        Validity
            Not Before: May  2 21:58:20 2022 GMT
            Not After : May  1 22:03:20 2023 GMT
        Subject: CN=27D462EA853942830AA86286DB76173EACC631A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:90:d5:71:1c:a1:48:e2:30:08:99:5d:9f:e3:
                    19:36:31:24:22:aa:ef:05:8f:cc:44:c0:ce:29:b5:
                    0d:ff:78:a9:fc:5c:0d:45:de:87:ba:60:ff:13:d5:
                    56:ec:00:db:92:5f:01:66:d4:cd:f4:f0:0b:a0:fe:
                    9f:05:d6:1f:19:91:ee:e8:10:3d:1a:27:77:7a:de:
                    c0:88:56:6a:4d:2e:d5:98:96:8c:b6:92:f0:63:29:
                    57:41:8a:f7:16:22:ee:cc:d6:a3:49:38:d6:3a:d3:
                    1b:22:38:93:89:f8:c4:5f:bd:0a:76:30:cc:2d:a4:
                    16:19:e4:90:ad:25:06:b4:d1:f3:0d:1b:cb:82:20:
                    61:76:94:a1:0f:48:6e:33:19:df:79:97:9d:5e:47:
                    21:50:b0:b6:9f:e0:7f:f1:cb:a5:c8:ab:dd:7e:14:
                    83:62:8e:68:87:51:ee:ef:31:96:a2:83:1a:14:d3:
                    eb:7c:91:21:04:d7:25:4a:f4:f7:b9:84:fd:12:e1:
                    64:29:f3:cf:ba:4c:cb:26:af:04:38:ac:1e:59:fd:
                    86:50:f0:b7:38:34:c5:24:f5:57:ab:af:85:3a:a3:
                    6e:4c:f6:86:1e:d4:10:6f:0c:41:cc:d7:2c:b2:e1:
                    23:be:bb:f9:6b:3d:0a:d2:5f:2c:e2:f1:45:87:d0:
                    cd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D4:62:EA:85:39:42:83:0A:A8:62:86:DB:76:17:3E:AC:C6:31:A2
            X509v3 Authority Key Identifier:
                keyid:FD:F9:12:AB:43:D9:EC:49:82:47:AB:2A:A0:97:FC:C4:CF:72:65:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF912AB43D9EC498247AB2AA097FCC4CF726502.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e332e302f32342d3234203d3e20323731343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b5:b0:98:b5:a8:22:c0:38:f1:8e:ae:0d:a4:a1:79:d1:bf:
         d4:2b:12:27:a3:78:f9:01:a4:64:ac:a3:9d:ce:c6:f1:ab:81:
         39:d3:64:2b:bf:c0:33:a4:ef:1c:a0:ed:d1:3e:86:1f:89:c1:
         d3:16:4e:d5:cb:31:8d:86:a2:22:90:9c:c1:59:f0:46:13:15:
         0b:45:0e:0d:c4:f9:19:9c:7b:30:50:60:8a:54:75:bd:cb:6b:
         2c:47:eb:44:07:04:35:9d:03:df:a3:56:ce:60:93:fb:22:8d:
         82:ba:3b:3c:7b:52:82:09:2e:f5:8a:62:62:19:45:15:16:11:
         45:ab:30:d6:5b:7d:a4:d3:a8:0a:d3:42:1a:4a:05:48:83:86:
         a0:61:70:01:c4:87:2c:b8:93:dd:2b:ad:7d:4f:cb:75:04:02:
         61:1f:1d:ed:c4:d3:67:2c:62:9d:6a:31:41:56:5b:5e:5d:94:
         59:ba:56:d2:0f:ed:ad:c0:df:03:2c:ec:6d:6c:1e:16:39:eb:
         47:53:6a:d6:30:5a:4b:8a:f3:6e:20:4d:f5:f4:94:64:51:48:
         a9:b6:cc:24:fb:b9:b8:5f:e9:13:58:59:a3:5b:db:51:13:35:
         ab:14:99:00:c3:c9:93:9c:4a:d5:11:e1:e2:a5:9c:25:cf:8e:
         b4:2d:67:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org