Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/3138312e3139312e37322e302f32322d3232203d3e20323731363531.roa
File:                     3138312e3139312e37322e302f32322d3232203d3e20323731363531.roa (raw, json)
Hash identifier:          anUUFgQ1X69PaS5zJKKsDn9DgUF/c2pJ6afWiTQo3mg=
Subject key identifier:   42:DA:70:1C:86:CF:47:57:F6:96:87:40:5F:53:79:31:B9:02:32:AA
Certificate issuer:       /CN=CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001
Certificate serial:       392CD0424FFB3CE9FE7D247A0B6B7BF60F3575AC
Authority key identifier: CA:A3:D5:46:71:A2:8B:5A:90:C8:E9:6E:43:5E:FE:4D:0A:3F:40:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/3138312e3139312e37322e302f32322d3232203d3e20323731363531.roa
Signing time:             Thu 05 Jan 2023 13:57:37 +0000
ROA not before:           Thu 05 Jan 2023 13:52:37 +0000
ROA not after:            Thu 04 Jan 2024 13:57:37 +0000
asID:                     271651
IP address blocks:        181.191.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:2c:d0:42:4f:fb:3c:e9:fe:7d:24:7a:0b:6b:7b:f6:0f:35:75:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001
        Validity
            Not Before: Jan  5 13:52:37 2023 GMT
            Not After : Jan  4 13:57:37 2024 GMT
        Subject: CN=42DA701C86CF4757F69687405F537931B90232AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0f:8d:3a:a1:2d:c7:da:e4:b3:d8:f0:f8:9b:
                    b5:87:6d:5c:be:54:9f:af:d0:c1:be:99:ab:b9:90:
                    ed:78:63:4b:96:2b:75:42:19:7b:d0:31:04:91:3e:
                    85:65:8d:65:58:fe:5d:75:fc:92:32:ee:29:59:8a:
                    10:47:49:c8:f3:d5:96:22:14:6b:3a:fd:3c:9d:54:
                    3d:48:fc:70:25:9f:70:fa:80:3d:5c:d6:8c:bb:e8:
                    28:cc:d6:7e:2e:7a:a3:fd:37:5a:67:ff:8e:c4:47:
                    08:a4:38:a0:97:b1:f0:cf:ba:29:53:68:77:2b:fa:
                    f5:4e:96:c6:87:ee:83:04:c5:67:d2:9a:0d:fd:f9:
                    da:91:8e:89:1b:88:c6:2d:50:d7:54:e7:8e:f1:2b:
                    45:35:af:fe:49:e4:00:b1:11:46:eb:c9:48:89:36:
                    bd:63:71:8c:40:b7:aa:14:0f:cd:72:b4:ab:20:88:
                    c4:9c:1a:1b:5e:58:ce:62:fd:58:90:67:e8:a7:f8:
                    db:5d:cc:1e:ab:32:5f:d4:4e:24:5c:b4:1b:e5:54:
                    d8:85:33:07:fe:d8:0c:45:8d:fb:a1:50:a3:a1:f9:
                    17:dc:b0:ab:d9:cc:d2:95:c5:31:2f:06:eb:b5:09:
                    d2:a6:a5:26:fd:5d:68:76:53:a7:cc:15:3a:0f:11:
                    67:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DA:70:1C:86:CF:47:57:F6:96:87:40:5F:53:79:31:B9:02:32:AA
            X509v3 Authority Key Identifier:
                keyid:CA:A3:D5:46:71:A2:8B:5A:90:C8:E9:6E:43:5E:FE:4D:0A:3F:40:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/3138312e3139312e37322e302f32322d3232203d3e20323731363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:b8:c1:80:68:fa:41:d4:19:15:0c:22:da:19:8c:63:05:c7:
         a5:f2:0e:2b:db:a6:69:09:af:eb:ed:95:7a:5f:07:41:5c:81:
         a3:ec:67:d4:77:e1:9a:7c:c7:a3:8c:da:d1:68:5c:9b:e2:2d:
         c2:7b:48:12:69:a7:2a:86:29:db:d6:1d:0e:0d:1f:9b:8e:65:
         b2:28:68:fb:50:1f:48:0f:92:a8:78:70:83:bd:73:76:80:ea:
         98:d1:d6:84:9d:81:84:5a:b5:10:d4:2e:60:48:7c:a1:19:3b:
         51:6a:80:2e:b2:d2:41:de:2c:e4:d2:a9:3c:ce:67:18:a7:f0:
         44:f6:d6:ac:ac:e6:69:d9:e1:81:1e:24:48:a6:24:86:3a:fb:
         f5:c0:75:44:41:3e:05:cd:5c:b3:93:51:07:66:e9:05:49:4d:
         de:30:dd:aa:f9:a2:5a:e9:44:68:46:dc:5f:64:8a:4e:cc:8e:
         33:c0:e0:10:ec:b1:6c:d2:47:1f:20:89:4c:11:fb:16:08:18:
         66:ad:49:da:1f:db:3c:28:e2:ad:a1:e8:53:14:5a:a5:48:73:
         61:a6:95:73:55:4e:c7:2d:99:cf:55:50:87:12:ee:d2:35:62:
         d8:af:b9:b1:a0:f1:c0:05:e3:28:3b:b7:36:66:09:7a:8c:12:
         65:d2:eb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org