Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/1/3138312e3233322e3232342e302f32322d3232203d3e20323731353137.roa
File:                     3138312e3233322e3232342e302f32322d3232203d3e20323731353137.roa (raw, json)
Hash identifier:          GQDGXMcOCBq+vpC/Dbyr7QXVRYRk1FdXpVWROK8Gidg=
Subject key identifier:   B7:2A:75:E5:21:B2:E8:0F:09:62:21:B7:BC:57:C5:3C:FA:BF:0A:27
Certificate issuer:       /CN=9CDDBAED4E4153560623EED297A96F12A9A5D96A
Certificate serial:       459195599ED5B668D04960E0F8597774B5B1AFDF
Authority key identifier: 9C:DD:BA:ED:4E:41:53:56:06:23:EE:D2:97:A9:6F:12:A9:A5:D9:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CDDBAED4E4153560623EED297A96F12A9A5D96A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/1/3138312e3233322e3232342e302f32322d3232203d3e20323731353137.roa
Signing time:             Sun 29 Oct 2023 04:56:35 +0000
ROA not before:           Sun 29 Oct 2023 04:51:35 +0000
ROA not after:            Sun 27 Oct 2024 04:56:35 +0000
asID:                     271517
IP address blocks:        181.232.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:91:95:59:9e:d5:b6:68:d0:49:60:e0:f8:59:77:74:b5:b1:af:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDDBAED4E4153560623EED297A96F12A9A5D96A
        Validity
            Not Before: Oct 29 04:51:35 2023 GMT
            Not After : Oct 27 04:56:35 2024 GMT
        Subject: CN=B72A75E521B2E80F096221B7BC57C53CFABF0A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:36:25:f9:a2:29:af:19:05:e4:f9:76:94:d3:
                    ac:87:1a:ec:e9:7d:0d:b1:c5:89:38:14:21:dc:d2:
                    af:ae:3b:35:00:f1:36:e4:13:c1:98:92:83:c3:b0:
                    d3:0b:00:03:72:94:66:28:ca:14:87:ca:65:22:2a:
                    4c:a9:54:53:5c:9e:68:1a:9e:b5:11:52:64:36:bf:
                    08:30:48:06:b8:e8:93:33:6e:b4:55:80:85:17:a3:
                    b0:fd:fa:84:0c:0a:86:63:87:68:88:aa:c9:65:8d:
                    6d:66:54:75:e7:71:98:b9:e7:c3:c8:37:74:96:01:
                    e2:54:dc:69:36:85:36:45:46:18:a7:44:06:ee:e3:
                    d6:68:3e:6e:e2:5b:79:c6:07:7a:11:49:21:f4:11:
                    cb:ed:bc:d2:2f:69:2b:36:27:79:45:17:e0:0e:f9:
                    5b:7c:f6:fd:6a:af:4c:f3:d4:7d:dc:32:cf:c1:5f:
                    a7:a1:36:68:9b:e3:36:a4:05:ec:f3:53:72:8e:21:
                    86:e5:4a:8b:a2:9f:eb:f8:bf:85:db:09:7d:a4:f3:
                    1f:92:10:43:bb:e8:64:bb:bd:c0:b0:53:f4:2c:c5:
                    e2:d4:ff:12:bd:82:f3:16:bc:ff:c2:e7:96:c5:ae:
                    f3:bd:09:42:fc:3b:ce:a2:32:9b:0c:25:4d:55:b5:
                    99:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2A:75:E5:21:B2:E8:0F:09:62:21:B7:BC:57:C5:3C:FA:BF:0A:27
            X509v3 Authority Key Identifier:
                keyid:9C:DD:BA:ED:4E:41:53:56:06:23:EE:D2:97:A9:6F:12:A9:A5:D9:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/1/9CDDBAED4E4153560623EED297A96F12A9A5D96A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CDDBAED4E4153560623EED297A96F12A9A5D96A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/1/3138312e3233322e3232342e302f32322d3232203d3e20323731353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ef:33:51:df:70:1e:46:d3:fc:ac:84:d5:6d:73:97:c8:43:46:
         a6:04:13:9d:5e:16:8b:17:fd:c2:23:bd:8e:fd:bb:08:77:54:
         a3:34:9a:e2:99:df:fe:2f:ac:6a:1d:3f:5a:4f:1e:63:c1:2f:
         af:bc:e9:58:e7:c6:b5:e4:1f:8b:80:95:37:ab:68:f3:c5:34:
         7d:f6:52:a8:0f:f9:66:e3:e0:f3:54:c2:a4:2c:1f:61:6c:f3:
         2a:3c:50:11:f6:aa:5d:7e:26:81:97:6e:8f:2d:10:1a:e6:4f:
         37:4a:13:c1:1e:c6:4c:09:3e:7e:96:a7:16:dc:ca:e1:73:1f:
         ec:46:b9:ac:8c:a7:91:d9:91:23:05:d0:b7:8e:8a:c4:98:5a:
         f6:4a:b0:7f:e8:cf:56:1f:91:ae:00:47:17:13:34:8d:20:08:
         46:fc:77:32:83:49:36:2f:b6:9c:82:d0:ba:d2:c7:1c:46:f1:
         c8:f3:d5:dd:e2:6f:aa:e1:7e:d3:b5:ee:8e:26:e8:d1:15:29:
         0a:1c:ca:4e:81:4f:05:0b:09:30:c3:f6:c1:62:32:e4:db:0b:
         40:96:82:a7:a4:31:b9:ce:63:76:f2:87:1a:18:d2:b5:5a:ae:
         aa:2c:7d:1e:c3:15:c1:2d:ed:b1:d1:9d:f7:55:49:ed:33:d1:
         8e:38:95:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org