Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/1/3138312e3233322e3232352e302f32342d3234203d3e20323731353137.roa
File:                     3138312e3233322e3232352e302f32342d3234203d3e20323731353137.roa (raw, json)
Hash identifier:          NkeMlYUp9O2ikWfX0xc1FpR1Q7xB/yANpq9+PTiJ+0Q=
Subject key identifier:   47:00:11:6C:38:BB:D7:6E:23:CA:89:74:E3:8A:91:0D:F5:7A:1B:5D
Certificate issuer:       /CN=9CDDBAED4E4153560623EED297A96F12A9A5D96A
Certificate serial:       726ED91141615408342B761AC1F01E77ED276C4D
Authority key identifier: 9C:DD:BA:ED:4E:41:53:56:06:23:EE:D2:97:A9:6F:12:A9:A5:D9:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CDDBAED4E4153560623EED297A96F12A9A5D96A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/1/3138312e3233322e3232352e302f32342d3234203d3e20323731353137.roa
Signing time:             Sun 29 Oct 2023 04:56:34 +0000
ROA not before:           Sun 29 Oct 2023 04:51:34 +0000
ROA not after:            Sun 27 Oct 2024 04:56:34 +0000
asID:                     271517
IP address blocks:        181.232.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6e:d9:11:41:61:54:08:34:2b:76:1a:c1:f0:1e:77:ed:27:6c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDDBAED4E4153560623EED297A96F12A9A5D96A
        Validity
            Not Before: Oct 29 04:51:34 2023 GMT
            Not After : Oct 27 04:56:34 2024 GMT
        Subject: CN=4700116C38BBD76E23CA8974E38A910DF57A1B5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:df:4e:34:ab:37:f1:95:79:79:d4:87:ec:b0:
                    60:d6:d6:bd:14:0b:07:df:25:7d:24:fa:93:dc:c7:
                    ae:96:80:66:a4:3b:ed:82:e8:0d:6f:7c:8f:c1:a5:
                    39:5f:c9:e8:af:42:78:05:8f:c6:f7:e6:2b:06:36:
                    7a:12:10:32:19:fd:2b:77:08:5c:07:cf:91:82:c6:
                    7d:9a:b0:61:2f:59:9e:ed:c7:a7:00:41:7d:bc:e4:
                    79:1f:c9:32:4a:a4:25:51:c1:13:89:d2:60:71:53:
                    5d:0c:0c:b8:71:f1:8c:b3:98:0e:38:fe:3c:dd:a0:
                    95:aa:59:b9:ad:85:87:94:c4:a8:72:9a:21:09:67:
                    ac:87:78:4a:d4:d8:e9:a3:82:9d:b6:05:92:f1:be:
                    ae:c2:66:ff:00:d6:fd:95:0e:fd:01:d0:69:b1:e2:
                    6b:8c:fb:22:30:c9:6c:d5:06:29:98:d6:41:31:49:
                    03:76:39:63:2b:66:34:b0:6d:e6:35:d9:e2:28:09:
                    48:ce:27:9c:99:51:5a:8b:c2:f3:da:f9:06:96:70:
                    c4:95:29:11:3f:70:95:d5:2c:ef:cb:22:cf:80:32:
                    50:07:04:e3:c0:dc:7d:aa:89:26:aa:2e:b6:c5:c5:
                    f2:5b:02:9e:4c:e2:bb:ec:d3:ea:a0:c7:ea:ca:4e:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:00:11:6C:38:BB:D7:6E:23:CA:89:74:E3:8A:91:0D:F5:7A:1B:5D
            X509v3 Authority Key Identifier:
                keyid:9C:DD:BA:ED:4E:41:53:56:06:23:EE:D2:97:A9:6F:12:A9:A5:D9:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/1/9CDDBAED4E4153560623EED297A96F12A9A5D96A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CDDBAED4E4153560623EED297A96F12A9A5D96A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/1/3138312e3233322e3232352e302f32342d3234203d3e20323731353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:cf:f1:63:44:2d:ac:94:f3:af:98:bf:25:72:a5:0d:16:e6:
         45:68:32:44:d3:e8:09:f9:e2:0f:34:cf:2b:8f:42:ef:c0:b4:
         5a:78:3f:64:e3:d6:bc:c1:c8:82:27:e6:db:cb:b3:d2:39:fe:
         94:8d:25:73:e9:e8:0e:10:cf:3a:4c:f1:83:3b:2c:1c:a0:10:
         2f:a4:b2:ba:24:09:c4:64:8a:dd:9e:6f:cc:ef:8a:da:72:7b:
         38:67:b1:3c:9c:34:6e:cd:cd:53:10:f1:cf:52:22:15:66:e0:
         39:9b:3e:b3:48:25:8f:bb:ed:45:eb:fb:f5:36:cf:d6:a6:88:
         bf:2f:e0:cf:e0:2d:19:93:74:ef:e4:37:d1:bb:59:25:c5:6a:
         db:9c:a3:49:d8:de:58:e6:e0:74:fb:d7:3b:7d:ab:20:02:66:
         fe:bc:a7:aa:d3:1e:ce:b6:0c:26:fe:cb:1c:94:3d:89:03:3d:
         3b:74:ea:88:b0:fe:74:6e:5e:27:b4:bb:ee:9e:5b:bf:fd:07:
         14:0e:b3:6d:b0:be:19:00:a6:89:c0:8b:79:7b:e1:b2:6b:cc:
         14:55:71:87:6e:2a:79:cc:8b:e7:c8:9c:ad:fb:47:83:0c:ce:
         d4:25:16:4f:ca:f3:83:a7:66:63:d6:e1:54:99:c0:cd:ea:74:
         b1:ad:f3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org