Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/3138312e3233322e3232302e302f32322d3232203d3e20323732353432.roa
File:                     3138312e3233322e3232302e302f32322d3232203d3e20323732353432.roa (raw, json)
Hash identifier:          t9TBTcSNZ1ohO+K1TLCXO15QjodRmUBIJBIcczEC36c=
Subject key identifier:   B7:75:BB:93:FC:4A:C2:12:13:83:95:E4:52:A3:DB:45:C5:DF:56:29
Certificate issuer:       /CN=506CF91518C71210ED558F164A666AE69540EEC0
Certificate serial:       61BC374D4E28BB07FCC36F5FBF568A507E318472
Authority key identifier: 50:6C:F9:15:18:C7:12:10:ED:55:8F:16:4A:66:6A:E6:95:40:EE:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/506CF91518C71210ED558F164A666AE69540EEC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/3138312e3233322e3232302e302f32322d3232203d3e20323732353432.roa
Signing time:             Thu 25 May 2023 18:29:59 +0000
ROA not before:           Thu 25 May 2023 18:24:59 +0000
ROA not after:            Thu 23 May 2024 18:29:59 +0000
asID:                     272542
IP address blocks:        181.232.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:bc:37:4d:4e:28:bb:07:fc:c3:6f:5f:bf:56:8a:50:7e:31:84:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506CF91518C71210ED558F164A666AE69540EEC0
        Validity
            Not Before: May 25 18:24:59 2023 GMT
            Not After : May 23 18:29:59 2024 GMT
        Subject: CN=B775BB93FC4AC212138395E452A3DB45C5DF5629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:d7:2a:b5:5b:a2:c3:82:ee:cb:ba:d8:9a:
                    eb:d5:e3:40:c3:62:68:e3:1a:5e:6e:88:7c:ca:3c:
                    0b:1a:0e:a6:71:94:c9:67:c2:4e:5e:06:98:56:bb:
                    30:0d:14:6f:02:ea:b7:bc:1f:4a:ca:93:40:f8:c9:
                    ff:3e:7f:b4:67:b3:3e:2f:0f:32:2b:fb:44:d1:ad:
                    28:cf:d6:5f:a4:c4:95:e0:5f:cf:93:05:65:8d:56:
                    c0:48:f4:0b:c6:60:09:9e:8b:29:ee:ce:39:a1:ea:
                    36:2d:08:e1:fe:3e:58:84:16:5c:ca:5c:dd:6b:d8:
                    fe:e5:ac:21:74:0c:d3:94:56:bb:7a:a6:e9:51:7a:
                    83:a9:06:47:ed:fb:d8:e5:94:d9:1d:5c:5c:8e:8d:
                    c2:fe:73:d6:0d:4e:cb:b3:7a:be:27:e3:df:02:19:
                    d0:c0:1f:bc:9c:d3:89:e8:25:84:ea:3f:9f:9f:0a:
                    a4:85:c0:bd:96:0e:fd:6b:a1:d2:58:ab:24:2a:29:
                    5c:9b:c1:29:1a:c9:25:b9:21:c2:dc:6b:f7:f8:09:
                    af:28:8f:1b:e0:0b:ce:06:52:e7:76:eb:db:d5:d1:
                    c7:28:60:b9:50:f4:44:ce:e4:f4:de:36:bf:58:f2:
                    f0:c4:37:e7:80:7d:6d:dc:b5:98:46:57:bd:99:ab:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:75:BB:93:FC:4A:C2:12:13:83:95:E4:52:A3:DB:45:C5:DF:56:29
            X509v3 Authority Key Identifier:
                keyid:50:6C:F9:15:18:C7:12:10:ED:55:8F:16:4A:66:6A:E6:95:40:EE:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/506CF91518C71210ED558F164A666AE69540EEC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/506CF91518C71210ED558F164A666AE69540EEC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/3138312e3233322e3232302e302f32322d3232203d3e20323732353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:a7:ee:6c:7c:2e:38:8e:ea:24:7a:23:83:06:a9:1d:08:f7:
         54:f6:12:a5:a9:4c:3c:19:8a:2d:24:56:e8:d8:4d:7b:2c:bd:
         a9:26:a6:12:d3:3e:19:12:16:f6:a1:cb:43:28:65:94:61:c3:
         8f:e5:b7:df:ee:9d:00:4f:5b:c8:a8:99:66:66:1f:fd:42:37:
         e3:3c:2a:d1:f0:13:3d:53:61:07:72:65:ac:a7:3e:98:2d:3e:
         33:ad:09:f8:a3:52:26:f0:eb:c2:b1:73:bb:53:eb:42:84:a2:
         d2:5d:79:60:0f:9f:35:5e:de:ec:3a:0d:4c:18:a1:d4:45:6c:
         7e:6f:15:99:bc:60:42:8e:f8:46:86:e7:76:ea:66:b5:99:fa:
         46:ab:4f:e2:9f:9f:42:61:a0:f9:5b:02:fe:5a:e6:34:5c:43:
         89:32:cf:83:6a:6e:b3:5e:a8:80:93:b2:41:3b:7c:db:5b:29:
         8d:a7:3e:9c:e6:ac:fa:8b:5b:73:3a:c4:4f:9d:0e:f2:3c:28:
         48:65:e0:82:83:92:e8:e3:07:09:b1:30:12:f0:5d:2c:0c:8e:
         de:7d:6c:21:ea:71:77:f0:09:d2:fe:ea:e5:3b:58:2b:23:c1:
         82:e6:89:d3:b7:6a:e3:e8:c3:92:94:90:a5:9d:56:0f:f8:a2:
         78:37:fd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org