Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/0/3138312e3138392e34342e302f32322d3234203d3e20323731333738.roa
File:                     3138312e3138392e34342e302f32322d3234203d3e20323731333738.roa (raw, json)
Hash identifier:          zi2dP3UgDI3v4dWOtSopGiHhOHDVTtGh1aUt4AfAJTI=
Subject key identifier:   8F:83:BA:6A:C3:53:5C:DC:C1:3F:D1:02:D1:71:DA:31:58:1A:B1:26
Certificate issuer:       /CN=71DB76DAA410C9A9278099C1C43E45CBFC34BB8E
Certificate serial:       63C08082FC5EEFE6040365763F25DB82FC899CD3
Authority key identifier: 71:DB:76:DA:A4:10:C9:A9:27:80:99:C1:C4:3E:45:CB:FC:34:BB:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71DB76DAA410C9A9278099C1C43E45CBFC34BB8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/0/3138312e3138392e34342e302f32322d3234203d3e20323731333738.roa
Signing time:             Fri 15 Sep 2023 17:36:29 +0000
ROA not before:           Fri 15 Sep 2023 17:31:29 +0000
ROA not after:            Fri 13 Sep 2024 17:36:29 +0000
asID:                     271378
IP address blocks:        181.189.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c0:80:82:fc:5e:ef:e6:04:03:65:76:3f:25:db:82:fc:89:9c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71DB76DAA410C9A9278099C1C43E45CBFC34BB8E
        Validity
            Not Before: Sep 15 17:31:29 2023 GMT
            Not After : Sep 13 17:36:29 2024 GMT
        Subject: CN=8F83BA6AC3535CDCC13FD102D171DA31581AB126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:10:76:6d:af:17:db:75:cd:2b:2f:e0:6a:
                    07:4f:a8:07:28:e6:ac:65:dd:7e:d2:4d:44:4a:d6:
                    04:75:8b:25:d4:92:8e:9b:83:50:eb:15:d9:fb:58:
                    9b:f4:cb:80:d8:a9:f8:e7:01:28:45:a4:d0:00:d7:
                    51:8c:b3:c2:47:d6:2f:b5:1b:20:e3:be:b4:81:0a:
                    28:72:43:42:8f:07:94:e7:90:6f:8a:c3:a7:bc:52:
                    b6:e6:98:90:27:9a:fb:47:8d:c1:9f:56:85:56:f7:
                    cd:d1:1e:d7:5c:37:33:c5:aa:10:30:50:06:69:d9:
                    21:fb:a5:41:6b:f2:2a:c6:4c:7b:3c:b3:17:9b:8d:
                    98:1a:ef:b5:75:c9:14:91:1b:9a:41:28:7a:ae:57:
                    7f:06:10:b4:85:81:c7:f8:22:ef:c6:6a:14:b2:65:
                    43:1b:7f:10:ba:6d:e6:6c:e7:9e:aa:6c:4f:d5:2d:
                    a5:c0:78:20:85:44:4c:ae:dd:98:f2:56:d4:05:63:
                    07:5b:71:30:ac:45:e7:2e:01:7f:51:4f:c9:9d:c0:
                    83:4c:3e:2e:39:08:6e:b5:87:3c:e2:4c:87:f7:4a:
                    12:eb:92:63:43:1b:66:b5:31:cc:5a:98:86:25:ef:
                    1a:65:58:8e:b0:53:05:7b:ff:b2:18:a4:e7:96:d7:
                    13:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:83:BA:6A:C3:53:5C:DC:C1:3F:D1:02:D1:71:DA:31:58:1A:B1:26
            X509v3 Authority Key Identifier:
                keyid:71:DB:76:DA:A4:10:C9:A9:27:80:99:C1:C4:3E:45:CB:FC:34:BB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/0/71DB76DAA410C9A9278099C1C43E45CBFC34BB8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71DB76DAA410C9A9278099C1C43E45CBFC34BB8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/0/3138312e3138392e34342e302f32322d3234203d3e20323731333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:54:ba:0a:cc:ac:85:ce:3d:7c:da:42:dc:b6:05:00:e8:48:
         b9:15:0a:f2:e4:6c:8f:63:12:ea:2e:d4:fd:45:a1:24:1d:ba:
         eb:84:40:92:ac:6a:da:b3:ab:72:b4:ca:e3:6e:ec:d9:b9:ae:
         cd:da:b7:3a:71:62:bd:47:64:a6:ad:7e:e7:a4:af:d9:57:38:
         a8:fe:f1:fe:c1:d0:d7:46:c9:78:99:80:2f:b2:a1:64:8c:44:
         57:08:f5:c1:e4:a7:4c:da:5c:ea:0e:89:fc:ec:71:17:fd:66:
         46:50:fd:9e:e1:2a:1f:aa:21:03:2f:a9:c5:90:46:04:af:fe:
         e5:66:6e:1c:52:05:a5:b7:b3:7a:88:e7:e6:85:87:a7:fd:f5:
         0b:a5:6b:b1:bc:ef:13:a9:70:6b:2f:cb:67:18:b2:41:0a:78:
         19:1e:52:13:25:4c:d8:e3:d7:d4:0f:b8:31:40:28:12:26:da:
         83:e0:d1:e0:a0:84:66:b9:fa:ac:42:fa:dc:67:9b:ca:2b:3b:
         3a:af:e0:54:b9:9c:51:02:97:92:53:c9:3e:0e:39:f4:51:d1:
         cc:be:2c:43:aa:a1:df:f0:f8:6c:20:d0:5b:af:7f:11:96:12:
         36:25:be:c6:14:dd:7a:8a:c6:47:00:c1:1d:3d:5c:0e:e3:4a:
         44:22:05:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org