Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234302e302f32322d3234203d3e20323637343536.roa
File:                     3138312e3139312e3234302e302f32322d3234203d3e20323637343536.roa (raw, json)
Hash identifier:          2eijZQqj5gatpK6kMQbn1Fus/ztjjq2knftTF19oztI=
Subject key identifier:   BE:80:61:A1:00:10:B4:50:4C:1E:93:A6:ED:F8:83:87:F3:20:AE:CF
Certificate issuer:       /CN=E5711985EAE3B534F72966F666DB5344CA5A04F1
Certificate serial:       188C862112339E2F51F40DBA5981DE6B80761EB9
Authority key identifier: E5:71:19:85:EA:E3:B5:34:F7:29:66:F6:66:DB:53:44:CA:5A:04:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5711985EAE3B534F72966F666DB5344CA5A04F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234302e302f32322d3234203d3e20323637343536.roa
Signing time:             Sat 13 Aug 2022 18:08:00 +0000
ROA not before:           Sat 13 Aug 2022 18:03:00 +0000
ROA not after:            Sat 12 Aug 2023 18:08:00 +0000
asID:                     267456
IP address blocks:        181.191.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8c:86:21:12:33:9e:2f:51:f4:0d:ba:59:81:de:6b:80:76:1e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5711985EAE3B534F72966F666DB5344CA5A04F1
        Validity
            Not Before: Aug 13 18:03:00 2022 GMT
            Not After : Aug 12 18:08:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2e:ac:36:e8:c4:ed:e9:99:39:f7:4f:4a:9c:
                    f3:0a:1b:db:23:80:9f:1a:fd:11:92:22:bb:1c:94:
                    d8:d5:fd:09:39:24:ab:42:95:cb:dc:c7:89:c7:a8:
                    8a:ca:af:a5:7e:15:97:b1:a3:f3:70:00:b3:9f:1c:
                    45:cb:76:0f:f9:1e:d0:42:ca:d1:a1:9c:ea:c6:8f:
                    5d:0d:9a:0f:06:12:50:c2:db:e9:25:43:9e:a1:7c:
                    ad:ca:43:d8:35:83:66:02:38:d4:10:2f:35:a5:27:
                    03:f5:71:1d:a6:ab:7d:48:2d:de:e0:12:e9:11:c8:
                    62:4f:8a:59:22:93:95:f8:92:fe:eb:86:19:e2:51:
                    fb:b2:e0:ff:6c:6a:d4:c1:38:ab:23:66:fa:45:b9:
                    3a:c1:5f:8b:f2:a3:02:35:1e:eb:fd:a1:a3:c4:6d:
                    05:bc:db:0a:5d:2d:a7:c1:87:b7:6d:1f:f1:a0:4d:
                    7f:a8:93:b7:33:e7:7f:34:71:14:3b:2e:44:af:bd:
                    49:3d:5b:10:08:a5:42:69:70:83:78:ca:a0:a1:ab:
                    52:15:e6:e9:c5:f8:ed:29:03:98:e5:76:4d:cf:df:
                    b6:ac:ed:f2:50:0a:8f:23:f9:90:f0:08:33:1f:78:
                    61:40:8c:da:cf:ef:ab:86:96:98:91:aa:05:64:3e:
                    7c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:80:61:A1:00:10:B4:50:4C:1E:93:A6:ED:F8:83:87:F3:20:AE:CF
            X509v3 Authority Key Identifier:
                keyid:E5:71:19:85:EA:E3:B5:34:F7:29:66:F6:66:DB:53:44:CA:5A:04:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/E5711985EAE3B534F72966F666DB5344CA5A04F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5711985EAE3B534F72966F666DB5344CA5A04F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234302e302f32322d3234203d3e20323637343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:c5:d1:63:82:16:c0:9d:73:2e:44:65:5c:06:a5:9c:4a:55:
         ee:5b:ae:40:cf:00:58:5d:47:e0:fa:46:5d:bc:e7:7b:4d:52:
         b9:23:05:48:15:41:6c:5e:c5:30:83:39:f1:64:23:2c:d5:e3:
         98:c7:3f:be:28:04:7b:f1:48:14:40:80:43:24:a2:f2:ca:51:
         15:c8:9f:1d:0d:22:50:62:49:8b:c3:52:08:b9:bb:18:18:45:
         b0:15:d4:a1:3a:82:d9:ff:20:3c:db:6f:38:3e:ec:83:f7:d3:
         50:cd:e2:90:46:10:f8:5c:94:a8:4a:3e:6f:f9:11:e0:77:48:
         79:83:d5:59:18:53:06:b8:77:12:29:89:c6:64:3e:52:fe:bd:
         1e:85:1d:5d:4d:57:59:40:32:ee:4b:b6:4d:35:de:67:19:59:
         bf:cd:5e:8a:1f:82:c8:e6:29:7c:af:b2:47:0e:08:db:d3:0c:
         ea:1b:32:30:19:31:e9:34:22:6f:2f:f0:db:6c:42:cd:e4:74:
         b1:4a:81:9d:ab:ef:4a:62:fa:87:41:03:72:ae:50:d2:d6:f1:
         a5:6b:29:4a:fb:fa:ce:50:58:b3:0c:18:f3:56:ea:45:15:7d:
         17:92:97:de:60:d7:a9:bb:0b:db:c8:38:b1:7c:dc:e5:10:2a:
         f9:d1:83:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org