Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/0/3138312e3233332e3134302e302f32322d3232203d3e20323731353033.roa
File:                     3138312e3233332e3134302e302f32322d3232203d3e20323731353033.roa (raw, json)
Hash identifier:          qvpK9SDVzI9Yb0E6RKxFxXmjMrFW+9LV9i+CaSd4+/Y=
Subject key identifier:   35:3F:50:ED:6D:F2:03:42:D1:17:01:5A:6A:BE:E9:C9:91:32:39:E6
Certificate issuer:       /CN=8CAF265B3AFBDA95BC45DB4BC086681703F3A66C
Certificate serial:       3CB43F8D99E63B7BAB1F697B83A8EEC11C7543D4
Authority key identifier: 8C:AF:26:5B:3A:FB:DA:95:BC:45:DB:4B:C0:86:68:17:03:F3:A6:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CAF265B3AFBDA95BC45DB4BC086681703F3A66C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/0/3138312e3233332e3134302e302f32322d3232203d3e20323731353033.roa
Signing time:             Tue 29 Aug 2023 01:41:39 +0000
ROA not before:           Tue 29 Aug 2023 01:36:39 +0000
ROA not after:            Tue 27 Aug 2024 01:41:39 +0000
asID:                     271503
IP address blocks:        181.233.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b4:3f:8d:99:e6:3b:7b:ab:1f:69:7b:83:a8:ee:c1:1c:75:43:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CAF265B3AFBDA95BC45DB4BC086681703F3A66C
        Validity
            Not Before: Aug 29 01:36:39 2023 GMT
            Not After : Aug 27 01:41:39 2024 GMT
        Subject: CN=353F50ED6DF20342D117015A6ABEE9C9913239E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:d6:2b:09:f9:91:e0:22:98:f0:8b:f0:c1:
                    0d:ca:0d:79:6a:85:d4:ab:6a:bd:29:0d:42:f6:ce:
                    97:0b:70:e1:3d:89:cb:aa:63:11:b7:89:c3:a3:0e:
                    3c:f1:81:4c:9e:7b:4c:55:ae:71:f8:e2:9d:09:93:
                    e2:b7:20:24:ae:df:89:86:6e:97:c6:4a:c4:b2:28:
                    39:c9:73:67:ab:25:12:6a:9f:ea:c1:69:98:54:76:
                    f1:c6:5a:ed:b3:02:29:3b:53:6b:f9:d6:46:30:d9:
                    d0:f6:4f:72:db:58:99:55:2e:4e:c7:1d:2d:82:45:
                    c7:3c:3e:db:54:8e:42:d0:6a:3c:57:86:56:16:e0:
                    c6:fa:33:87:95:1b:f8:89:4d:3c:db:59:b2:88:2a:
                    a3:b6:75:2c:08:7a:ad:e5:58:07:72:83:8d:10:3f:
                    b8:ba:db:b0:7f:88:ad:a3:b7:69:5b:a5:7a:63:b6:
                    ed:15:af:0e:26:6c:94:b2:47:dd:d8:84:a3:ff:32:
                    7b:b5:7f:8c:1d:82:a6:bf:28:ef:32:d2:6d:75:69:
                    4f:c8:5a:11:78:9a:a6:bf:c7:65:97:20:ec:b0:ce:
                    e1:11:fd:87:f3:eb:ac:eb:88:28:f3:1f:9c:95:28:
                    5b:b8:ca:c3:9f:fd:a2:01:f5:bd:02:ea:0b:0e:1a:
                    20:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3F:50:ED:6D:F2:03:42:D1:17:01:5A:6A:BE:E9:C9:91:32:39:E6
            X509v3 Authority Key Identifier:
                keyid:8C:AF:26:5B:3A:FB:DA:95:BC:45:DB:4B:C0:86:68:17:03:F3:A6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/0/8CAF265B3AFBDA95BC45DB4BC086681703F3A66C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CAF265B3AFBDA95BC45DB4BC086681703F3A66C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/0/3138312e3233332e3134302e302f32322d3232203d3e20323731353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:30:ba:7e:f1:75:78:94:07:76:be:22:bf:2f:f4:db:04:6e:
         78:74:cf:ad:6e:47:6d:4f:ec:43:16:96:47:76:e1:87:b6:eb:
         fc:9b:4a:e2:a1:8e:9d:1a:7d:2f:cd:da:f4:8e:c7:37:7b:d0:
         e2:57:a6:1c:e2:85:bd:65:1a:85:c7:f6:90:41:79:f3:cc:96:
         f5:92:6e:d0:d2:90:b4:5a:c5:aa:57:40:18:e0:51:f0:01:07:
         d0:8b:e5:14:87:26:2e:8d:72:0b:29:39:ca:5e:05:2c:db:97:
         d2:80:b4:fc:e4:3d:87:42:5c:47:5b:e1:13:b9:9e:4f:5c:4d:
         a6:0d:ef:cc:45:75:66:db:a9:67:04:71:e1:26:ea:3a:56:d2:
         5c:1b:cd:69:6b:2d:19:2f:ae:04:28:54:a8:03:60:73:f2:ac:
         bc:ee:a5:0d:af:6a:7c:3e:cf:ce:09:99:41:cd:2f:5a:21:ab:
         dc:88:13:6b:37:fc:fc:96:1b:36:fe:7a:29:1a:b7:15:72:43:
         ce:82:e2:1a:32:4d:df:99:b8:88:9f:d5:6f:d5:f9:74:e3:62:
         8d:64:4e:d3:ae:de:37:65:41:0e:d2:01:59:20:e8:18:cf:e1:
         b0:f5:56:54:f2:a4:e8:2e:76:80:9d:b5:17:e9:6f:07:9a:0f:
         eb:73:01:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org