Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/0/3138312e3233332e3134322e302f32332d3233203d3e20323731353033.roa
File:                     3138312e3233332e3134322e302f32332d3233203d3e20323731353033.roa (raw, json)
Hash identifier:          vChQZ+RY8L031ZCbPKavXAITZ4ipTVWnJeHUGfBlH2I=
Subject key identifier:   40:75:9B:8E:EE:62:36:C1:9F:CA:22:40:C9:9B:0F:BC:8B:D0:3A:35
Certificate issuer:       /CN=8CAF265B3AFBDA95BC45DB4BC086681703F3A66C
Certificate serial:       501220B36BEC9341E7F74F1B547EEDD13CB8F26C
Authority key identifier: 8C:AF:26:5B:3A:FB:DA:95:BC:45:DB:4B:C0:86:68:17:03:F3:A6:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CAF265B3AFBDA95BC45DB4BC086681703F3A66C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/0/3138312e3233332e3134322e302f32332d3233203d3e20323731353033.roa
Signing time:             Tue 29 Aug 2023 01:41:40 +0000
ROA not before:           Tue 29 Aug 2023 01:36:40 +0000
ROA not after:            Tue 27 Aug 2024 01:41:40 +0000
asID:                     271503
IP address blocks:        181.233.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:12:20:b3:6b:ec:93:41:e7:f7:4f:1b:54:7e:ed:d1:3c:b8:f2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CAF265B3AFBDA95BC45DB4BC086681703F3A66C
        Validity
            Not Before: Aug 29 01:36:40 2023 GMT
            Not After : Aug 27 01:41:40 2024 GMT
        Subject: CN=40759B8EEE6236C19FCA2240C99B0FBC8BD03A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:8a:2a:bf:a8:c3:85:dc:5a:86:18:e7:ef:
                    9e:f3:2f:ea:bc:3d:5f:76:ba:76:92:fe:3e:c3:37:
                    d8:11:38:80:80:f3:8c:e9:54:af:12:5a:e8:c9:0c:
                    e9:82:84:4c:be:90:e1:ff:a7:18:65:c9:41:67:b6:
                    46:19:66:53:f8:37:a2:da:1d:3c:28:63:48:b4:69:
                    fc:fa:dc:01:63:ed:0c:27:85:9d:34:af:51:e4:c5:
                    8f:dc:a8:9f:93:d8:82:ad:d1:30:8c:64:8e:1a:29:
                    4c:83:23:dd:e9:fa:79:e1:53:b8:ee:6b:fd:87:c8:
                    4b:00:57:ff:eb:74:b4:90:c7:cc:01:39:10:ad:ea:
                    66:00:22:8a:3b:cd:21:0e:21:73:25:70:1f:95:7c:
                    d0:2c:31:ae:83:4d:ad:c0:8c:39:c0:a4:7e:f2:e7:
                    f1:d9:36:a9:c9:11:7a:25:0e:02:e9:77:7a:a8:d5:
                    41:31:32:b4:23:24:df:4b:7b:00:10:36:22:4e:dd:
                    c6:bf:de:67:af:f0:5c:20:b3:e5:0e:f2:6c:0d:c9:
                    49:c5:88:a3:06:2f:99:92:fb:cf:5c:b8:b2:ca:ba:
                    db:a8:71:08:27:a5:75:c3:d7:cd:0e:b7:14:a1:4e:
                    39:a5:b3:77:93:fc:78:d2:c0:81:91:b3:5e:ae:84:
                    a3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:75:9B:8E:EE:62:36:C1:9F:CA:22:40:C9:9B:0F:BC:8B:D0:3A:35
            X509v3 Authority Key Identifier:
                keyid:8C:AF:26:5B:3A:FB:DA:95:BC:45:DB:4B:C0:86:68:17:03:F3:A6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/0/8CAF265B3AFBDA95BC45DB4BC086681703F3A66C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CAF265B3AFBDA95BC45DB4BC086681703F3A66C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/0/3138312e3233332e3134322e302f32332d3233203d3e20323731353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:6e:13:e0:35:3d:7e:9b:37:ed:f7:70:d6:30:ea:75:3e:38:
         6c:4c:76:ec:4b:5a:8c:16:1c:76:27:06:db:98:ed:ee:9c:bd:
         96:7c:54:1d:10:02:36:0f:d0:13:b1:59:61:64:aa:cd:ce:13:
         d1:d7:2b:f9:d0:84:a3:c4:fd:44:81:45:99:39:13:cf:7d:53:
         4f:73:1b:ed:49:aa:e7:0b:81:bd:bf:d1:f4:42:3d:66:31:98:
         1c:23:3d:0f:8e:cf:e0:0d:c5:b6:7a:10:c2:89:46:a5:d7:13:
         a7:fd:a5:08:cc:16:c4:9c:20:71:84:40:51:d5:ed:c2:85:1d:
         75:e1:3e:90:f6:00:49:be:a2:57:43:09:48:28:5e:6d:2b:2a:
         e3:04:61:51:34:72:0f:5d:8a:f9:98:c4:b8:22:04:5c:a1:d0:
         60:7f:52:05:af:a2:1d:83:d6:2a:a0:a1:94:6a:85:8c:98:25:
         ab:8e:8f:52:78:49:1f:fe:a7:03:2e:f3:2f:5c:78:ec:6a:3b:
         18:46:7d:c1:b4:99:38:2b:2a:7b:fb:a1:52:89:b9:04:b6:8f:
         a3:cc:c9:eb:83:e6:15:b1:33:6d:ad:7a:47:41:69:3a:8b:af:
         32:ad:12:28:2d:24:16:b5:d4:91:5a:5e:9f:88:eb:33:aa:09:
         3f:09:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org