Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/1/3138312e3233332e3134332e302f32342d3234203d3e20323731353033.roa
File:                     3138312e3233332e3134332e302f32342d3234203d3e20323731353033.roa (raw, json)
Hash identifier:          ce8AgZCgrLEJOnUdIXytLlqf8GlCd/22beDOvLv1+a0=
Subject key identifier:   CB:A1:14:F2:4D:78:20:FD:12:14:68:CF:C7:12:9C:A3:27:D8:FA:AB
Certificate issuer:       /CN=06C54D138CDADEE96A576E4A6EB00A7CC316CDC6
Certificate serial:       59490AED62FEC0D79D7AF0E876E497069B003E13
Authority key identifier: 06:C5:4D:13:8C:DA:DE:E9:6A:57:6E:4A:6E:B0:0A:7C:C3:16:CD:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06C54D138CDADEE96A576E4A6EB00A7CC316CDC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/1/3138312e3233332e3134332e302f32342d3234203d3e20323731353033.roa
Signing time:             Thu 04 Apr 2024 11:00:16 +0000
ROA not before:           Thu 04 Apr 2024 10:55:16 +0000
ROA not after:            Thu 03 Apr 2025 11:00:16 +0000
asID:                     271503
IP address blocks:        181.233.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:49:0a:ed:62:fe:c0:d7:9d:7a:f0:e8:76:e4:97:06:9b:00:3e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C54D138CDADEE96A576E4A6EB00A7CC316CDC6
        Validity
            Not Before: Apr  4 10:55:16 2024 GMT
            Not After : Apr  3 11:00:16 2025 GMT
        Subject: CN=CBA114F24D7820FD121468CFC7129CA327D8FAAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:b3:c0:51:ed:5b:13:90:3f:41:d0:52:94:
                    2c:9b:65:26:2f:14:87:da:ef:f4:90:18:3a:ea:27:
                    6a:62:3d:49:82:83:ea:01:33:7f:82:e9:1f:5f:89:
                    65:fc:8e:72:31:c0:0c:db:6d:c6:e4:38:20:e8:76:
                    13:61:65:ad:d0:d9:ec:c4:0c:7c:9f:c7:a9:ec:ab:
                    dd:36:06:f5:1c:7e:a7:12:6c:56:40:9e:74:cd:79:
                    df:dc:9b:f7:74:38:ca:97:e8:73:84:a6:b9:41:10:
                    52:01:3e:c3:5e:7f:87:fa:d4:cb:3d:30:4e:66:37:
                    81:cc:67:4e:2a:cf:75:a6:08:d6:35:e4:ce:38:45:
                    3c:26:06:55:bf:e1:6f:16:7a:5b:e8:c8:60:06:95:
                    4f:d8:47:a7:59:51:3b:58:ec:fd:e2:cd:fa:f5:f5:
                    85:92:26:1a:9b:eb:ab:08:21:8d:5a:c2:ca:a7:c3:
                    f9:a0:1d:ee:fd:8c:e8:40:c2:bb:14:d9:16:13:07:
                    e8:74:37:9b:6d:42:96:36:3d:42:e8:3d:e5:2c:05:
                    c7:ba:63:99:80:e4:80:ae:e2:d0:40:cf:37:44:66:
                    6d:7f:fe:68:3d:d2:b3:c4:f7:45:04:6e:14:6a:d5:
                    a7:e3:42:29:69:77:42:63:4c:33:9f:a0:f4:c9:f5:
                    59:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A1:14:F2:4D:78:20:FD:12:14:68:CF:C7:12:9C:A3:27:D8:FA:AB
            X509v3 Authority Key Identifier:
                keyid:06:C5:4D:13:8C:DA:DE:E9:6A:57:6E:4A:6E:B0:0A:7C:C3:16:CD:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/1/06C54D138CDADEE96A576E4A6EB00A7CC316CDC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06C54D138CDADEE96A576E4A6EB00A7CC316CDC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/1/3138312e3233332e3134332e302f32342d3234203d3e20323731353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:0b:60:de:66:b0:1f:9b:e2:d1:1c:ca:18:bd:fb:23:5e:b9:
         f8:a8:b9:f2:76:ab:85:9e:33:7c:c0:b5:74:e0:09:26:63:a6:
         9d:6b:68:ed:ab:19:dc:8f:2b:4b:b7:0b:19:3b:51:0e:3a:f1:
         97:4d:99:73:aa:5a:2c:df:99:c7:d1:2c:7c:32:3f:34:04:f0:
         6d:7e:21:85:5f:f7:b6:35:2a:82:39:e3:b6:74:d7:00:f3:f9:
         f4:38:af:7e:5e:76:1e:fe:77:68:ae:d3:15:bd:82:6a:fb:76:
         34:74:31:1b:79:83:64:5f:56:cd:84:b1:2e:60:df:72:06:4a:
         87:cf:8f:31:07:51:db:60:91:e0:92:95:c8:c8:32:12:81:a9:
         b1:fa:d8:1d:aa:b9:a1:c7:fd:98:ff:bc:bc:c5:f1:fc:45:2d:
         06:c0:73:ee:2f:ef:61:aa:f5:0f:23:9f:c7:bd:c1:25:86:3c:
         3e:c8:66:60:94:59:80:84:ec:4d:fb:28:9e:e2:86:90:d1:29:
         5b:cc:8d:97:42:a0:bd:2f:8f:8a:53:13:58:33:83:07:85:a0:
         c0:20:64:76:e7:aa:4c:ee:d4:4b:2b:21:4c:91:13:1e:a0:bb:
         d9:58:b1:b8:3a:a9:c1:49:30:48:31:56:99:00:97:28:6f:3c:
         3c:f5:6d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org