Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVLKoSw76WP7FhwxiBvMHFxMRYYK4Z7VwjoRrpyfkq4i/0/3138312e3233332e34352e302f32342d3234203d3e20323731343230.roa
File:                     3138312e3233332e34352e302f32342d3234203d3e20323731343230.roa (raw, json)
Hash identifier:          oeKeh9Hn0wILEoN3v2YAFy5VGtGs0qdIvuAzp01AU74=
Subject key identifier:   8E:20:28:E4:3B:39:5F:1B:74:98:1E:DC:46:1B:55:92:BD:64:33:B2
Certificate issuer:       /CN=F6397E133797ED687FF9A8E595030DA0DFE5B7CE
Certificate serial:       4371E02699F35D06F1085DF9BB3D400E8914A222
Authority key identifier: F6:39:7E:13:37:97:ED:68:7F:F9:A8:E5:95:03:0D:A0:DF:E5:B7:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6397E133797ED687FF9A8E595030DA0DFE5B7CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVLKoSw76WP7FhwxiBvMHFxMRYYK4Z7VwjoRrpyfkq4i/0/3138312e3233332e34352e302f32342d3234203d3e20323731343230.roa
Signing time:             Thu 11 May 2023 11:46:43 +0000
ROA not before:           Thu 11 May 2023 11:41:43 +0000
ROA not after:            Thu 09 May 2024 11:46:43 +0000
asID:                     271420
IP address blocks:        181.233.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:71:e0:26:99:f3:5d:06:f1:08:5d:f9:bb:3d:40:0e:89:14:a2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6397E133797ED687FF9A8E595030DA0DFE5B7CE
        Validity
            Not Before: May 11 11:41:43 2023 GMT
            Not After : May  9 11:46:43 2024 GMT
        Subject: CN=8E2028E43B395F1B74981EDC461B5592BD6433B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:8f:c1:0c:bc:36:5a:4c:77:70:d6:1c:7a:
                    5a:96:fd:38:14:ac:37:9e:7c:13:c3:de:9b:03:19:
                    f7:01:fe:c2:44:dc:ff:56:e2:d1:fe:fa:40:76:93:
                    0d:ee:7c:f9:36:90:68:89:36:75:22:fe:25:d2:aa:
                    b4:74:f2:1f:23:e7:4b:44:14:29:78:a6:47:0f:5a:
                    3a:70:56:d1:86:37:34:90:8d:7b:bd:fb:b8:b8:9a:
                    06:81:36:c4:34:87:4f:fa:5a:e7:5f:7f:9c:d9:b1:
                    ff:a1:55:bc:21:f9:dd:8f:1b:59:44:81:b1:ef:7b:
                    34:f6:4a:f0:e0:d2:41:7e:6b:96:3a:97:f4:77:6b:
                    d7:18:6c:78:ac:66:c1:ec:b6:c4:02:f7:f8:a6:5c:
                    5c:ff:28:47:b0:7d:a0:7e:d3:b3:05:14:0c:a9:8b:
                    e6:d4:ca:ec:77:01:30:3d:81:9a:17:2f:8c:55:0d:
                    68:bd:3b:9c:26:aa:d9:ef:4e:87:26:71:62:a4:2a:
                    f7:ea:a9:40:a3:95:84:48:f6:40:c6:9e:cb:9b:1c:
                    72:4c:8c:c1:2c:d7:57:b4:c0:29:ca:56:94:33:33:
                    dc:4e:eb:18:2a:ce:e5:9b:43:f0:69:bd:d2:0e:af:
                    3a:20:2f:fb:7b:97:e9:af:43:79:72:a8:f5:9c:41:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:20:28:E4:3B:39:5F:1B:74:98:1E:DC:46:1B:55:92:BD:64:33:B2
            X509v3 Authority Key Identifier:
                keyid:F6:39:7E:13:37:97:ED:68:7F:F9:A8:E5:95:03:0D:A0:DF:E5:B7:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVLKoSw76WP7FhwxiBvMHFxMRYYK4Z7VwjoRrpyfkq4i/0/F6397E133797ED687FF9A8E595030DA0DFE5B7CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6397E133797ED687FF9A8E595030DA0DFE5B7CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVLKoSw76WP7FhwxiBvMHFxMRYYK4Z7VwjoRrpyfkq4i/0/3138312e3233332e34352e302f32342d3234203d3e20323731343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:1d:ff:33:9c:6c:70:f1:b2:0e:1d:8f:c4:a9:42:fe:10:f2:
         63:9c:db:1e:c2:c0:61:c7:1e:c6:55:f5:1f:7e:2a:e8:90:ea:
         ba:b9:3d:90:d9:5f:4e:c4:ff:8a:12:fd:e6:a7:fa:27:86:38:
         9d:de:45:ee:42:f8:08:e9:29:6f:21:7a:8a:ba:4c:f4:cf:2b:
         37:cd:af:91:70:9b:33:fb:10:b0:58:19:72:b7:ef:ff:1e:76:
         5b:58:d9:f9:de:a6:9b:6b:c7:7b:44:2b:32:d6:3c:79:2b:4c:
         66:39:06:e2:3c:aa:15:73:28:fe:e5:2f:33:0c:b8:9f:0f:cc:
         c5:ad:52:f5:c2:58:fe:d9:c1:88:ec:83:dd:a4:1b:17:73:e8:
         25:1e:a5:26:fc:7c:c1:36:a3:9c:fc:30:89:e4:99:97:1b:80:
         f6:25:d7:cd:c0:79:a6:a4:c2:b7:1d:df:3f:ba:59:97:01:a7:
         7e:bf:09:a0:77:ff:10:bf:f4:2f:8c:e8:18:71:57:76:75:61:
         5c:7d:2b:54:53:8e:78:6b:94:1a:f6:83:f6:30:37:5b:80:7a:
         14:37:4f:60:af:56:3c:ef:c3:26:ad:61:fc:88:b2:b8:86:48:
         ca:e8:e5:47:b9:fa:0e:48:b5:4b:b8:9c:ee:4d:4b:50:f2:6c:
         de:e0:fc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org