Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/3138312e3232342e37362e302f32322d3232203d3e20323731343932.roa
File:                     3138312e3232342e37362e302f32322d3232203d3e20323731343932.roa (raw, json)
Hash identifier:          KBpclZX9K0Xa3TAgAJ/dQ9eNSS/B/e1Kw09kynWoP+k=
Subject key identifier:   1E:76:4D:56:10:65:C4:C8:41:2C:2E:84:61:57:33:7B:4E:C3:1B:A1
Certificate issuer:       /CN=C0EF709048855BA9C15EDC1FB1E07C8C74D4212F
Certificate serial:       2B158CC700FFBDE657FF7DDBAA9B6F9954889DCF
Authority key identifier: C0:EF:70:90:48:85:5B:A9:C1:5E:DC:1F:B1:E0:7C:8C:74:D4:21:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0EF709048855BA9C15EDC1FB1E07C8C74D4212F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/3138312e3232342e37362e302f32322d3232203d3e20323731343932.roa
Signing time:             Wed 29 Nov 2023 17:32:54 +0000
ROA not before:           Wed 29 Nov 2023 17:27:54 +0000
ROA not after:            Wed 27 Nov 2024 17:32:54 +0000
asID:                     271492
IP address blocks:        181.224.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:15:8c:c7:00:ff:bd:e6:57:ff:7d:db:aa:9b:6f:99:54:88:9d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0EF709048855BA9C15EDC1FB1E07C8C74D4212F
        Validity
            Not Before: Nov 29 17:27:54 2023 GMT
            Not After : Nov 27 17:32:54 2024 GMT
        Subject: CN=1E764D561065C4C8412C2E846157337B4EC31BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:54:24:7e:87:55:3d:08:5f:49:81:ea:d5:81:
                    c3:bb:f3:fe:36:b3:ae:42:b5:25:6f:7c:95:24:c3:
                    76:1f:f1:c1:63:d0:74:65:02:ac:9f:ee:65:ae:29:
                    08:70:50:d6:f0:f4:98:78:1a:76:e4:cc:83:4d:91:
                    04:cf:cd:77:5b:1a:67:40:69:58:0b:a3:a8:50:75:
                    cb:32:12:44:09:d9:cd:ac:32:e4:b7:26:b9:aa:f8:
                    f6:1d:94:c1:1c:96:c0:d6:97:90:7a:47:9f:23:81:
                    8a:d1:88:62:ff:d0:bb:62:28:af:d9:37:ed:70:9c:
                    90:e6:b0:17:f7:6d:68:49:75:4e:66:f3:d8:c7:3d:
                    7a:68:7f:7b:af:cd:18:86:69:0e:4b:87:a8:db:ed:
                    23:f8:0a:ca:e8:16:40:13:8c:a5:9b:15:c1:1f:3b:
                    98:37:57:7f:dd:3c:b1:a5:60:84:bf:b3:20:47:09:
                    6e:db:90:a6:db:4e:a8:8c:4a:43:6e:85:12:38:bf:
                    34:54:c2:e3:ed:af:99:8e:ca:6a:cd:83:de:51:26:
                    d7:3e:76:9e:da:71:dc:b8:00:64:8b:77:4d:3f:70:
                    d2:cf:36:b8:81:71:fc:85:26:46:bf:2d:75:29:7d:
                    59:ea:8b:6c:59:d4:29:fe:c4:5a:e1:d1:7e:27:b4:
                    39:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:76:4D:56:10:65:C4:C8:41:2C:2E:84:61:57:33:7B:4E:C3:1B:A1
            X509v3 Authority Key Identifier:
                keyid:C0:EF:70:90:48:85:5B:A9:C1:5E:DC:1F:B1:E0:7C:8C:74:D4:21:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/C0EF709048855BA9C15EDC1FB1E07C8C74D4212F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0EF709048855BA9C15EDC1FB1E07C8C74D4212F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/3138312e3232342e37362e302f32322d3232203d3e20323731343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:9f:ac:d0:6d:69:a2:92:41:50:c2:ac:f2:aa:94:9f:09:81:
         23:41:b4:2a:15:ca:28:06:60:3b:98:79:02:0a:87:3c:3d:76:
         55:9b:77:ea:a1:b8:85:47:13:50:54:72:f1:f7:76:5f:26:16:
         b3:e8:3d:8a:58:26:c0:9e:c1:72:4f:f3:c3:40:b4:65:5c:1e:
         7b:fd:61:8b:db:9e:62:85:c2:48:e8:28:2a:0d:0f:f9:37:88:
         de:a5:13:82:df:0c:be:58:e3:6b:22:11:14:1b:ba:04:17:ee:
         6a:ee:d3:69:ea:dd:58:42:51:23:b8:59:54:81:55:75:ad:bb:
         e0:63:f9:51:eb:22:17:50:0e:b2:9a:6c:d9:e1:32:86:24:13:
         f7:74:15:0c:7e:8e:aa:16:4b:2c:80:28:c0:9e:db:07:15:db:
         22:5d:9a:6f:75:88:91:d6:86:70:a5:15:9b:85:af:b9:83:20:
         5b:bc:86:c6:43:88:9a:ab:38:26:90:82:82:b0:1c:96:13:a0:
         4a:7a:a3:f0:de:d5:79:0c:72:a4:d4:ec:cb:76:2e:e2:41:81:
         ff:7e:ea:c8:f5:a0:3f:70:ca:dc:a3:e4:52:92:e5:cf:44:1a:
         2f:f9:26:7e:f1:cb:f1:15:03:fb:c7:7d:23:5c:9e:ea:e7:18:
         67:24:90:af
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKxWMxwD/veZX/33bqptvmVSInc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBFRjcwOTA0ODg1NUJBOUMxNUVEQzFGQjFFMDdDOEM3
NEQ0MjEyRjAeFw0yMzExMjkxNzI3NTRaFw0yNDExMjcxNzMyNTRaMDMxMTAvBgNV
BAMTKDFFNzY0RDU2MTA2NUM0Qzg0MTJDMkU4NDYxNTczMzdCNEVDMzFCQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjVCR+h1U9CF9JgerVgcO78/42
s65CtSVvfJUkw3Yf8cFj0HRlAqyf7mWuKQhwUNbw9Jh4GnbkzINNkQTPzXdbGmdA
aVgLo6hQdcsyEkQJ2c2sMuS3Jrmq+PYdlMEclsDWl5B6R58jgYrRiGL/0LtiKK/Z
N+1wnJDmsBf3bWhJdU5m89jHPXpof3uvzRiGaQ5Lh6jb7SP4CsroFkATjKWbFcEf
O5g3V3/dPLGlYIS/syBHCW7bkKbbTqiMSkNuhRI4vzRUwuPtr5mOymrNg95RJtc+
dp7acdy4AGSLd00/cNLPNriBcfyFJka/LXUpfVnqi2xZ1Cn+xFrh0X4ntDn1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHnZNVhBlxMhBLC6EYVcze07DG6EwHwYDVR0j
BBgwFoAUwO9wkEiFW6nBXtwfseB8jHTUIS8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkhpekpFWng5VUR6akNRR0pwRnRjYXVSaUI3YUhiMUxiblpha21tVWI4
NDcvMC9DMEVGNzA5MDQ4ODU1QkE5QzE1RURDMUZCMUUwN0M4Qzc0RDQyMTJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MwRUY3MDkwNDg4NTVCQTlD
MTVFREMxRkIxRTA3QzhDNzRENDIxMkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JIaXpKRVp4OVVEempDUUdKcEZ0Y2F1UmlCN2FIYjFMYm5aYWttbVViODQ3LzAv
MzEzODMxMmUzMjMyMzQyZTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzNDM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK14EwwDQYJKoZIhvcNAQELBQADggEBAAmfrNBt
aaKSQVDCrPKqlJ8JgSNBtCoVyigGYDuYeQIKhzw9dlWbd+qhuIVHE1BUcvH3dl8m
FrPoPYpYJsCewXJP88NAtGVcHnv9YYvbnmKFwkjoKCoND/k3iN6lE4LfDL5Y42si
ERQbugQX7mru02nq3VhCUSO4WVSBVXWtu+Bj+VHrIhdQDrKabNnhMoYkE/d0FQx+
jqoWSyyAKMCe2wcV2yJdmm91iJHWhnClFZuFr7mDIFu8hsZDiJqrOCaQgoKwHJYT
oEp6o/De1XkMcqTU7Mt2LuJBgf9+6sj1oD9wytyj5FKS5c9EGi/5Jn7xy/EVA/vH
fSNcnurnGGckkK8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org