Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/3138312e3232342e37362e302f32332d3233203d3e20323731343932.roa
File:                     3138312e3232342e37362e302f32332d3233203d3e20323731343932.roa (raw, json)
Hash identifier:          xRZkvBqy0g6OjozaWBlCwqXzEcweahrDuowo583rkIY=
Subject key identifier:   52:55:62:88:84:D0:C5:3B:A7:DB:9A:CA:5D:80:16:D5:88:D3:71:CA
Certificate issuer:       /CN=C0EF709048855BA9C15EDC1FB1E07C8C74D4212F
Certificate serial:       4826F2FA73E4E45C8EB6A4849B191B1DBEAA1D34
Authority key identifier: C0:EF:70:90:48:85:5B:A9:C1:5E:DC:1F:B1:E0:7C:8C:74:D4:21:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0EF709048855BA9C15EDC1FB1E07C8C74D4212F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/3138312e3232342e37362e302f32332d3233203d3e20323731343932.roa
Signing time:             Wed 29 Nov 2023 17:32:54 +0000
ROA not before:           Wed 29 Nov 2023 17:27:54 +0000
ROA not after:            Wed 27 Nov 2024 17:32:54 +0000
asID:                     271492
IP address blocks:        181.224.76.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:26:f2:fa:73:e4:e4:5c:8e:b6:a4:84:9b:19:1b:1d:be:aa:1d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0EF709048855BA9C15EDC1FB1E07C8C74D4212F
        Validity
            Not Before: Nov 29 17:27:54 2023 GMT
            Not After : Nov 27 17:32:54 2024 GMT
        Subject: CN=5255628884D0C53BA7DB9ACA5D8016D588D371CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:2f:c8:64:d7:62:d0:c2:9a:32:3f:39:91:
                    66:21:1d:98:ca:8c:41:30:c9:04:a1:d8:82:f9:d0:
                    7d:74:cd:16:8d:95:02:99:2b:0b:b8:46:b2:1a:47:
                    27:08:4b:27:df:6b:bb:f7:d7:93:3e:57:49:9b:6e:
                    c0:e5:98:1e:3c:4f:f2:c4:c2:59:12:d7:2b:8d:44:
                    a8:76:dd:31:7f:39:cf:46:9e:4c:01:d3:ca:47:4c:
                    33:e6:06:9b:cc:ee:c9:21:16:46:89:ea:06:ec:b6:
                    6e:40:43:cb:46:68:d9:73:7e:45:69:ab:5f:72:c8:
                    32:af:c1:44:c6:26:d0:22:3e:8b:b7:3b:59:1f:16:
                    12:a1:25:04:8e:2b:df:da:61:fd:d8:b8:46:b0:35:
                    af:48:e4:f4:a7:79:e4:34:cd:f8:a5:f0:65:e0:d5:
                    01:f7:7f:ff:b7:ad:eb:45:a0:8c:16:09:a8:50:42:
                    2a:0a:2e:d0:85:2e:d3:98:29:2f:a8:71:88:83:0f:
                    6e:49:83:0d:67:5b:be:01:3d:ae:19:39:8a:dc:6a:
                    4c:60:ae:fe:9b:ea:81:a5:bb:ce:f0:a1:59:ef:31:
                    47:ff:63:76:28:27:f0:16:32:35:a9:c9:a1:20:c9:
                    a7:8d:ea:bb:6f:e6:5f:19:fe:d2:8a:54:ac:28:8b:
                    c3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:55:62:88:84:D0:C5:3B:A7:DB:9A:CA:5D:80:16:D5:88:D3:71:CA
            X509v3 Authority Key Identifier:
                keyid:C0:EF:70:90:48:85:5B:A9:C1:5E:DC:1F:B1:E0:7C:8C:74:D4:21:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/C0EF709048855BA9C15EDC1FB1E07C8C74D4212F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0EF709048855BA9C15EDC1FB1E07C8C74D4212F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/3138312e3232342e37362e302f32332d3233203d3e20323731343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:fc:aa:c3:82:84:80:0e:82:e3:a7:b9:8f:8d:1c:53:ed:67:
         47:c8:74:39:07:af:c9:1c:10:8d:72:1c:f6:5c:f6:d8:c9:40:
         01:01:aa:3e:7d:4d:5b:a2:6f:4e:50:ce:c4:b9:cc:75:33:9d:
         70:0d:a3:1c:52:2f:37:56:ba:d0:4b:61:b6:f5:b7:a3:6e:38:
         ab:7e:7b:ac:6a:b9:ac:38:82:53:fb:8b:86:97:86:52:ee:eb:
         22:41:dc:8e:7a:e8:9b:0e:94:57:00:fc:61:a1:1c:17:31:0d:
         e5:c0:48:dc:c3:ca:7a:2d:de:79:77:4c:e0:98:ef:71:d1:1f:
         c9:35:ad:bf:44:ee:90:ec:ff:b4:27:30:64:b8:3c:fc:b8:70:
         cc:68:73:57:2f:d4:5d:5a:34:7e:72:f0:20:aa:3c:fe:1f:6f:
         aa:70:95:ba:cd:39:07:cf:2c:02:70:c8:ac:b0:d2:6e:27:fa:
         72:e6:c4:85:f4:17:5d:ed:35:d6:b7:79:9d:c6:f5:3a:9b:e7:
         f8:fe:17:dd:eb:1f:5d:31:05:d1:b2:24:21:3f:4d:9e:53:8e:
         14:f9:aa:c5:b3:be:3c:f1:cd:0f:2f:17:1e:9e:4d:83:66:55:
         30:a5:21:6e:80:2b:a2:13:61:c3:94:13:f1:78:76:51:f1:cd:
         03:c4:56:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org