Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3138382e302f32322d3232203d3e20323731353537.roa
File:                     3138312e3233332e3138382e302f32322d3232203d3e20323731353537.roa (raw, json)
Hash identifier:          ssC/EujfFq87Qr+qCmLMo8IVyQx8euPZD/dVlOn1KC8=
Subject key identifier:   E2:5E:E1:2F:D3:F0:6D:F1:1C:B1:2C:5F:36:9F:DB:B4:6F:C6:9A:54
Certificate issuer:       /CN=66B57D11AE2584EBFA8AF72A96225EBCD62CA04D
Certificate serial:       29E72A9229C928296FEA2E8B2E480909158BE7C5
Authority key identifier: 66:B5:7D:11:AE:25:84:EB:FA:8A:F7:2A:96:22:5E:BC:D6:2C:A0:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3138382e302f32322d3232203d3e20323731353537.roa
Signing time:             Sun 10 Mar 2024 03:55:14 +0000
ROA not before:           Sun 10 Mar 2024 03:50:14 +0000
ROA not after:            Sun 09 Mar 2025 03:55:14 +0000
asID:                     271557
IP address blocks:        181.233.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e7:2a:92:29:c9:28:29:6f:ea:2e:8b:2e:48:09:09:15:8b:e7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B57D11AE2584EBFA8AF72A96225EBCD62CA04D
        Validity
            Not Before: Mar 10 03:50:14 2024 GMT
            Not After : Mar  9 03:55:14 2025 GMT
        Subject: CN=E25EE12FD3F06DF11CB12C5F369FDBB46FC69A54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:d4:7a:83:92:79:fb:8a:29:b1:fb:55:26:
                    6e:3c:37:0f:a1:a7:14:e2:6c:df:a3:4e:e9:42:0f:
                    1b:71:80:44:cf:89:87:14:f5:91:a8:c1:5f:ed:ab:
                    9d:52:ee:e0:d9:2e:c0:8d:80:ea:f1:7f:35:15:d5:
                    5f:d6:55:ec:1d:c4:34:e9:96:20:a9:dd:e6:1e:c3:
                    fb:f2:49:73:74:9c:f2:7d:54:16:7e:6f:11:62:a8:
                    05:60:35:19:8a:c6:99:72:5f:ee:71:15:ec:0c:43:
                    fe:61:fe:4f:5d:d7:5a:58:fa:7b:c7:78:2b:03:5a:
                    0f:7d:a1:bb:8b:b8:19:bf:57:14:85:4a:96:94:79:
                    37:c8:e9:af:e8:38:f7:56:3b:ec:cf:f7:c1:a0:50:
                    25:c3:b5:f3:b9:b3:d6:1f:2e:e9:f8:6f:86:4e:12:
                    61:ef:ff:23:d8:2f:b2:a6:4c:74:44:45:32:a6:a5:
                    7d:f7:7a:fe:f1:13:e7:4d:06:06:7a:62:50:98:21:
                    59:d0:09:13:7a:d4:63:da:d6:45:2c:45:3a:ca:6d:
                    23:4e:25:a2:e8:33:72:75:9c:38:4c:49:fb:bb:aa:
                    7c:86:5e:4f:f6:40:f8:09:ed:7b:72:23:38:58:8d:
                    60:dd:2e:9d:44:09:61:9e:36:42:e0:0c:09:b8:66:
                    ac:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5E:E1:2F:D3:F0:6D:F1:1C:B1:2C:5F:36:9F:DB:B4:6F:C6:9A:54
            X509v3 Authority Key Identifier:
                keyid:66:B5:7D:11:AE:25:84:EB:FA:8A:F7:2A:96:22:5E:BC:D6:2C:A0:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3138382e302f32322d3232203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:5e:d3:cc:d2:23:1e:ed:bc:bb:bb:7e:9d:26:d4:69:e7:e9:
         64:12:63:46:5d:a6:b9:0b:bd:dc:a6:be:3f:11:1d:7f:8a:ff:
         f7:18:5e:e5:5d:15:23:02:f3:24:5c:ad:c3:9c:83:ab:e1:05:
         53:8b:ee:90:07:b3:e5:89:2a:30:aa:9f:86:4f:54:67:e6:6c:
         7d:b6:35:9d:42:40:6f:e0:12:b0:33:f5:2a:98:be:24:31:fb:
         14:7d:89:84:78:c2:33:7b:47:60:e5:9a:74:48:91:54:90:23:
         63:97:f4:53:6f:3a:0e:37:d9:b3:6d:cf:21:bf:fd:48:f5:e6:
         51:f0:65:70:25:35:a5:7a:b4:ac:17:5c:81:82:71:da:e6:d2:
         c6:26:7c:78:77:0d:f0:a6:2d:97:72:3e:91:4a:fd:3c:e1:06:
         32:f8:d8:7c:91:48:12:c6:b3:d4:ad:58:23:4a:86:66:75:63:
         50:e4:22:6a:32:d5:2b:09:6b:15:30:67:d2:4c:fe:8a:aa:af:
         08:52:dc:66:ea:a3:79:07:9e:af:ed:54:96:c5:87:c9:ba:98:
         d3:f1:84:e1:94:68:f0:87:e3:6d:99:27:4e:3d:6e:b0:6e:9e:
         83:9f:fd:cf:c1:a1:b2:ac:04:67:b8:8f:ec:d3:f3:63:39:ec:
         e6:e9:85:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org