Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3138382e302f32332d3233203d3e20323731353537.roa
File:                     3138312e3233332e3138382e302f32332d3233203d3e20323731353537.roa (raw, json)
Hash identifier:          s0+T+ZPZwDAji6Q1YcyMD5QftuAkVQJj9oeIZ/Cc6mg=
Subject key identifier:   9C:79:7F:A4:55:2E:CD:FC:03:4D:01:83:BE:41:D9:31:66:DE:7B:73
Certificate issuer:       /CN=66B57D11AE2584EBFA8AF72A96225EBCD62CA04D
Certificate serial:       0BB0C4F43B6AE1E37F227909FF1222160104A113
Authority key identifier: 66:B5:7D:11:AE:25:84:EB:FA:8A:F7:2A:96:22:5E:BC:D6:2C:A0:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3138382e302f32332d3233203d3e20323731353537.roa
Signing time:             Thu 11 Apr 2024 19:52:30 +0000
ROA not before:           Thu 11 Apr 2024 19:47:30 +0000
ROA not after:            Thu 10 Apr 2025 19:52:30 +0000
asID:                     271557
IP address blocks:        181.233.188.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b0:c4:f4:3b:6a:e1:e3:7f:22:79:09:ff:12:22:16:01:04:a1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B57D11AE2584EBFA8AF72A96225EBCD62CA04D
        Validity
            Not Before: Apr 11 19:47:30 2024 GMT
            Not After : Apr 10 19:52:30 2025 GMT
        Subject: CN=9C797FA4552ECDFC034D0183BE41D93166DE7B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:2c:85:f4:fc:f6:ae:2c:bb:64:25:50:00:
                    fb:28:2a:9b:0c:2f:c7:09:04:8a:56:42:5d:ed:62:
                    40:bf:99:ce:64:5a:df:d5:e6:28:9b:a7:0c:80:83:
                    2c:8c:23:84:de:8e:37:c9:c2:0c:42:9f:16:13:b2:
                    38:3e:a0:1a:d9:97:dd:d3:f7:70:de:81:5d:52:8e:
                    11:4b:49:e3:9d:00:90:9d:87:8b:56:f2:7c:6c:a2:
                    bc:09:bf:60:94:36:6f:ef:48:f6:6a:9f:d5:a7:6d:
                    31:f0:4c:b7:84:a2:17:d7:62:4e:50:98:9e:8a:fd:
                    42:a6:01:f2:6e:7c:43:b3:8e:41:a1:00:f3:4b:78:
                    e0:38:e0:82:fc:e1:7a:a2:f8:06:08:4a:71:76:c8:
                    92:4b:11:c1:48:4c:6f:dd:81:3d:a6:a7:e6:7c:ab:
                    ec:58:fb:9b:9e:0e:df:b3:bd:5f:a2:36:91:80:68:
                    f4:d5:6c:d5:9c:b4:26:4f:db:76:91:d4:0b:3f:5b:
                    16:80:71:8a:1d:8b:fa:62:52:57:dc:c2:b3:a9:d2:
                    36:b4:c3:58:e6:de:fb:79:a8:56:9b:17:f9:14:bc:
                    75:81:46:d4:5d:91:a8:0a:c8:9c:d4:46:6c:25:23:
                    23:04:2b:0d:58:d5:69:6a:0a:71:29:c2:0e:b6:53:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:79:7F:A4:55:2E:CD:FC:03:4D:01:83:BE:41:D9:31:66:DE:7B:73
            X509v3 Authority Key Identifier:
                keyid:66:B5:7D:11:AE:25:84:EB:FA:8A:F7:2A:96:22:5E:BC:D6:2C:A0:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3138382e302f32332d3233203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:92:68:ac:a9:5a:cb:0a:4c:1c:00:4c:e0:38:51:e0:39:7b:
         f8:7c:22:a7:c6:fa:0e:2c:86:83:f1:07:c2:6e:16:9b:b0:a0:
         18:b9:d5:0d:d1:62:e3:53:5d:9d:38:5d:91:fb:fb:47:ab:26:
         fa:03:62:4a:4c:58:47:b3:c8:46:79:71:8f:e1:81:4d:0d:09:
         14:05:1f:98:94:8d:e3:27:70:3f:be:ce:90:da:1c:94:9e:e8:
         a2:53:b2:1e:9e:a8:a1:69:cc:4c:eb:17:82:00:ac:a0:38:16:
         e1:9c:6c:ae:42:77:a6:f3:f5:8b:9f:55:80:4b:5e:5f:07:e1:
         8e:6a:0d:fd:8a:21:1c:74:16:6a:5a:77:9e:8a:db:b1:d2:e4:
         ca:0a:cb:63:e2:40:3a:08:ee:1c:a5:c8:1f:ab:42:80:26:fa:
         ac:d2:b2:e6:c6:3b:f8:44:6e:c3:72:be:22:44:07:ff:9c:dd:
         15:24:43:4c:fc:b0:ea:47:a0:9b:65:84:83:c3:4f:5d:51:5f:
         7c:4a:90:9d:f2:08:14:c9:af:de:1e:cf:b0:87:53:dd:b0:36:
         33:0f:bf:90:56:6a:4b:af:2f:ee:dc:97:36:87:d2:d2:8d:3c:
         95:da:87:2e:16:e4:71:b5:b9:c1:70:83:1c:05:02:c3:0f:63:
         59:da:0b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org