Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3138382e302f32342d3234203d3e20323731353537.roa
File:                     3138312e3233332e3138382e302f32342d3234203d3e20323731353537.roa (raw, json)
Hash identifier:          RpPXrNsP645c1TVoPoGulQCQhip3wvjtunwskdFAYyc=
Subject key identifier:   4B:45:3F:E3:CF:26:4E:48:92:CB:83:18:C9:50:5C:BF:92:97:60:BD
Certificate issuer:       /CN=66B57D11AE2584EBFA8AF72A96225EBCD62CA04D
Certificate serial:       2C9D147CBC0DA5BE3D1D39B95B6B84E3E32B544D
Authority key identifier: 66:B5:7D:11:AE:25:84:EB:FA:8A:F7:2A:96:22:5E:BC:D6:2C:A0:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3138382e302f32342d3234203d3e20323731353537.roa
Signing time:             Sun 10 Mar 2024 03:55:16 +0000
ROA not before:           Sun 10 Mar 2024 03:50:16 +0000
ROA not after:            Sun 09 Mar 2025 03:55:16 +0000
asID:                     271557
IP address blocks:        181.233.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9d:14:7c:bc:0d:a5:be:3d:1d:39:b9:5b:6b:84:e3:e3:2b:54:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B57D11AE2584EBFA8AF72A96225EBCD62CA04D
        Validity
            Not Before: Mar 10 03:50:16 2024 GMT
            Not After : Mar  9 03:55:16 2025 GMT
        Subject: CN=4B453FE3CF264E4892CB8318C9505CBF929760BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:f3:e1:43:54:66:ca:df:aa:55:2a:30:a1:
                    91:0f:36:b6:a4:d1:ba:d6:d6:45:76:2d:b0:5f:8b:
                    48:b8:7d:31:02:b0:ea:d1:3b:c4:ff:e8:75:71:79:
                    f4:4c:12:3e:1e:6e:d2:98:b6:e5:1c:dc:7e:cb:bd:
                    6b:7c:89:25:3c:88:9a:5b:46:58:2d:a6:4b:91:d5:
                    6a:b4:74:5e:c2:32:b0:63:a0:2c:f3:30:3d:79:0b:
                    cc:e2:8c:f6:52:59:6a:a1:41:8e:b0:a8:e0:19:4a:
                    d6:4d:dc:e6:96:d5:03:3b:b0:f9:ff:a1:e1:ad:cc:
                    41:a8:8f:93:4f:64:10:7a:a0:ad:a6:cb:04:78:32:
                    f3:c5:22:91:7a:b5:25:06:c9:55:72:6e:db:68:da:
                    c6:c0:fc:25:ef:44:a7:80:f7:ae:2d:95:5f:00:98:
                    f1:38:36:e8:fc:d7:fd:63:a1:8d:5c:76:1f:89:26:
                    ef:c6:60:72:27:5c:fb:74:7d:4d:a6:57:51:e2:24:
                    cd:27:2f:d3:6e:5e:60:22:44:04:75:59:3d:8e:dc:
                    fe:1b:4b:01:d5:bf:83:3d:76:c6:d5:c0:00:0f:8a:
                    65:4a:6f:32:7a:71:de:b9:d0:d0:fd:9b:dd:3c:3d:
                    17:a5:2d:d7:9c:97:d1:f5:98:a4:9c:81:ef:77:3b:
                    5a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:45:3F:E3:CF:26:4E:48:92:CB:83:18:C9:50:5C:BF:92:97:60:BD
            X509v3 Authority Key Identifier:
                keyid:66:B5:7D:11:AE:25:84:EB:FA:8A:F7:2A:96:22:5E:BC:D6:2C:A0:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3138382e302f32342d3234203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:12:d7:96:20:f7:1e:c1:1e:27:d4:20:f1:5f:f5:59:4e:4a:
         bb:0e:3c:df:ca:8b:89:34:d6:cb:9c:36:d7:05:ce:1c:ea:5f:
         f2:68:a4:7f:04:60:4a:ee:80:04:01:f0:c4:22:7e:a5:e8:a7:
         48:70:db:66:6d:2f:ec:96:91:a2:af:55:df:bd:f3:70:4b:79:
         21:74:b0:e9:ab:fc:50:18:31:25:a9:57:32:12:84:6b:b2:6f:
         84:ff:64:ea:d6:36:e5:5d:e3:51:26:73:c7:f8:37:e0:0b:5f:
         45:a6:06:97:bc:72:87:d8:36:1f:af:41:a2:05:c0:65:05:72:
         04:97:48:6f:ab:4e:47:3a:05:66:0d:eb:60:f4:46:91:7a:f9:
         59:6f:e5:2d:09:b1:41:b6:82:f9:a2:b6:dc:9b:02:ec:fd:65:
         db:23:80:4c:e0:e5:57:e3:a2:85:95:e7:25:2f:22:59:b0:85:
         dd:80:62:84:ef:3d:57:41:40:72:00:d8:94:81:ad:46:f3:77:
         30:51:c9:ed:ee:88:2c:a0:98:fb:c9:ca:54:9c:5f:19:da:0d:
         26:92:a9:b1:1a:eb:5c:33:bf:bb:7e:ad:80:fc:47:51:08:dc:
         8c:09:23:df:52:3f:15:fe:3f:42:9c:22:97:42:3b:f4:3f:5d:
         b5:c4:ae:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org