Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3138392e302f32342d3234203d3e20323731353537.roa
File:                     3138312e3233332e3138392e302f32342d3234203d3e20323731353537.roa (raw, json)
Hash identifier:          nlXG/xWUgBgsOWOC0T3bJ7AtuIGaUlT7+y58/cNbJxk=
Subject key identifier:   B6:2D:66:FB:5B:81:52:38:0F:E8:63:5C:AB:BA:DD:14:A6:01:2F:50
Certificate issuer:       /CN=66B57D11AE2584EBFA8AF72A96225EBCD62CA04D
Certificate serial:       43BEE62F92FE399A8AABB03BF9DE5017EE49CE53
Authority key identifier: 66:B5:7D:11:AE:25:84:EB:FA:8A:F7:2A:96:22:5E:BC:D6:2C:A0:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3138392e302f32342d3234203d3e20323731353537.roa
Signing time:             Sun 10 Mar 2024 03:55:14 +0000
ROA not before:           Sun 10 Mar 2024 03:50:14 +0000
ROA not after:            Sun 09 Mar 2025 03:55:14 +0000
asID:                     271557
IP address blocks:        181.233.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:be:e6:2f:92:fe:39:9a:8a:ab:b0:3b:f9:de:50:17:ee:49:ce:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B57D11AE2584EBFA8AF72A96225EBCD62CA04D
        Validity
            Not Before: Mar 10 03:50:14 2024 GMT
            Not After : Mar  9 03:55:14 2025 GMT
        Subject: CN=B62D66FB5B8152380FE8635CABBADD14A6012F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:ac:25:b9:d0:73:20:13:a5:9c:e5:11:57:
                    80:19:57:2b:a3:eb:6d:90:92:48:79:26:c0:ba:67:
                    5b:4f:ea:4f:13:01:aa:77:2e:bc:2e:2b:f4:56:78:
                    50:6c:8b:8b:ae:c5:8d:e1:70:5e:bc:6d:24:0e:68:
                    0d:50:0f:6b:a0:dd:f6:b7:f7:c3:64:33:dc:20:79:
                    95:3f:1e:c5:93:ff:ec:0b:20:ba:e3:9d:ca:28:cc:
                    36:f9:ba:62:af:6e:e1:fd:e3:61:9c:44:eb:3b:00:
                    a0:40:12:16:69:7b:d0:11:b5:cc:a2:e1:1a:b1:5e:
                    46:72:bb:33:de:31:b1:c3:6a:84:26:da:78:39:3c:
                    b9:cf:ad:53:9b:b0:ce:c9:4f:f1:69:1a:86:2b:1a:
                    9a:11:05:d6:fd:52:38:f7:c1:6c:0c:ff:59:0a:12:
                    01:b4:8c:5c:48:5e:cc:bd:0d:3c:91:da:b9:04:77:
                    6a:ff:3d:6c:84:83:b0:c3:36:a0:e8:4e:ae:ca:89:
                    06:fa:9c:72:c2:1f:19:43:15:ee:aa:ed:06:f7:0e:
                    81:1b:dc:dd:b9:57:93:3e:91:bb:0d:5d:30:69:98:
                    0a:b2:a8:dc:09:b7:cd:55:ee:2e:80:ff:5f:6f:40:
                    c8:82:93:94:a7:d6:14:86:86:86:fe:fd:fd:f2:a9:
                    d8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2D:66:FB:5B:81:52:38:0F:E8:63:5C:AB:BA:DD:14:A6:01:2F:50
            X509v3 Authority Key Identifier:
                keyid:66:B5:7D:11:AE:25:84:EB:FA:8A:F7:2A:96:22:5E:BC:D6:2C:A0:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3138392e302f32342d3234203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:36:78:1c:85:78:70:a6:bd:bd:bd:8f:d4:1a:56:7c:4c:4f:
         62:16:93:e4:07:27:d5:1b:c8:bc:35:1d:34:f0:3a:ee:59:69:
         ad:b7:46:1d:c9:c5:cb:c6:39:f9:ae:24:7d:27:cb:32:fd:a3:
         df:ac:c5:e9:27:d5:56:63:b1:bc:3f:09:5d:26:5a:94:37:32:
         88:28:8e:85:0e:88:b7:16:43:05:3c:91:65:b2:77:b5:c9:36:
         e4:b4:10:5e:f5:62:f5:06:8a:3b:28:ec:d6:30:0c:56:ca:f9:
         eb:a9:b6:b1:83:c1:d7:34:5d:c9:f3:fb:24:c2:6d:b7:7d:3e:
         43:c8:02:10:42:f3:a5:8e:b7:cb:52:46:b7:a5:d5:4b:2e:2e:
         1c:15:1b:c1:35:52:5d:20:e2:a5:82:0f:8e:4c:6e:15:cc:e3:
         4e:b8:5f:2c:09:d0:3e:f1:05:92:d5:59:0a:44:8a:07:8c:61:
         cb:e4:f0:f6:b8:ce:dc:b2:1f:4e:d2:7f:e5:00:86:93:e8:9b:
         bc:d0:c5:a2:c4:b8:1f:60:f1:b8:8e:3b:da:c1:c0:17:a3:8f:
         b5:8b:75:b7:88:31:09:87:79:3f:71:8c:81:67:4d:91:a9:c5:
         05:96:4f:28:bf:87:2d:da:03:a0:db:09:a4:7d:b2:82:fe:31:
         2a:b6:3f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org