Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3139302e302f32332d3233203d3e20323731353537.roa
File:                     3138312e3233332e3139302e302f32332d3233203d3e20323731353537.roa (raw, json)
Hash identifier:          xqQ8dmwKxGSDf1ZawBXkjW5KEc7spGbxDX37naeD7nY=
Subject key identifier:   36:45:18:A8:65:29:9E:40:89:E8:1D:E6:4E:AF:11:FD:DF:80:50:A9
Certificate issuer:       /CN=66B57D11AE2584EBFA8AF72A96225EBCD62CA04D
Certificate serial:       36CA87F37B094F23659F770565C2AC0F03C258B8
Authority key identifier: 66:B5:7D:11:AE:25:84:EB:FA:8A:F7:2A:96:22:5E:BC:D6:2C:A0:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3139302e302f32332d3233203d3e20323731353537.roa
Signing time:             Thu 11 Apr 2024 19:52:34 +0000
ROA not before:           Thu 11 Apr 2024 19:47:34 +0000
ROA not after:            Thu 10 Apr 2025 19:52:34 +0000
asID:                     271557
IP address blocks:        181.233.190.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ca:87:f3:7b:09:4f:23:65:9f:77:05:65:c2:ac:0f:03:c2:58:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B57D11AE2584EBFA8AF72A96225EBCD62CA04D
        Validity
            Not Before: Apr 11 19:47:34 2024 GMT
            Not After : Apr 10 19:52:34 2025 GMT
        Subject: CN=364518A865299E4089E81DE64EAF11FDDF8050A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ab:5a:9a:88:51:51:25:be:b1:ee:db:17:a0:
                    ab:f5:3d:8c:06:2c:fe:8a:7e:a3:b2:b2:be:67:bf:
                    46:7b:2d:e3:19:89:5e:bb:a8:a7:8f:a0:66:78:83:
                    3d:d2:c2:ad:7e:09:f8:2b:02:0e:f3:73:12:42:a8:
                    aa:39:04:95:b9:c8:44:43:6b:58:c9:ad:10:07:5e:
                    bc:32:39:3f:b6:10:80:9e:81:f3:48:e5:bd:51:77:
                    be:8a:80:e3:ff:09:ec:17:0a:ae:e3:03:ef:f7:95:
                    b3:cf:77:a7:2b:ff:37:c6:9e:01:91:42:77:84:76:
                    bd:36:92:67:53:ff:d3:d2:fd:fa:c2:4e:34:0e:da:
                    64:e1:54:3a:8c:c8:8e:74:a3:c2:eb:ce:f8:e8:d3:
                    fb:44:f1:56:38:03:55:df:8c:83:db:d5:47:f4:12:
                    50:9c:4d:02:57:d2:ef:ca:a6:0f:33:b0:7f:f8:bb:
                    b3:65:cb:5a:0b:47:8c:6a:ce:43:08:b8:da:c8:3b:
                    28:20:1e:a1:e4:66:55:46:40:0b:40:76:4e:c5:65:
                    bc:5f:f5:e7:05:dc:a4:14:b1:60:f1:17:55:65:8d:
                    84:29:97:9b:33:a1:45:aa:12:09:bb:ec:48:0e:66:
                    7d:2a:8c:31:00:0f:e6:48:4e:e4:b7:21:d0:5c:c8:
                    9c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:45:18:A8:65:29:9E:40:89:E8:1D:E6:4E:AF:11:FD:DF:80:50:A9
            X509v3 Authority Key Identifier:
                keyid:66:B5:7D:11:AE:25:84:EB:FA:8A:F7:2A:96:22:5E:BC:D6:2C:A0:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3139302e302f32332d3233203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:50:00:8b:62:f0:37:38:a8:88:9b:88:8f:37:1f:2f:5f:a9:
         26:7a:bb:76:ad:aa:7e:fb:90:89:1c:b8:f2:89:5b:6a:db:7d:
         64:e2:06:29:61:cd:1c:dd:b2:b3:e1:3d:7f:52:a9:e2:64:34:
         24:94:58:5a:c3:c0:14:25:22:59:8d:e3:48:dc:98:fd:c8:b8:
         d3:e9:57:2e:ac:32:3b:07:4f:41:a0:a1:2b:cb:5b:17:2d:b1:
         c4:8c:05:85:60:d3:ce:50:b9:5f:16:33:09:0b:ec:b2:d1:de:
         4c:fb:37:0e:d1:9e:e9:23:b9:56:cc:79:f1:36:42:fa:fc:e2:
         d3:0a:b6:9d:e7:de:b9:24:82:be:c8:37:14:c2:b0:7d:8c:b8:
         9d:a5:72:d0:70:f8:91:09:60:ec:af:fd:41:44:91:63:af:72:
         1c:1a:cf:30:c8:94:c0:26:7a:67:50:50:a6:03:e0:50:a6:18:
         c1:ba:b4:c0:50:9a:76:33:92:d8:4c:e3:53:d6:cc:ce:1d:0e:
         48:08:89:85:d0:c9:60:26:53:7f:87:4d:7e:ac:bc:2a:16:cc:
         5f:8a:04:f9:c9:b7:8c:ea:b6:04:20:11:2c:40:9d:b7:4f:7a:
         8e:82:06:72:d5:ee:3a:d0:c0:97:80:95:54:b6:fe:df:1d:02:
         22:83:fe:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org