Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3139302e302f32342d3234203d3e20323731353537.roa
File:                     3138312e3233332e3139302e302f32342d3234203d3e20323731353537.roa (raw, json)
Hash identifier:          ENld06nm+so4THGoSbIQeqYrWNZudS1ydn9VEFia9KU=
Subject key identifier:   7E:A3:51:A6:DE:78:96:6F:C6:4D:AB:78:AC:BD:11:A0:A9:E7:28:D3
Certificate issuer:       /CN=66B57D11AE2584EBFA8AF72A96225EBCD62CA04D
Certificate serial:       2B165EC846D402DB18FC2B444A6ED03A5FFF586A
Authority key identifier: 66:B5:7D:11:AE:25:84:EB:FA:8A:F7:2A:96:22:5E:BC:D6:2C:A0:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3139302e302f32342d3234203d3e20323731353537.roa
Signing time:             Sun 10 Mar 2024 03:55:13 +0000
ROA not before:           Sun 10 Mar 2024 03:50:13 +0000
ROA not after:            Sun 09 Mar 2025 03:55:13 +0000
asID:                     271557
IP address blocks:        181.233.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:16:5e:c8:46:d4:02:db:18:fc:2b:44:4a:6e:d0:3a:5f:ff:58:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B57D11AE2584EBFA8AF72A96225EBCD62CA04D
        Validity
            Not Before: Mar 10 03:50:13 2024 GMT
            Not After : Mar  9 03:55:13 2025 GMT
        Subject: CN=7EA351A6DE78966FC64DAB78ACBD11A0A9E728D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:36:43:35:fe:60:f6:04:a0:f1:d8:c9:8d:
                    ec:c9:88:4b:9e:c8:45:e3:26:b0:12:e8:b2:30:aa:
                    6c:30:ae:a5:be:e6:b6:f2:88:5d:06:19:f5:0f:df:
                    c9:c5:e0:7d:54:3b:d5:9e:41:68:da:11:38:dc:2f:
                    4f:1f:c6:b3:95:7b:5c:ad:30:8b:64:b2:77:d5:47:
                    6f:2f:9f:c0:23:29:c2:81:c1:16:b6:64:30:4f:75:
                    e4:f6:94:15:41:1c:29:14:11:2a:14:35:46:28:6c:
                    0d:c3:3c:73:7a:b5:06:83:f1:c0:aa:d1:70:0b:67:
                    42:76:1f:06:8f:8f:bf:27:bd:16:84:de:6e:2e:24:
                    07:2c:04:e3:2e:4c:3d:fc:c9:0b:42:ae:09:e7:98:
                    fc:60:25:8d:48:32:b3:ac:a0:53:15:bb:b7:08:3e:
                    25:16:97:d2:77:df:83:da:d5:36:8c:80:e3:5d:ae:
                    08:62:cf:42:27:03:8e:1a:3a:e1:bb:f5:ca:cd:8d:
                    81:2c:dc:b6:c5:e8:59:81:8c:76:9f:f4:4b:0c:d3:
                    81:eb:0f:0a:ab:2c:aa:e1:2a:b1:cc:0b:78:bd:18:
                    47:e9:84:09:31:84:81:77:de:57:a5:ba:e3:5f:df:
                    47:70:a7:62:17:15:c2:85:ba:d2:09:12:1c:c5:98:
                    cd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A3:51:A6:DE:78:96:6F:C6:4D:AB:78:AC:BD:11:A0:A9:E7:28:D3
            X509v3 Authority Key Identifier:
                keyid:66:B5:7D:11:AE:25:84:EB:FA:8A:F7:2A:96:22:5E:BC:D6:2C:A0:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3139302e302f32342d3234203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:0f:e8:05:1a:1c:a2:2d:86:9f:6e:d2:7f:fe:b9:5a:d5:1c:
         4f:46:54:4b:bf:9e:d9:78:40:31:c1:9d:ad:7f:b1:e9:2a:21:
         b9:c6:83:83:c6:2a:04:79:98:71:d8:7b:6b:99:6f:f5:cf:a4:
         5d:03:44:cd:3d:bf:d5:41:83:40:0e:3c:75:3e:05:f0:1d:57:
         7f:e0:07:d0:5f:ec:6c:35:20:1f:9a:6c:92:3d:80:f6:0a:b7:
         65:78:aa:7b:81:f0:5d:f6:76:0b:c8:d1:54:18:dd:cb:33:ab:
         b2:03:a9:d0:c4:4a:c4:b0:f8:85:c5:48:0e:4c:ef:50:fe:8c:
         9d:e8:8a:60:bd:20:a6:08:44:c3:fd:ee:a6:35:b9:ec:1c:1d:
         8e:0b:54:fc:95:12:71:da:65:30:61:1c:0b:5c:87:72:f7:75:
         9e:1f:5d:61:12:64:ad:c8:fc:0a:ca:20:7d:f8:83:a7:3f:a9:
         06:9a:dc:6e:73:4e:7e:be:36:71:65:c9:3f:a8:df:69:54:1f:
         92:3a:5d:62:8d:97:de:e4:dc:41:d8:a7:9d:49:6b:12:97:00:
         ee:0b:f6:5c:fa:ee:3c:d8:57:71:4f:84:8a:43:02:9b:af:c8:
         e1:f6:b4:00:34:c9:69:c9:f2:fb:a5:49:5c:36:62:ea:c9:2a:
         b6:38:bc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org