Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3139312e302f32342d3234203d3e20323731353537.roa
File:                     3138312e3233332e3139312e302f32342d3234203d3e20323731353537.roa (raw, json)
Hash identifier:          RZIZSRs5XvbxYtgL8pbOst+ZBbITmPII/Jpu/BvDmME=
Subject key identifier:   1A:E4:5C:55:34:FC:74:5B:99:E4:FF:DA:1D:51:4A:E5:EF:53:58:BF
Certificate issuer:       /CN=66B57D11AE2584EBFA8AF72A96225EBCD62CA04D
Certificate serial:       6E5198400950FE2A1B5FC6F0B891655A6FDF043B
Authority key identifier: 66:B5:7D:11:AE:25:84:EB:FA:8A:F7:2A:96:22:5E:BC:D6:2C:A0:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3139312e302f32342d3234203d3e20323731353537.roa
Signing time:             Sun 10 Mar 2024 03:55:15 +0000
ROA not before:           Sun 10 Mar 2024 03:50:15 +0000
ROA not after:            Sun 09 Mar 2025 03:55:15 +0000
asID:                     271557
IP address blocks:        181.233.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:51:98:40:09:50:fe:2a:1b:5f:c6:f0:b8:91:65:5a:6f:df:04:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B57D11AE2584EBFA8AF72A96225EBCD62CA04D
        Validity
            Not Before: Mar 10 03:50:15 2024 GMT
            Not After : Mar  9 03:55:15 2025 GMT
        Subject: CN=1AE45C5534FC745B99E4FFDA1D514AE5EF5358BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:08:53:15:e7:d4:8d:54:e0:0e:40:7e:10:0a:
                    31:ee:4e:ab:73:b9:66:40:af:8f:94:93:07:7c:dd:
                    68:b9:7c:4f:7b:eb:ba:b0:a3:17:d0:af:1f:73:ed:
                    bd:b7:29:05:e4:c4:08:d5:19:0b:fe:2d:67:c0:ff:
                    bf:a7:31:3c:42:54:0c:59:32:9f:0a:5d:89:72:2a:
                    cb:34:58:ce:cb:5d:8d:95:a7:7d:51:ee:89:c1:07:
                    72:84:3e:90:62:b4:56:5b:de:12:0a:24:57:47:e8:
                    74:3f:a9:c4:80:39:e1:59:97:6d:fe:82:da:94:c0:
                    be:ff:4f:a8:a1:01:9b:f8:ec:6a:a1:d4:52:ca:71:
                    c4:8e:a7:1b:5b:1b:02:28:bc:88:4f:8c:dc:d1:e8:
                    55:80:93:64:61:1c:5a:7f:6d:9a:59:a0:8d:21:30:
                    6e:a6:ea:44:ea:55:37:00:0a:18:38:66:81:66:20:
                    34:0d:90:13:45:ea:be:32:31:18:29:71:a3:4c:ee:
                    7e:ae:b8:94:c0:6d:57:81:f6:3a:80:b7:1e:6b:d0:
                    1e:e8:a4:cf:7a:5b:ff:d7:ed:9e:fd:03:87:15:ea:
                    52:0f:83:eb:23:de:46:79:20:14:bc:a4:c6:43:84:
                    4a:5e:b4:4b:e2:ae:72:b9:00:0d:24:5d:10:7e:5a:
                    d2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E4:5C:55:34:FC:74:5B:99:E4:FF:DA:1D:51:4A:E5:EF:53:58:BF
            X509v3 Authority Key Identifier:
                keyid:66:B5:7D:11:AE:25:84:EB:FA:8A:F7:2A:96:22:5E:BC:D6:2C:A0:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66B57D11AE2584EBFA8AF72A96225EBCD62CA04D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/0/3138312e3233332e3139312e302f32342d3234203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:44:aa:9c:82:cf:5b:01:1b:b7:17:3f:d3:2a:db:fd:8d:10:
         d0:40:33:33:10:0b:6d:db:66:20:bc:3e:bc:e3:7a:5a:a3:ff:
         ef:02:c2:8f:d3:9a:3b:a7:35:c6:4f:61:91:68:16:75:ff:92:
         16:36:f6:7a:c0:81:a8:83:53:85:4e:b0:86:fd:a2:b5:5e:ab:
         46:45:09:b6:11:4a:17:7d:f0:58:86:eb:d1:5b:cc:55:20:c9:
         ff:b6:1a:4b:38:6d:66:7f:c3:bd:91:e4:2a:f3:b4:5c:33:e7:
         92:ac:d0:23:61:0c:9c:b1:09:35:fc:9c:98:ba:88:0a:96:da:
         87:0d:91:34:b9:ff:d9:4c:d6:02:0b:66:1c:b5:58:45:5a:69:
         36:a8:43:a1:31:58:aa:ac:3d:f3:ed:aa:84:04:57:eb:98:e4:
         e4:bc:e7:0e:88:49:c6:a7:73:f4:96:a0:22:8a:55:01:fc:43:
         d1:43:39:26:7c:75:78:94:61:d4:cb:9c:83:2f:47:04:dc:4a:
         28:38:77:2b:b3:04:ab:8e:04:14:64:ea:df:38:3f:3e:44:b3:
         14:ee:a2:d4:a5:58:38:23:cb:d3:2f:29:77:2f:9a:b6:a1:9a:
         5c:38:41:cd:02:ea:b3:1c:3d:64:4d:50:2a:a1:29:c1:9f:3a:
         fb:6e:e3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org