Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/0/3138312e3137342e3232302e302f32322d3232203d3e20323731353632.roa
File:                     3138312e3137342e3232302e302f32322d3232203d3e20323731353632.roa (raw, json)
Hash identifier:          NRdSNsWV1uZAHfhrZyPrXtUyDZ6WTkV2MxWV+06b8iA=
Subject key identifier:   99:AB:01:21:60:80:05:6E:E7:74:3F:2A:D7:D0:6C:18:AA:55:C8:96
Certificate issuer:       /CN=AC469910774B2980D687887BD41807B15AA1EED9
Certificate serial:       6CA5CC2DE15A7E8117F5E8AAB9613812AE244D67
Authority key identifier: AC:46:99:10:77:4B:29:80:D6:87:88:7B:D4:18:07:B1:5A:A1:EE:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC469910774B2980D687887BD41807B15AA1EED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/0/3138312e3137342e3232302e302f32322d3232203d3e20323731353632.roa
Signing time:             Sun 03 Dec 2023 05:57:27 +0000
ROA not before:           Sun 03 Dec 2023 05:52:27 +0000
ROA not after:            Sun 01 Dec 2024 05:57:27 +0000
asID:                     271562
IP address blocks:        181.174.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a5:cc:2d:e1:5a:7e:81:17:f5:e8:aa:b9:61:38:12:ae:24:4d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC469910774B2980D687887BD41807B15AA1EED9
        Validity
            Not Before: Dec  3 05:52:27 2023 GMT
            Not After : Dec  1 05:57:27 2024 GMT
        Subject: CN=99AB01216080056EE7743F2AD7D06C18AA55C896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:80:d9:e7:24:c9:12:da:9a:6a:1e:57:1b:
                    84:d0:12:94:c4:eb:c4:ea:80:8d:5b:c5:04:9b:df:
                    d5:4e:c2:17:fa:f9:e1:14:8f:b0:95:95:c8:52:ff:
                    4d:f6:97:d5:16:5a:6e:f3:57:c0:13:0e:53:1a:d8:
                    b3:46:28:fe:51:7d:e2:fc:63:d5:c1:0d:5d:da:00:
                    88:41:e2:21:d5:f5:69:f9:90:24:e8:76:a5:6f:79:
                    28:65:d4:57:61:af:3e:94:37:29:7b:cd:ab:b9:41:
                    33:2e:05:dd:1e:bc:7a:23:2b:34:fe:e6:71:4b:bc:
                    61:3a:89:5c:4c:ee:6b:4f:4c:f4:a2:d1:2b:31:68:
                    f6:4a:8e:8a:a0:41:9f:e8:bd:02:43:32:c9:5f:12:
                    5d:ec:c0:f9:89:66:e5:b1:dd:00:3b:a0:cb:0b:d1:
                    18:7b:36:9b:f4:3f:42:8f:a6:f3:de:58:ae:7a:6a:
                    91:9e:21:22:20:45:cd:e3:6b:95:36:e6:70:04:ad:
                    60:89:8e:24:d5:08:28:93:f8:08:37:97:e5:22:e4:
                    9c:4b:64:ff:6a:48:73:de:c9:66:ea:e6:70:9c:a8:
                    2c:5c:f3:0d:fe:da:df:35:07:81:ee:86:a0:45:89:
                    f5:d6:c0:76:55:d9:57:ba:ea:71:08:45:06:15:e3:
                    40:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AB:01:21:60:80:05:6E:E7:74:3F:2A:D7:D0:6C:18:AA:55:C8:96
            X509v3 Authority Key Identifier:
                keyid:AC:46:99:10:77:4B:29:80:D6:87:88:7B:D4:18:07:B1:5A:A1:EE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/0/AC469910774B2980D687887BD41807B15AA1EED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC469910774B2980D687887BD41807B15AA1EED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/0/3138312e3137342e3232302e302f32322d3232203d3e20323731353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:f0:88:a0:23:44:27:41:b3:42:08:4d:1d:62:cc:cf:2b:3d:
         c5:5e:6b:55:ec:6c:c4:e2:fa:ad:15:09:17:01:c1:09:2b:8b:
         3b:e2:de:cd:f1:90:63:16:36:67:49:10:22:4f:47:3d:b1:2f:
         7c:70:06:c9:e4:c9:d2:e0:60:24:71:bc:85:68:27:a1:32:f8:
         5c:4c:aa:c8:d6:bd:c2:6b:dc:b5:ae:b2:11:ad:1d:ac:21:cc:
         14:a8:4f:1e:86:ee:93:c6:0a:82:c9:08:ec:32:6c:4a:0b:21:
         3d:90:b4:c3:16:8d:c8:8c:f5:a9:f7:24:38:6f:4c:10:ab:1f:
         c1:25:50:e6:5a:67:c6:f3:42:dd:52:35:2e:70:44:0e:00:8c:
         6c:e0:70:42:b4:a5:4a:48:bb:ac:12:97:92:7a:dc:92:0b:35:
         ad:c2:1b:a7:e8:99:3e:1d:a1:10:bd:ca:f0:bd:9a:43:19:0b:
         b7:40:ea:32:46:5e:fe:29:f4:ac:4d:73:a8:b5:8e:db:57:61:
         46:81:6d:9f:fc:dc:59:32:60:b8:ec:48:1a:93:67:9f:d8:5f:
         e0:c4:bc:d8:d5:f7:f2:b2:05:fb:09:86:3b:34:de:e8:12:8f:
         cc:1f:2d:1c:9a:9f:23:f6:7f:c8:78:95:9e:e8:a9:3d:b1:e3:
         b3:4f:74:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org