Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/0/3138312e3137342e3232302e302f32342d3234203d3e20323731353632.roa
File:                     3138312e3137342e3232302e302f32342d3234203d3e20323731353632.roa (raw, json)
Hash identifier:          bDS+HqWs7tKuyPbBRfGqVcp9C9pegp3qd2KvJMY6nlQ=
Subject key identifier:   22:0F:7D:9B:83:1E:DE:DE:C2:B9:56:15:AA:7C:73:AE:20:3B:42:D2
Certificate issuer:       /CN=AC469910774B2980D687887BD41807B15AA1EED9
Certificate serial:       45F65B712FD5F3BF1951C450B3429E52F984F7CC
Authority key identifier: AC:46:99:10:77:4B:29:80:D6:87:88:7B:D4:18:07:B1:5A:A1:EE:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC469910774B2980D687887BD41807B15AA1EED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/0/3138312e3137342e3232302e302f32342d3234203d3e20323731353632.roa
Signing time:             Sun 03 Dec 2023 05:57:55 +0000
ROA not before:           Sun 03 Dec 2023 05:52:55 +0000
ROA not after:            Sun 01 Dec 2024 05:57:55 +0000
asID:                     271562
IP address blocks:        181.174.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f6:5b:71:2f:d5:f3:bf:19:51:c4:50:b3:42:9e:52:f9:84:f7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC469910774B2980D687887BD41807B15AA1EED9
        Validity
            Not Before: Dec  3 05:52:55 2023 GMT
            Not After : Dec  1 05:57:55 2024 GMT
        Subject: CN=220F7D9B831EDEDEC2B95615AA7C73AE203B42D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:43:84:a4:e2:63:57:55:93:82:99:c4:96:
                    c9:d0:81:e7:70:2b:5e:18:e3:c2:d6:83:23:b8:c6:
                    00:af:f7:f9:e1:69:12:7e:9e:f2:cf:97:16:69:cb:
                    44:ba:9e:ef:eb:0a:55:72:98:77:70:d8:10:97:37:
                    30:d2:08:d5:ed:9a:37:2e:04:90:2f:19:4d:21:fa:
                    da:e9:36:f7:19:18:88:19:25:22:77:fb:6e:fa:2b:
                    ac:47:b1:80:a0:ce:d1:c6:52:41:d6:38:62:3e:09:
                    ad:56:59:76:f1:d6:00:56:af:cf:28:03:4a:67:f4:
                    db:b7:d4:88:55:6b:f0:c4:ca:be:f8:0d:f8:23:ff:
                    1e:ea:08:f4:c6:e0:fb:03:ea:b8:ea:f1:29:74:3d:
                    39:fb:14:0a:d6:2e:cb:f4:e7:c5:78:5f:95:46:4a:
                    36:a7:e8:bb:0b:9b:ef:37:aa:30:44:d0:4d:25:82:
                    34:20:13:5a:c6:b9:35:0e:ac:62:fe:37:01:1e:4c:
                    b0:3a:ce:8e:6d:f7:ba:05:28:02:f1:cc:0d:c6:2f:
                    88:59:02:b1:3b:bc:7d:35:38:c3:9f:30:9e:d1:89:
                    98:79:72:5f:1e:c5:15:da:f6:53:22:e2:8e:c3:8b:
                    a9:8c:b8:78:fd:7a:a9:dc:41:bc:6b:ce:e4:a0:d2:
                    d3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0F:7D:9B:83:1E:DE:DE:C2:B9:56:15:AA:7C:73:AE:20:3B:42:D2
            X509v3 Authority Key Identifier:
                keyid:AC:46:99:10:77:4B:29:80:D6:87:88:7B:D4:18:07:B1:5A:A1:EE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/0/AC469910774B2980D687887BD41807B15AA1EED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC469910774B2980D687887BD41807B15AA1EED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/0/3138312e3137342e3232302e302f32342d3234203d3e20323731353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:a2:62:d9:07:5e:48:9c:6b:b0:35:c5:d2:2e:f2:2d:83:08:
         0a:56:8d:76:da:e9:6b:24:8a:fb:7d:46:ce:7f:16:11:e3:43:
         3f:75:9e:35:be:81:88:07:6d:6e:97:01:c6:89:88:a8:32:92:
         53:c9:f1:97:8f:b8:ce:16:0e:07:46:06:c7:a8:2d:23:d1:95:
         4d:78:06:f6:4f:22:71:f7:5c:c4:a1:0b:c6:e0:94:b0:99:9d:
         9b:6b:fa:04:11:cb:9d:26:b7:87:e4:4c:11:6c:34:c2:b6:74:
         15:ba:bd:4a:d1:3b:2e:0e:70:25:d0:92:4f:06:cc:f9:2c:df:
         0d:cb:b0:7c:7f:5c:23:3a:95:a4:b7:4a:07:c8:98:b2:76:5f:
         2c:db:7f:04:78:5b:6a:f9:fc:ac:99:fd:da:ea:10:64:5e:bd:
         89:ce:e2:1f:9c:fd:24:60:8e:d2:06:b8:ec:c3:c8:74:28:80:
         00:50:04:1b:04:7a:8d:80:03:2d:5a:01:a4:ce:58:3b:cf:3d:
         4b:42:ae:0e:5d:96:94:2b:71:65:7c:15:7b:ea:69:10:f7:10:
         4c:64:81:3e:03:35:9d:b5:2f:1d:08:68:83:be:be:b8:57:ef:
         99:10:24:23:2b:11:1b:96:25:d1:be:de:e9:2e:e4:79:ce:c0:
         9b:db:a3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org