Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/3138312e3137342e3231322e302f32322d3234203d3e20323731353438.roa
File:                     3138312e3137342e3231322e302f32322d3234203d3e20323731353438.roa (raw, json)
Hash identifier:          hHvx0gqxAnJqfw1/7kgmdvkYEVQrIIF00rGHNOHDXZw=
Subject key identifier:   F4:86:2C:63:68:A5:61:22:FF:93:76:48:4F:59:D9:F5:15:38:DB:6F
Certificate issuer:       /CN=3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48
Certificate serial:       11B26F2D652F473F33AD35D0ECA3F9A0A5374314
Authority key identifier: 3A:BB:FF:DA:8F:C3:BC:76:94:76:DD:8D:E3:2E:16:12:07:7F:DC:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/3138312e3137342e3231322e302f32322d3234203d3e20323731353438.roa
Signing time:             Tue 20 Feb 2024 16:46:51 +0000
ROA not before:           Tue 20 Feb 2024 16:41:51 +0000
ROA not after:            Tue 18 Feb 2025 16:46:51 +0000
asID:                     271548
IP address blocks:        181.174.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b2:6f:2d:65:2f:47:3f:33:ad:35:d0:ec:a3:f9:a0:a5:37:43:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48
        Validity
            Not Before: Feb 20 16:41:51 2024 GMT
            Not After : Feb 18 16:46:51 2025 GMT
        Subject: CN=F4862C6368A56122FF9376484F59D9F51538DB6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:55:54:e2:93:e4:be:6b:2b:43:66:50:e3:
                    29:a8:04:1b:55:7e:4a:30:d4:b2:33:ff:9a:da:49:
                    a1:4e:c9:3b:af:d9:44:c5:c7:24:5f:a2:7a:c8:9f:
                    25:a1:4e:06:c7:32:2e:3c:f4:9b:c6:d0:46:f0:34:
                    d0:17:14:d0:7e:f2:19:dc:26:db:8c:00:42:a2:e6:
                    09:c8:67:a3:21:79:51:26:26:be:ec:c3:b8:4b:cd:
                    0a:71:77:13:72:99:bd:27:01:d3:b6:66:3a:2b:9e:
                    cb:fa:1c:e2:81:74:8f:74:99:7d:ea:bc:f9:11:f6:
                    13:e1:3e:93:73:6d:24:76:17:af:1f:d7:79:36:55:
                    82:2f:3b:88:86:32:76:cc:3e:06:5b:04:fc:36:aa:
                    3d:31:fa:a0:d7:5d:7b:0b:d0:dd:db:19:bf:61:13:
                    17:f4:2e:9b:09:fc:68:60:4e:43:4a:8a:07:35:9c:
                    17:e9:f6:2e:2d:a3:58:53:46:56:5a:af:0b:97:2c:
                    d8:95:56:92:78:10:7c:76:ff:8b:f5:ad:af:b5:6e:
                    b4:92:0b:0e:e9:65:cf:1c:b4:3f:d7:64:a5:e3:e5:
                    99:a5:57:74:5d:43:32:be:d1:c1:75:65:b2:3d:8e:
                    54:cd:2b:82:98:7b:c1:e8:57:e8:f8:ee:67:69:26:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:86:2C:63:68:A5:61:22:FF:93:76:48:4F:59:D9:F5:15:38:DB:6F
            X509v3 Authority Key Identifier:
                keyid:3A:BB:FF:DA:8F:C3:BC:76:94:76:DD:8D:E3:2E:16:12:07:7F:DC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/3138312e3137342e3231322e302f32322d3234203d3e20323731353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:72:d3:c6:67:65:04:e7:be:dd:77:d7:2a:95:12:26:c4:42:
         8c:b1:dd:a3:d3:96:90:ab:f1:9f:09:9a:be:5a:9b:b0:72:68:
         7d:c1:9a:52:16:af:30:3f:a2:62:9e:09:3c:f3:d9:e7:b0:8c:
         30:8d:ec:04:a5:d0:43:4b:2e:1b:88:5e:06:07:84:7e:cc:33:
         59:cd:ad:bb:90:52:a3:a9:93:c0:4e:7c:80:6a:af:49:46:45:
         2c:9e:4a:c6:80:2a:a2:c5:de:b4:3d:10:33:37:a8:b9:4b:4e:
         26:3c:b7:66:3b:61:02:cd:4e:60:a4:fb:2a:29:99:f3:eb:a4:
         0a:cb:3b:16:fd:86:c2:f4:0d:aa:1b:b6:df:26:9b:7b:93:3b:
         71:48:e0:67:06:d3:a0:4d:17:5f:cc:76:c2:c9:56:ea:7a:8e:
         5b:06:87:9b:da:b1:65:74:14:fc:0e:a7:98:fd:35:d8:af:3d:
         ab:c7:25:37:83:e8:6b:dd:02:90:56:8a:39:32:5c:db:69:e8:
         6d:5e:84:ec:de:b5:35:a6:ba:43:30:7a:ee:2b:9a:67:a1:ce:
         ff:4f:b7:fc:eb:03:14:0f:7c:04:1d:56:8b:79:c2:96:b3:21:
         a1:fb:cf:57:db:c3:e1:1a:f8:b5:c6:f9:1c:e5:df:1b:3b:d2:
         64:7b:96:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org