Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/3138312e3137342e3231322e302f32332d3234203d3e20323731353438.roa
File:                     3138312e3137342e3231322e302f32332d3234203d3e20323731353438.roa (raw, json)
Hash identifier:          ZmamBc5nGkFsCF1iKOORMuGD3th4Hm+m3c1kVKpJiXA=
Subject key identifier:   1F:3B:5C:1E:14:FE:95:94:B1:1B:2B:F4:E7:11:34:CE:59:7E:39:88
Certificate issuer:       /CN=838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8
Certificate serial:       3F4493A9831E0C16DAE0C6A8879CD6D6AED905C4
Authority key identifier: 83:8E:8C:7D:F3:3C:0F:10:70:BE:1B:C0:C0:E9:62:93:4C:64:FA:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/3138312e3137342e3231322e302f32332d3234203d3e20323731353438.roa
Signing time:             Sat 21 Jan 2023 12:38:26 +0000
ROA not before:           Sat 21 Jan 2023 12:33:26 +0000
ROA not after:            Sat 20 Jan 2024 12:38:26 +0000
asID:                     271548
IP address blocks:        181.174.212.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:44:93:a9:83:1e:0c:16:da:e0:c6:a8:87:9c:d6:d6:ae:d9:05:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8
        Validity
            Not Before: Jan 21 12:33:26 2023 GMT
            Not After : Jan 20 12:38:26 2024 GMT
        Subject: CN=1F3B5C1E14FE9594B11B2BF4E71134CE597E3988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fe:56:5a:be:92:22:4e:88:bd:b2:f8:cd:36:
                    0f:7c:73:9b:35:28:d8:f1:5c:bb:46:86:98:8c:91:
                    6e:90:4d:36:cc:c4:68:54:16:57:aa:49:48:15:30:
                    88:52:f7:75:1c:70:76:34:ec:d8:8b:c6:74:49:b5:
                    b0:62:7c:17:4a:12:10:1a:33:6b:43:cd:ab:02:87:
                    8f:4c:bd:29:b6:3b:79:23:56:f5:a7:ee:49:0e:57:
                    7e:a8:fd:82:7b:11:06:91:73:05:27:6c:e7:3c:b2:
                    59:df:a2:58:84:0c:fa:6f:1e:a0:26:b4:51:db:58:
                    b0:58:92:63:44:df:13:23:a0:d2:d3:9c:32:58:e9:
                    20:32:e8:ff:69:b4:ae:fc:af:1b:d4:ce:d4:2e:8e:
                    17:e2:73:22:af:2c:64:fc:3b:00:06:cd:2d:d5:9c:
                    2a:7c:e8:8c:9e:0b:e7:4b:82:80:d3:b8:88:13:4f:
                    b8:ee:6b:ac:61:77:35:fa:e3:ab:dd:14:b4:c9:ad:
                    1d:2a:f6:fd:1e:85:07:5f:ea:2c:fe:35:52:f5:8e:
                    84:e2:82:2f:6c:08:9f:70:25:d0:12:4c:81:f3:8d:
                    c0:90:3f:2b:91:50:a8:a2:d1:6b:b1:90:d7:a3:48:
                    70:76:44:32:02:3f:f3:92:a1:b4:3b:ef:4a:50:73:
                    3d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3B:5C:1E:14:FE:95:94:B1:1B:2B:F4:E7:11:34:CE:59:7E:39:88
            X509v3 Authority Key Identifier:
                keyid:83:8E:8C:7D:F3:3C:0F:10:70:BE:1B:C0:C0:E9:62:93:4C:64:FA:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/838E8C7DF33C0F1070BE1BC0C0E962934C64FAF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/3138312e3137342e3231322e302f32332d3234203d3e20323731353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:af:5d:7d:7c:87:ec:45:96:43:17:f0:5e:38:d4:40:27:80:
         34:be:51:3e:45:dc:a7:c9:08:36:08:24:64:c9:65:de:34:e5:
         2c:95:98:f8:12:26:0e:b5:1a:82:3b:87:f1:0a:e8:16:8b:01:
         4a:3e:33:0d:07:46:f9:93:89:b5:cd:84:28:e2:3d:f1:15:20:
         4f:ce:14:43:65:1d:8a:59:a3:b4:73:8a:1e:cb:d5:42:cd:2a:
         72:40:1e:ee:d8:df:c1:cd:29:94:eb:0f:78:0a:40:6f:45:fd:
         d0:f6:a7:e0:cd:5e:10:87:9c:a6:71:28:60:df:34:99:8b:da:
         68:6c:7e:d7:45:28:7a:e2:76:ef:7b:0d:74:d7:96:20:3a:d3:
         19:0a:8f:82:17:30:49:e8:50:4b:37:31:67:4b:44:e1:ff:03:
         7e:d3:78:38:16:cc:67:92:ba:dd:57:a9:b7:5b:31:f9:db:ff:
         3b:71:ac:88:62:9e:8b:30:46:78:dc:b8:52:d4:a0:18:15:b4:
         ea:f5:26:cb:87:1f:21:fd:37:73:69:c0:82:59:f5:da:8c:87:
         70:16:3b:8b:97:b8:0b:2f:71:ee:d9:5c:26:bb:53:b3:0c:e9:
         d9:1f:85:fa:da:27:65:e2:b8:19:d8:75:bd:6e:dd:b3:a0:5f:
         94:b7:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org