Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31322e302f32322d3232203d3e20323731343638.roa
File:                     3138312e3232342e31322e302f32322d3232203d3e20323731343638.roa (raw, json)
Hash identifier:          WWeaaim4t9S2NBjZ9reEYYexe+IF8RmfV7nj5S4BFmc=
Subject key identifier:   54:0E:CF:F5:42:7A:36:68:12:73:97:04:B6:DC:5C:EE:CC:12:00:37
Certificate issuer:       /CN=3FB949E473014D3A4378DE464207BB64491FC1FB
Certificate serial:       58B3D56704E2190E2EDB9DF9079BED13ED2FBBF4
Authority key identifier: 3F:B9:49:E4:73:01:4D:3A:43:78:DE:46:42:07:BB:64:49:1F:C1:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FB949E473014D3A4378DE464207BB64491FC1FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31322e302f32322d3232203d3e20323731343638.roa
Signing time:             Tue 10 Oct 2023 18:51:31 +0000
ROA not before:           Tue 10 Oct 2023 18:46:31 +0000
ROA not after:            Tue 08 Oct 2024 18:51:31 +0000
asID:                     271468
IP address blocks:        181.224.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b3:d5:67:04:e2:19:0e:2e:db:9d:f9:07:9b:ed:13:ed:2f:bb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FB949E473014D3A4378DE464207BB64491FC1FB
        Validity
            Not Before: Oct 10 18:46:31 2023 GMT
            Not After : Oct  8 18:51:31 2024 GMT
        Subject: CN=540ECFF5427A366812739704B6DC5CEECC120037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:04:6b:e3:be:bd:11:4f:6a:63:2e:ec:a8:
                    71:08:80:28:11:7e:3a:f5:74:8b:df:24:13:95:7d:
                    89:a7:5e:12:fd:ee:0a:e8:9e:fd:ea:ea:79:c4:e9:
                    4b:1d:ab:de:5b:24:6e:e4:a2:63:25:f8:3f:48:0b:
                    fd:06:ad:b5:d1:22:51:30:c4:45:3e:1d:7d:84:3a:
                    dd:45:52:1a:05:7f:b8:b2:f1:96:92:68:a4:db:f6:
                    91:53:7e:80:1d:81:11:e1:ab:d8:f1:86:16:57:cb:
                    90:fb:b1:55:ac:0a:be:8b:c5:37:95:60:9b:8e:4c:
                    87:cc:cb:3e:08:98:48:9d:a6:5e:03:54:35:75:76:
                    67:9a:95:ff:10:7e:f7:d7:b2:ab:9e:69:9e:9b:64:
                    3f:f8:1b:9a:05:6f:6c:bc:42:e0:7f:a5:22:12:9c:
                    87:17:eb:cf:a5:08:c6:db:4e:4a:aa:89:c2:df:c7:
                    39:ba:6d:e3:db:3a:e1:9d:de:d9:d0:94:e1:7e:dc:
                    c6:b6:9e:fc:dd:41:1a:07:1c:c3:8b:41:65:c5:87:
                    b6:8f:77:1d:71:05:7d:4e:fb:14:ce:1a:9c:07:dd:
                    56:f8:51:38:4a:d8:01:49:a4:66:d9:34:43:5d:19:
                    15:2d:43:7b:14:3e:67:de:ea:d8:8e:04:16:98:91:
                    c2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0E:CF:F5:42:7A:36:68:12:73:97:04:B6:DC:5C:EE:CC:12:00:37
            X509v3 Authority Key Identifier:
                keyid:3F:B9:49:E4:73:01:4D:3A:43:78:DE:46:42:07:BB:64:49:1F:C1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3FB949E473014D3A4378DE464207BB64491FC1FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FB949E473014D3A4378DE464207BB64491FC1FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31322e302f32322d3232203d3e20323731343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:76:0f:1c:85:4e:34:90:6e:d2:1e:28:59:5a:34:fd:73:67:
         19:52:31:e3:c7:81:a9:23:36:82:0a:b3:fc:8e:34:bf:b9:18:
         ee:ee:8c:e3:96:e6:f3:23:ca:e8:55:97:c7:43:17:34:4e:d5:
         16:f4:d4:a4:c1:33:41:17:dc:7d:e5:69:3c:f5:58:76:0a:51:
         57:23:6d:d4:99:3b:f1:54:b3:78:ed:9b:2d:70:50:3d:0a:16:
         9d:69:26:c8:9d:f4:ee:28:94:d0:5b:9c:fe:24:5d:cb:f0:39:
         d9:61:82:b9:60:a6:84:06:d2:6b:60:99:d1:0c:7d:aa:c3:1b:
         45:25:a8:52:10:cc:33:6e:c2:16:cc:62:09:36:d3:de:df:a0:
         71:cd:a6:5f:1a:d9:36:3f:b3:9a:51:7b:71:4e:59:2c:a3:c5:
         82:84:08:e9:37:ad:bb:90:a9:9a:d8:bc:74:4a:cc:0d:9c:f3:
         1b:6f:f6:72:d9:8f:9b:77:11:a6:f0:b0:2e:53:88:d1:f5:6c:
         8b:ad:93:22:5f:2f:71:ca:f0:96:56:b0:62:63:52:b8:01:1d:
         99:eb:32:b5:40:a8:94:91:2f:dd:37:9f:5d:88:fb:99:9c:a6:
         fe:40:08:91:76:72:f5:a7:c0:91:2d:5c:85:fd:7a:ac:f1:72:
         68:42:d1:d3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWLPVZwTiGQ4u2535B5vtE+0vu/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZCOTQ5RTQ3MzAxNEQzQTQzNzhERTQ2NDIwN0JCNjQ0
OTFGQzFGQjAeFw0yMzEwMTAxODQ2MzFaFw0yNDEwMDgxODUxMzFaMDMxMTAvBgNV
BAMTKDU0MEVDRkY1NDI3QTM2NjgxMjczOTcwNEI2REM1Q0VFQ0MxMjAwMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wQRr4769EU9qYy7sqHEIgCgR
fjr1dIvfJBOVfYmnXhL97gronv3q6nnE6Usdq95bJG7komMl+D9IC/0GrbXRIlEw
xEU+HX2EOt1FUhoFf7iy8ZaSaKTb9pFTfoAdgRHhq9jxhhZXy5D7sVWsCr6LxTeV
YJuOTIfMyz4ImEidpl4DVDV1dmealf8QfvfXsqueaZ6bZD/4G5oFb2y8QuB/pSIS
nIcX68+lCMbbTkqqicLfxzm6bePbOuGd3tnQlOF+3Ma2nvzdQRoHHMOLQWXFh7aP
dx1xBX1O+xTOGpwH3Vb4UThK2AFJpGbZNENdGRUtQ3sUPmfe6tiOBBaYkcJLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVA7P9UJ6NmgSc5cEttxc7swSADcwHwYDVR0j
BBgwFoAUP7lJ5HMBTTpDeN5GQge7ZEkfwfswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0IzNHVQa3lLbVlRR21jWEpZNGpEUVluZloxcmE3WVc0RVR3NUJzNlp1
UmYvMC8zRkI5NDlFNDczMDE0RDNBNDM3OERFNDY0MjA3QkI2NDQ5MUZDMUZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGQjk0OUU0NzMwMTREM0E0
Mzc4REU0NjQyMDdCQjY0NDkxRkMxRkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NCMzR1UGt5S21ZUUdtY1hKWTRqRFFZbmZaMXJhN1lXNEVUdzVCczZadVJmLzAv
MzEzODMxMmUzMjMyMzQyZTMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK14AwwDQYJKoZIhvcNAQELBQADggEBAEV2DxyF
TjSQbtIeKFlaNP1zZxlSMePHgakjNoIKs/yONL+5GO7ujOOW5vMjyuhVl8dDFzRO
1Rb01KTBM0EX3H3laTz1WHYKUVcjbdSZO/FUs3jtmy1wUD0KFp1pJsid9O4olNBb
nP4kXcvwOdlhgrlgpoQG0mtgmdEMfarDG0UlqFIQzDNuwhbMYgk2097foHHNpl8a
2TY/s5pRe3FOWSyjxYKECOk3rbuQqZrYvHRKzA2c8xtv9nLZj5t3EabwsC5TiNH1
bIutkyJfL3HK8JZWsGJjUrgBHZnrMrVAqJSRL903n12I+5mcpv5ACJF2cvWnwJEt
XIX9eqzxcmhC0dM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org