Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31322e302f32332d3233203d3e20323731343638.roa
File:                     3138312e3232342e31322e302f32332d3233203d3e20323731343638.roa (raw, json)
Hash identifier:          OI8OYkG+2BgSlbK538ATzf+DuIpYdJSfpuy+WZTEUaw=
Subject key identifier:   3F:1E:F2:07:A0:DC:86:13:84:CC:6F:23:CF:C2:12:7F:CC:53:19:AB
Certificate issuer:       /CN=3FB949E473014D3A4378DE464207BB64491FC1FB
Certificate serial:       36F66CBE0C2D7769C128D918ADE457F1A005AB20
Authority key identifier: 3F:B9:49:E4:73:01:4D:3A:43:78:DE:46:42:07:BB:64:49:1F:C1:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FB949E473014D3A4378DE464207BB64491FC1FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31322e302f32332d3233203d3e20323731343638.roa
Signing time:             Tue 10 Oct 2023 18:51:34 +0000
ROA not before:           Tue 10 Oct 2023 18:46:34 +0000
ROA not after:            Tue 08 Oct 2024 18:51:34 +0000
asID:                     271468
IP address blocks:        181.224.12.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f6:6c:be:0c:2d:77:69:c1:28:d9:18:ad:e4:57:f1:a0:05:ab:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FB949E473014D3A4378DE464207BB64491FC1FB
        Validity
            Not Before: Oct 10 18:46:34 2023 GMT
            Not After : Oct  8 18:51:34 2024 GMT
        Subject: CN=3F1EF207A0DC861384CC6F23CFC2127FCC5319AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:48:84:a1:ce:1a:8d:8a:fb:49:d2:59:2a:ce:
                    cb:65:7d:df:90:9f:8f:99:d3:15:20:6a:b3:a4:0f:
                    fa:c3:f9:8b:2c:0c:5d:6a:f1:50:60:27:bc:6f:44:
                    16:a3:bb:61:fb:52:7d:e0:6a:d3:9f:b6:0f:49:63:
                    25:87:5f:84:7c:6f:fa:15:1f:61:28:b0:87:68:b9:
                    00:7f:f4:f7:20:5f:d2:58:21:b1:7c:3d:7c:19:89:
                    1c:b4:c5:43:dd:8e:e1:f3:e8:45:a1:af:a7:fd:a0:
                    a7:8a:1c:39:01:b7:ba:48:8d:0e:8c:b0:b3:9f:56:
                    b1:6e:9e:29:06:a0:d2:0c:9e:4f:af:95:cd:37:d6:
                    05:fc:9d:b8:a8:2e:1c:23:a4:5e:0e:3a:ca:42:bb:
                    b8:71:13:02:23:d4:bb:ca:25:11:40:8b:b6:ec:05:
                    c1:83:02:7b:4b:72:3d:ab:fd:af:93:ff:9f:d0:0a:
                    1f:5b:56:e0:d0:cb:ba:4f:ec:18:a4:92:94:e0:c0:
                    d0:68:ba:08:90:83:47:87:f8:2d:56:13:ed:ad:71:
                    8e:3b:a0:0f:6b:56:17:a0:a8:08:f4:00:f7:4e:28:
                    5b:2c:e1:ca:56:4d:1f:ad:b6:d4:79:96:04:d9:ea:
                    5f:18:4c:27:19:49:e8:6b:a4:b1:42:d0:21:99:5c:
                    db:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1E:F2:07:A0:DC:86:13:84:CC:6F:23:CF:C2:12:7F:CC:53:19:AB
            X509v3 Authority Key Identifier:
                keyid:3F:B9:49:E4:73:01:4D:3A:43:78:DE:46:42:07:BB:64:49:1F:C1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3FB949E473014D3A4378DE464207BB64491FC1FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FB949E473014D3A4378DE464207BB64491FC1FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31322e302f32332d3233203d3e20323731343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:44:d6:ef:c5:51:b2:15:ea:65:ec:17:23:72:b3:e4:01:4a:
         63:ba:c4:1d:3a:be:03:fc:c6:22:3f:28:6c:0e:79:7c:8e:86:
         3a:84:82:a5:5a:4f:66:ed:52:a3:19:37:fb:08:b8:d0:34:c3:
         5e:58:31:07:e2:d8:d0:73:72:ea:f7:93:c7:d5:6c:99:08:2e:
         d5:54:65:df:ee:00:aa:b6:aa:2b:89:d9:ef:6c:37:5b:5a:43:
         9e:e7:69:45:54:1a:32:ae:2e:ab:41:3d:6f:c3:b9:41:1f:3e:
         e7:07:82:bd:f6:2d:54:88:db:bc:e8:63:e6:8b:a2:7c:16:49:
         e1:a0:a4:6e:27:02:ff:fa:d6:8e:90:e7:14:34:7d:5d:c1:71:
         cd:5f:a1:f1:95:e3:02:1f:0f:04:a3:fc:5e:b2:a4:fe:1d:ad:
         dd:14:68:2c:8d:5f:03:d7:d7:ef:b8:3b:a9:62:cb:30:df:9e:
         29:2a:e3:e7:d0:c6:80:81:67:bf:cd:97:a3:04:2b:56:4d:89:
         45:2d:3d:fe:23:b2:d2:d0:c3:ce:4c:10:51:09:1a:c2:60:c2:
         ff:56:31:26:dc:42:bc:3e:6f:dd:5e:18:6d:0d:18:ec:bd:86:
         d0:d2:76:79:4a:4a:1f:57:9f:a2:6c:4a:65:d7:41:7f:1c:ec:
         53:81:8a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org