Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31342e302f32342d3234203d3e20323731343638.roa
File:                     3138312e3232342e31342e302f32342d3234203d3e20323731343638.roa (raw, json)
Hash identifier:          SC1jjsWVtdzika4JsJNFyJ0kAsR3qPSqNgic7tM8qds=
Subject key identifier:   46:53:D9:0C:F3:54:F2:CF:0D:8F:4C:74:0B:2B:B7:11:7D:9A:ED:9F
Certificate issuer:       /CN=3FB949E473014D3A4378DE464207BB64491FC1FB
Certificate serial:       3F0310D6826CB50A537ED12DF9CBDA01E5D7AA69
Authority key identifier: 3F:B9:49:E4:73:01:4D:3A:43:78:DE:46:42:07:BB:64:49:1F:C1:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FB949E473014D3A4378DE464207BB64491FC1FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31342e302f32342d3234203d3e20323731343638.roa
Signing time:             Tue 10 Oct 2023 18:51:49 +0000
ROA not before:           Tue 10 Oct 2023 18:46:49 +0000
ROA not after:            Tue 08 Oct 2024 18:51:49 +0000
asID:                     271468
IP address blocks:        181.224.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:03:10:d6:82:6c:b5:0a:53:7e:d1:2d:f9:cb:da:01:e5:d7:aa:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FB949E473014D3A4378DE464207BB64491FC1FB
        Validity
            Not Before: Oct 10 18:46:49 2023 GMT
            Not After : Oct  8 18:51:49 2024 GMT
        Subject: CN=4653D90CF354F2CF0D8F4C740B2BB7117D9AED9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:af:1a:70:a2:8c:c2:de:21:09:96:8c:e0:
                    34:f2:3e:42:55:20:53:a4:fa:a2:02:f4:bb:31:eb:
                    97:66:b0:c2:ae:f9:c1:4c:e7:17:f0:66:44:88:52:
                    4f:b5:93:f1:69:0c:cd:aa:d2:bd:9a:77:ac:35:1f:
                    98:63:fc:97:87:d2:71:43:46:fa:75:33:35:1d:36:
                    b3:72:5a:d1:14:ff:c0:af:66:42:b4:88:ec:56:a9:
                    71:64:68:9d:50:4c:d4:7b:08:eb:9c:c6:5f:1c:a9:
                    63:d8:f8:07:28:96:3e:b9:2d:11:c3:22:c8:59:a7:
                    2e:d9:7a:a1:3a:1c:12:81:76:96:1c:0b:20:eb:b4:
                    30:4d:34:6e:e0:a6:14:0d:99:ad:d0:be:fb:4d:e9:
                    88:01:90:f4:4d:c0:b4:fa:f8:07:4d:21:19:9b:d7:
                    ce:74:37:95:81:2f:45:32:2d:12:39:1a:75:61:66:
                    45:25:9a:c0:59:6a:f4:37:15:cc:d0:b0:9c:77:53:
                    b3:26:91:73:88:81:99:94:13:27:28:a8:d7:24:4b:
                    b5:00:5c:e4:63:82:e7:11:26:fa:a5:89:ad:d1:c1:
                    fa:98:28:ac:3f:d3:f2:a6:e5:3d:a4:09:d8:41:e6:
                    58:5c:66:4c:b3:c0:ac:3d:93:7a:ee:31:16:4a:96:
                    80:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:53:D9:0C:F3:54:F2:CF:0D:8F:4C:74:0B:2B:B7:11:7D:9A:ED:9F
            X509v3 Authority Key Identifier:
                keyid:3F:B9:49:E4:73:01:4D:3A:43:78:DE:46:42:07:BB:64:49:1F:C1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3FB949E473014D3A4378DE464207BB64491FC1FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FB949E473014D3A4378DE464207BB64491FC1FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31342e302f32342d3234203d3e20323731343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:b6:98:75:1e:8f:da:de:5e:a2:1d:3c:32:16:94:7d:6b:86:
         f2:6e:cf:f1:af:9c:d6:20:f0:3c:e3:fd:53:95:17:44:82:7a:
         d7:9e:3a:e3:f5:f8:3a:1f:43:b1:bc:b3:ca:2e:f7:5f:ef:a1:
         d3:ff:b9:81:8b:6f:39:85:3c:40:76:00:5e:cc:4d:14:58:52:
         d9:26:db:22:25:55:73:be:62:7d:db:a3:71:26:a2:de:01:a4:
         05:87:5a:60:a3:2c:2f:33:67:d0:9d:f1:62:08:95:88:4f:38:
         27:00:30:84:e9:e9:67:76:39:4b:75:2d:6a:79:db:cd:9c:20:
         8a:c7:bf:66:a1:55:19:dc:08:24:cd:dd:fb:3b:f0:06:4f:f2:
         d1:02:32:c3:95:b6:32:70:0f:6d:84:92:ee:59:1e:42:2c:d4:
         10:df:5e:63:e1:ce:3f:4c:59:69:c9:b2:70:c7:3a:43:c7:14:
         e6:1e:99:48:72:43:56:be:0a:eb:b9:38:75:13:5e:a6:38:9a:
         db:ea:dd:b6:8d:3e:ba:41:c6:13:b2:e6:ab:69:1f:b2:a1:94:
         e8:c6:7e:fb:cf:eb:b4:0e:37:79:fe:eb:5c:e2:b6:1a:e7:a3:
         6f:0b:20:7a:aa:77:1d:9f:e5:22:df:97:76:b6:90:b8:5a:bf:
         56:7f:68:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org