Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34342e302f32322d3232203d3e20323731343230.roa
File:                     3138312e3233332e34342e302f32322d3232203d3e20323731343230.roa (raw, json)
Hash identifier:          mGqTqMOxTye2ZioTl8QsDMYgKrqrZ/NtCj2406SVZys=
Subject key identifier:   AA:8A:5C:B7:40:13:47:85:2D:15:AB:DC:84:2B:D9:D4:1D:9B:7A:6D
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       6BFD73335E07D9ED125603FD0F4A5FE2E5E7BC63
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34342e302f32322d3232203d3e20323731343230.roa
Signing time:             Mon 15 Jan 2024 12:10:10 +0000
ROA not before:           Mon 15 Jan 2024 12:05:10 +0000
ROA not after:            Mon 13 Jan 2025 12:10:10 +0000
asID:                     271420
IP address blocks:        181.233.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fd:73:33:5e:07:d9:ed:12:56:03:fd:0f:4a:5f:e2:e5:e7:bc:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Jan 15 12:05:10 2024 GMT
            Not After : Jan 13 12:10:10 2025 GMT
        Subject: CN=AA8A5CB7401347852D15ABDC842BD9D41D9B7A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e0:a3:76:d4:79:95:a2:2e:18:ac:fd:ce:25:
                    29:de:62:3b:39:5d:a6:82:c6:00:6a:3b:5a:01:84:
                    db:6f:e0:f0:60:d8:1c:27:be:b0:cf:8a:80:51:33:
                    84:c6:72:cc:f8:01:03:37:83:f7:db:cd:e4:97:09:
                    7f:f6:ee:91:b5:22:64:5f:4b:4d:08:a4:c9:e4:ff:
                    31:05:e8:9b:d4:ce:ce:03:31:e5:9d:30:5c:f0:01:
                    8d:f9:98:68:bb:37:44:03:d5:30:ae:e3:ca:26:c2:
                    d1:10:3a:61:0b:24:e2:dc:c6:f7:89:a5:39:b2:f0:
                    92:29:49:f5:de:4d:7a:c7:34:bf:f9:e1:77:ea:5e:
                    be:65:8c:85:46:7e:63:db:22:7d:98:e1:6d:87:90:
                    a3:a6:ee:3c:e9:f0:b7:52:c1:d0:dc:ac:9d:cb:df:
                    2b:67:9e:8f:c4:e7:ff:fd:9c:32:9d:fc:a7:08:ae:
                    e3:1e:3f:0c:a4:e6:09:52:90:02:23:b5:0c:14:ec:
                    d5:10:6d:0a:40:80:56:b6:cc:de:ac:bf:36:dd:88:
                    a0:80:01:e4:98:71:61:a1:a9:29:77:d2:d2:7d:3b:
                    45:b7:5f:a9:f7:25:32:a9:2f:6c:80:1b:3f:a4:3f:
                    8b:a9:26:ad:d9:8e:84:ce:a2:d1:54:f9:ea:ea:2f:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8A:5C:B7:40:13:47:85:2D:15:AB:DC:84:2B:D9:D4:1D:9B:7A:6D
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34342e302f32322d3232203d3e20323731343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:9c:4c:e3:7b:c5:e5:ae:14:6f:b2:15:d7:0b:39:52:75:ae:
         25:8a:5b:b1:0c:39:bf:7f:bb:fd:33:1c:00:fe:13:c5:f1:69:
         2c:52:b8:80:6e:48:dc:bc:91:97:e8:aa:2b:1f:f2:a4:e2:74:
         17:fd:dc:1b:db:4c:78:1e:c3:c0:0b:2d:ff:e5:3f:f1:55:f0:
         21:17:d1:c9:59:b7:67:b0:1b:c6:5a:46:1e:01:df:7a:65:18:
         c2:df:04:19:56:d8:9a:00:d4:98:b8:cc:99:3a:8d:52:28:43:
         d5:d9:10:93:91:2e:58:38:c9:c3:b9:b8:b7:51:66:83:b4:8d:
         04:0f:46:47:07:c9:9f:3c:e8:e4:ad:b8:5f:8d:9f:5a:04:c4:
         21:2f:3f:26:2d:f4:82:3d:2c:5c:43:24:e6:b0:f8:f4:80:9c:
         1d:a4:06:56:d9:85:b1:38:ae:cb:57:dd:25:60:d7:89:da:e0:
         bd:01:c1:55:b4:9b:06:f4:d1:80:76:2c:d3:44:d1:f5:18:b9:
         88:f5:52:8b:ac:13:19:c4:ab:54:bc:b5:1a:e3:97:c8:01:65:
         a4:b1:cd:e7:a4:f7:aa:12:7e:40:71:22:02:75:32:dd:a2:85:
         9f:7b:11:e5:40:aa:ff:4d:46:8c:46:8f:49:d6:d1:4e:7a:5d:
         f5:70:97:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org