Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34342e302f32332d3233203d3e20323731343230.roa
File:                     3138312e3233332e34342e302f32332d3233203d3e20323731343230.roa (raw, json)
Hash identifier:          hMA2qXb9/a4fNVH5rka6yP4US5MkcS0RP+9Gk+fGqiM=
Subject key identifier:   04:39:CF:D0:95:DF:A6:09:C5:C4:ED:BD:3A:B0:6A:A0:E8:8B:0D:DE
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       380B01E135042DC99C89CF7037A96C86907BD694
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34342e302f32332d3233203d3e20323731343230.roa
Signing time:             Mon 15 Jan 2024 12:10:09 +0000
ROA not before:           Mon 15 Jan 2024 12:05:09 +0000
ROA not after:            Mon 13 Jan 2025 12:10:09 +0000
asID:                     271420
IP address blocks:        181.233.44.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0b:01:e1:35:04:2d:c9:9c:89:cf:70:37:a9:6c:86:90:7b:d6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Jan 15 12:05:09 2024 GMT
            Not After : Jan 13 12:10:09 2025 GMT
        Subject: CN=0439CFD095DFA609C5C4EDBD3AB06AA0E88B0DDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4b:8d:bd:e8:d3:bc:3a:45:d8:45:ef:51:ac:
                    1f:09:8e:c1:7e:18:2b:76:86:5e:fd:b3:83:1a:e4:
                    84:28:aa:8f:f1:b1:68:f8:e1:93:25:e0:ba:79:76:
                    ea:53:27:7e:de:90:c1:62:0a:82:df:cf:48:db:6f:
                    01:2b:56:c9:82:1f:78:d4:bb:02:49:e6:d0:21:fc:
                    09:6b:e4:93:21:13:1b:ca:36:61:8c:80:26:b3:d3:
                    e3:8f:7c:41:ef:95:34:50:db:64:93:ac:13:e2:aa:
                    86:73:75:89:73:6d:8c:f5:17:2f:1f:d1:15:81:58:
                    58:89:d1:99:20:31:13:b3:f1:df:ff:93:6c:59:43:
                    6a:54:f9:24:e4:f5:3f:f9:91:74:4d:eb:af:02:a1:
                    3c:22:58:9a:a5:08:84:e2:1a:b3:4a:b6:2e:37:f8:
                    ce:ef:65:23:96:74:28:93:4f:57:0f:b1:b3:b5:3f:
                    e0:b3:fe:05:c1:f6:17:74:ec:d0:2f:a5:6d:41:0d:
                    75:a5:b5:76:4a:8d:fd:1e:9b:29:d9:7b:89:f8:4c:
                    12:dd:52:05:7e:ef:a5:60:35:4a:b4:cb:cb:3d:08:
                    55:40:bc:d6:bf:99:e0:1e:a9:9b:00:51:37:3a:19:
                    1c:3b:9e:64:f1:58:5b:fa:3d:ac:94:88:00:30:56:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:39:CF:D0:95:DF:A6:09:C5:C4:ED:BD:3A:B0:6A:A0:E8:8B:0D:DE
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34342e302f32332d3233203d3e20323731343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:fb:53:b1:fb:3e:f5:b9:eb:42:14:c5:b7:8b:8a:c1:28:c6:
         d2:fb:cc:2b:67:0a:57:8c:43:33:36:8c:9f:d0:0c:86:45:8a:
         3a:85:b7:ec:e1:a7:cd:2c:b7:41:2d:aa:01:af:4b:1a:46:d2:
         f3:0f:4e:ac:5c:5a:d5:7c:f3:2a:89:21:0d:ff:1b:0b:a7:bf:
         3f:b1:0a:83:16:f8:c6:0b:f0:45:90:69:13:30:87:c6:96:6e:
         cf:a3:e9:a5:8b:8f:e9:2f:87:a8:86:c3:93:83:2e:95:82:4a:
         be:29:7c:92:dd:11:2a:3a:fb:1b:27:ef:68:32:19:18:e0:da:
         69:a2:61:a1:5a:c5:5b:91:21:e5:ab:aa:52:24:be:a8:62:2d:
         7e:4a:81:fe:c9:c2:33:37:2a:ed:e8:0e:a7:db:ab:1c:cd:e5:
         09:74:e9:70:86:e5:0a:4a:7e:3b:cb:9e:17:d3:4f:1f:e4:be:
         27:c3:6d:17:52:f0:11:bb:9c:f9:a4:9a:de:ba:b4:9e:89:13:
         df:38:1d:55:45:e8:d4:9b:e1:a5:90:b3:d9:04:ff:bf:ef:6e:
         28:a8:46:7c:c7:8f:09:06:4b:a9:42:d6:11:76:3f:5f:dd:44:
         3a:a9:6c:69:a6:9f:c6:ea:4f:b6:ff:bf:95:10:7f:37:db:b3:
         18:ce:cb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org