Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34352e302f32342d3234203d3e20323731343230.roa
File:                     3138312e3233332e34352e302f32342d3234203d3e20323731343230.roa (raw, json)
Hash identifier:          WXYeboJ7Y0YTbPT6dpUYZ6XQcfsOqibjwGgpGYvIs6U=
Subject key identifier:   B3:BB:D1:F3:25:E2:82:E8:9D:4D:6A:B0:7E:D9:84:71:CC:8B:8B:9D
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       28321BE8EAEBF215D2E2FE18E20A9F86D563AE11
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34352e302f32342d3234203d3e20323731343230.roa
Signing time:             Mon 15 Jan 2024 12:10:09 +0000
ROA not before:           Mon 15 Jan 2024 12:05:09 +0000
ROA not after:            Mon 13 Jan 2025 12:10:09 +0000
asID:                     271420
IP address blocks:        181.233.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:32:1b:e8:ea:eb:f2:15:d2:e2:fe:18:e2:0a:9f:86:d5:63:ae:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Jan 15 12:05:09 2024 GMT
            Not After : Jan 13 12:10:09 2025 GMT
        Subject: CN=B3BBD1F325E282E89D4D6AB07ED98471CC8B8B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:91:e0:03:05:bd:4e:98:73:ed:b5:5d:19:
                    8e:2d:6c:30:3c:83:b6:5b:7a:02:41:89:0b:c8:b8:
                    4a:5a:90:da:d0:3f:24:e5:1e:69:77:a7:96:ed:54:
                    d8:87:c2:fd:9a:67:35:2a:6c:3f:b3:0c:e3:89:f4:
                    ca:44:b9:25:da:22:88:05:c9:ec:a4:7a:76:34:07:
                    8c:7f:0b:4a:5d:5f:49:82:43:28:5e:95:22:c3:15:
                    f5:e0:4a:ea:88:b5:70:49:ae:3a:52:93:f2:a7:c6:
                    7d:c4:93:48:ba:2d:d2:c4:4e:bd:17:ee:b1:40:5c:
                    d8:0c:f2:06:3c:18:24:b7:61:45:4d:f8:e2:74:4d:
                    b5:89:a8:19:b7:c5:f1:f0:49:bc:f4:0e:53:ba:c1:
                    94:45:51:c5:94:67:80:50:82:44:11:37:48:23:2a:
                    12:21:4e:50:56:25:73:83:df:dc:b0:81:37:1d:b1:
                    48:71:7f:b2:fb:5c:9d:7b:0e:94:07:4a:99:6e:4b:
                    83:29:49:e5:b8:53:01:ea:b9:7f:cd:36:0c:07:aa:
                    40:85:8a:22:1c:cb:3c:97:8e:f5:48:66:60:90:5d:
                    df:6f:92:f8:b2:2d:23:d6:dc:08:29:96:df:ef:6d:
                    d4:38:91:aa:ce:25:25:ce:10:42:4e:55:32:de:d5:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BB:D1:F3:25:E2:82:E8:9D:4D:6A:B0:7E:D9:84:71:CC:8B:8B:9D
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34352e302f32342d3234203d3e20323731343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:57:ad:88:63:20:20:19:d3:11:dd:de:85:2b:ed:d6:1e:e4:
         84:c5:c6:f1:8b:54:73:77:02:c9:4b:a0:6d:1b:8f:64:0f:f1:
         a8:58:ab:e1:0e:43:11:a8:4b:0f:87:7a:15:59:1b:15:7b:7d:
         bf:53:49:02:dc:ba:8a:e6:6e:a8:3f:9a:fe:e6:9d:fb:a4:15:
         22:60:38:61:c7:cc:4b:3d:f0:bc:b4:a4:9b:25:ab:92:ea:ba:
         92:c1:e5:10:ef:e8:ff:ab:9b:9a:ac:f7:2f:35:b4:91:48:fd:
         b4:b4:de:bd:ba:aa:15:3e:cd:1c:bf:c6:20:65:d6:d3:5b:2a:
         49:51:20:bf:99:4a:66:7c:e4:52:26:5d:ce:7d:8a:3f:34:bf:
         ef:1c:91:6e:0a:1e:d2:82:d3:9e:fd:9a:6c:a7:15:62:53:a7:
         f5:17:80:5b:a8:b6:6f:5b:1f:79:df:9c:7c:3b:98:b3:d8:6e:
         fb:03:1e:6d:31:b6:d5:a5:da:76:85:e8:86:c6:95:cb:97:25:
         d3:55:2a:5a:f0:12:dd:1f:b8:f5:fd:34:aa:43:6e:cb:a8:24:
         11:25:6e:79:fb:37:06:1b:f1:56:ff:2d:cd:1a:ac:8b:ba:f4:
         7e:03:b3:63:f5:5c:7e:b0:fe:aa:c2:bc:15:fd:7e:37:a0:80:
         97:20:94:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org