Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa
File:                     3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa (raw, json)
Hash identifier:          UN+khfJl56PvEOSB8ZszJBZvMRd0MTz0E+ucja3pi3Y=
Subject key identifier:   36:B2:B1:40:D1:06:C8:DA:35:4F:8C:3A:82:05:40:76:59:E2:8C:57
Certificate issuer:       /CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
Certificate serial:       24E8DA5703DDD20A9ACCB83164B4B8DBC7D2884C
Authority key identifier: 81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa
Signing time:             Thu 29 Feb 2024 14:48:37 +0000
ROA not before:           Thu 29 Feb 2024 14:43:37 +0000
ROA not after:            Thu 27 Feb 2025 14:48:37 +0000
asID:                     262755
IP address blocks:        170.81.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e8:da:57:03:dd:d2:0a:9a:cc:b8:31:64:b4:b8:db:c7:d2:88:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
        Validity
            Not Before: Feb 29 14:43:37 2024 GMT
            Not After : Feb 27 14:48:37 2025 GMT
        Subject: CN=36B2B140D106C8DA354F8C3A8205407659E28C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:21:0c:68:6d:1c:cf:91:61:35:30:d5:f9:
                    47:36:88:09:e8:cd:bb:4d:b7:37:3e:6d:7e:7b:30:
                    31:02:8c:64:13:b6:1a:0a:29:72:3a:1a:9e:b5:40:
                    60:2a:7b:1c:4a:1b:e9:16:99:7a:72:66:a7:dc:76:
                    f5:5d:b5:98:ed:a1:9e:98:47:69:47:47:2a:ad:52:
                    0e:11:13:81:79:6d:42:0d:62:8c:9f:de:38:e8:ac:
                    5c:aa:88:c4:4e:77:35:8b:44:ec:d8:86:85:12:91:
                    af:d1:58:1c:07:7c:86:e5:62:71:ba:00:00:a9:95:
                    9c:05:76:29:7b:bb:90:a7:f3:4f:d6:9c:33:8d:0c:
                    e8:f8:47:2d:de:9c:b6:59:41:ce:fb:e6:b5:0a:88:
                    c4:67:dc:01:1c:47:5b:d2:be:04:cb:48:49:8c:6a:
                    ae:11:0e:50:9f:f4:71:b3:37:2a:04:41:a9:a2:9e:
                    b7:e7:80:cb:16:09:b1:a1:40:9e:c1:17:8e:51:05:
                    b7:0a:f8:e6:3e:d9:f8:94:62:6e:79:ca:f2:41:59:
                    2c:ea:6c:ca:83:39:e1:6f:1d:b0:a5:ba:70:1d:69:
                    73:22:2a:3a:98:8b:df:50:e3:3b:21:9a:a3:09:f3:
                    40:4c:ce:cb:ba:65:43:97:cf:da:09:27:f2:77:ac:
                    e3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B2:B1:40:D1:06:C8:DA:35:4F:8C:3A:82:05:40:76:59:E2:8C:57
            X509v3 Authority Key Identifier:
                keyid:81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:b3:e8:b5:71:b2:91:3e:1b:92:e7:1c:09:7a:e2:90:55:2b:
         88:70:64:e4:13:e7:c7:c2:b8:d0:66:89:cd:a7:6b:90:a2:9a:
         98:67:8c:f5:16:86:30:61:ca:6e:21:ca:df:a4:6f:f3:3c:d3:
         ed:d6:3e:87:44:cd:57:7e:f0:08:0f:02:07:f1:df:09:9d:e9:
         a8:b9:2c:31:b9:a7:b8:0e:81:12:80:67:d7:09:6c:41:f3:e9:
         87:22:3f:4b:a1:49:60:82:2d:70:4c:7b:13:d1:65:da:a6:f3:
         d2:a6:a3:43:7b:74:fe:3e:dd:28:6a:af:fc:d2:3d:09:4d:1e:
         ff:e7:8f:0a:f4:62:e9:61:55:ea:27:a2:ba:95:32:66:76:fb:
         a0:95:7c:36:11:45:f2:24:ef:a1:e9:d9:cf:12:78:9c:6b:60:
         d9:de:02:6b:78:97:c2:60:fc:5a:ea:db:3d:4b:81:90:ee:60:
         4e:c4:68:68:9f:54:6f:ba:e8:05:fd:c9:80:71:e0:f7:68:ab:
         cc:0b:0e:3e:85:dd:4c:b4:67:18:82:64:75:c4:d9:62:24:72:
         22:bc:29:3e:6b:db:27:ae:dc:b3:e9:09:1a:84:4e:a2:3f:45:
         fa:8e:2e:2f:c6:f4:bf:81:01:e9:a7:e6:d3:e9:95:5f:71:ad:
         49:dd:b9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org