Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/0/3138312e3233322e3234382e302f32332d3234203d3e20323731353637.roa
File:                     3138312e3233322e3234382e302f32332d3234203d3e20323731353637.roa (raw, json)
Hash identifier:          HzHEQottuoh9sVVSH/dtb0rYaUh1WOEQ+MEKRu8gEgo=
Subject key identifier:   0D:AA:01:2C:E0:84:CC:F5:8F:BA:05:9F:A2:87:D0:5B:D4:20:AE:2C
Certificate issuer:       /CN=18F088BF8F4B34428C017C7D455486C5F6CEC271
Certificate serial:       3C7110EEC52CF9B35739A0B90C50CDF469E71421
Authority key identifier: 18:F0:88:BF:8F:4B:34:42:8C:01:7C:7D:45:54:86:C5:F6:CE:C2:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18F088BF8F4B34428C017C7D455486C5F6CEC271.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/0/3138312e3233322e3234382e302f32332d3234203d3e20323731353637.roa
Signing time:             Fri 06 Oct 2023 15:00:00 +0000
ROA not before:           Fri 06 Oct 2023 14:55:00 +0000
ROA not after:            Fri 04 Oct 2024 15:00:00 +0000
asID:                     271567
IP address blocks:        181.232.248.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:71:10:ee:c5:2c:f9:b3:57:39:a0:b9:0c:50:cd:f4:69:e7:14:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F088BF8F4B34428C017C7D455486C5F6CEC271
        Validity
            Not Before: Oct  6 14:55:00 2023 GMT
            Not After : Oct  4 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c1:58:a0:51:01:7d:77:7b:77:b9:09:58:f9:
                    3b:6f:75:ba:81:2f:70:27:c9:f0:63:34:66:1c:02:
                    29:a5:8b:91:e9:65:4d:a1:ac:fa:34:b0:94:6f:50:
                    2d:f9:16:e3:1a:92:92:6e:db:66:48:4d:86:de:c6:
                    b1:96:94:0e:57:b7:1c:ca:2f:7f:7c:5f:8b:4c:c7:
                    56:28:3e:69:6b:12:c4:76:50:7c:0a:d6:a5:83:7f:
                    5c:c7:df:b5:e6:17:10:a5:50:33:59:1b:f5:ea:7f:
                    9c:41:14:af:cd:f9:af:d7:7c:cf:41:1c:ca:4b:05:
                    87:ac:fd:72:2c:ef:06:6b:69:11:ac:6a:08:4d:9c:
                    2d:8a:a3:37:70:2e:84:78:81:b7:bd:96:9e:f4:b2:
                    a5:1d:11:7f:88:34:8a:e3:fb:15:4c:07:95:c4:42:
                    06:e5:35:3b:1e:5c:b0:b3:21:69:19:ea:a4:85:c0:
                    9b:c7:d8:b5:60:24:7c:a8:66:ed:9f:da:e9:c0:70:
                    c4:8c:69:f5:87:ff:43:10:f8:28:dc:57:e9:79:ea:
                    f4:ff:e6:5b:27:42:1a:54:c6:74:72:a2:a3:7f:47:
                    6a:cb:27:36:fb:fd:0b:17:9f:a6:f1:cd:1b:e9:6c:
                    81:0e:36:2c:00:9b:14:d7:7c:46:d8:75:6a:39:05:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AA:01:2C:E0:84:CC:F5:8F:BA:05:9F:A2:87:D0:5B:D4:20:AE:2C
            X509v3 Authority Key Identifier:
                keyid:18:F0:88:BF:8F:4B:34:42:8C:01:7C:7D:45:54:86:C5:F6:CE:C2:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/0/18F088BF8F4B34428C017C7D455486C5F6CEC271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18F088BF8F4B34428C017C7D455486C5F6CEC271.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/0/3138312e3233322e3234382e302f32332d3234203d3e20323731353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:68:22:54:ee:ee:ee:22:1b:2b:46:44:d7:a2:e8:2e:cb:6e:
         8e:41:9a:a8:97:5d:12:5d:1a:72:9e:e1:ee:6a:2e:95:a7:3a:
         53:cb:27:f0:03:24:75:4e:fe:a1:21:3a:15:1e:44:db:b3:8c:
         d2:91:b8:8f:fe:71:a9:2c:5b:26:ee:fd:a0:f5:7a:3a:20:f7:
         97:04:e8:2e:86:c2:24:e3:a4:ca:49:dd:8a:89:96:d2:21:ff:
         40:5c:62:15:68:fc:74:12:0b:56:c0:b8:d0:ac:53:54:a7:72:
         c8:90:14:2a:d8:d6:01:5c:8d:28:a8:f4:8a:f7:0c:8a:cb:fa:
         8f:40:68:0c:5e:f1:28:e4:81:6a:39:3d:14:60:14:1b:9c:c3:
         ec:39:d2:b0:2f:06:54:5d:96:28:4d:62:4a:aa:86:71:cc:a8:
         8b:59:96:b7:88:e0:a7:fe:f7:1d:52:7c:1d:27:bc:71:b9:aa:
         84:c6:ad:1a:c4:3e:64:ac:b4:14:a0:74:a3:de:08:62:0b:71:
         a5:19:a9:f5:30:77:52:da:ba:f7:63:fe:15:17:b3:e5:88:39:
         93:ba:48:bd:e7:f5:db:f4:92:c4:f9:ce:ba:df:39:16:de:1f:
         97:ec:c2:28:9a:aa:06:96:fa:f2:3b:ef:b7:f6:65:10:6f:26:
         4c:08:9e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org