Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/3138312e3233332e3138382e302f32342d3234203d3e203230343733.roa
File:                     3138312e3233332e3138382e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          wgCTfonoi01fFKRB8oVbBv1mdGpxPsq/4FeVsgvaV2w=
Subject key identifier:   44:CA:5A:87:71:E4:D4:34:89:20:45:00:B2:B7:26:8C:1A:38:B6:82
Certificate issuer:       /CN=BDEDBAF5A2A83155974AEA6482B69592C8F88CC3
Certificate serial:       6A33B4A2ADED4341D44AADA94C9DD86866C3AF74
Authority key identifier: BD:ED:BA:F5:A2:A8:31:55:97:4A:EA:64:82:B6:95:92:C8:F8:8C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/3138312e3233332e3138382e302f32342d3234203d3e203230343733.roa
Signing time:             Sun 16 Apr 2023 15:08:07 +0000
ROA not before:           Sun 16 Apr 2023 15:03:07 +0000
ROA not after:            Sun 14 Apr 2024 15:08:07 +0000
asID:                     20473
IP address blocks:        181.233.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:33:b4:a2:ad:ed:43:41:d4:4a:ad:a9:4c:9d:d8:68:66:c3:af:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEDBAF5A2A83155974AEA6482B69592C8F88CC3
        Validity
            Not Before: Apr 16 15:03:07 2023 GMT
            Not After : Apr 14 15:08:07 2024 GMT
        Subject: CN=44CA5A8771E4D43489204500B2B7268C1A38B682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:16:17:44:ee:af:af:8c:55:9f:c5:7a:88:b7:
                    cd:74:8c:2c:ca:e5:46:dc:77:e7:08:8b:7d:b8:a6:
                    57:2f:7e:63:2b:b7:05:08:5f:d7:7a:fe:10:cb:3b:
                    50:85:99:04:eb:73:41:07:30:81:93:01:71:54:f3:
                    5f:f9:a5:95:e7:9e:82:35:6d:bd:4b:b0:7e:cd:b4:
                    e7:90:e1:ee:83:b2:d4:f0:8d:9b:1a:57:6c:f9:34:
                    6b:b0:05:07:16:30:37:8d:a5:c7:ba:d6:3b:94:94:
                    c2:86:b4:90:cc:6e:82:c6:c8:4c:b3:e3:7d:98:cd:
                    51:7d:9b:1b:68:e5:70:e1:a9:e9:8c:ce:af:a7:27:
                    13:b9:02:72:dd:27:89:66:e7:7c:e9:57:bd:51:12:
                    8d:31:e6:36:48:7f:5d:06:8b:3d:1b:6b:a3:46:9a:
                    30:9e:a9:a8:59:e3:ed:8b:fe:c2:e2:de:3f:16:72:
                    3c:f1:be:0a:22:4b:e2:63:60:55:a1:0b:88:d0:d1:
                    cf:2a:48:44:f8:de:0a:06:2e:4c:d7:11:7b:76:ef:
                    a7:d8:4e:ab:1a:df:6a:10:8d:71:23:90:3d:54:bc:
                    ba:45:7c:b7:9d:f4:44:9f:12:27:a0:12:fa:ed:31:
                    2a:20:5e:c3:a2:e9:ba:39:d9:0d:7d:3f:ac:19:84:
                    5d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CA:5A:87:71:E4:D4:34:89:20:45:00:B2:B7:26:8C:1A:38:B6:82
            X509v3 Authority Key Identifier:
                keyid:BD:ED:BA:F5:A2:A8:31:55:97:4A:EA:64:82:B6:95:92:C8:F8:8C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/3138312e3233332e3138382e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:16:e1:34:3c:fc:53:ab:4e:76:a1:ba:ae:18:2d:03:e9:f0:
         24:89:3a:8a:be:d2:40:ae:78:f2:41:8c:d0:a5:6a:3f:09:5e:
         52:c3:b1:e1:cb:37:ce:ea:4c:10:81:1e:ad:65:0a:2b:82:9e:
         de:ce:6c:8b:bf:b7:81:c6:f2:d9:1c:e2:ae:c8:b9:3a:97:79:
         30:46:99:2d:54:c1:a1:31:4c:51:b9:25:50:7c:0a:04:59:51:
         44:72:76:51:91:75:dd:7e:83:96:1f:3a:57:ae:af:68:ce:10:
         1d:08:46:9a:ab:e4:03:0c:e0:24:b2:ca:83:ba:46:db:9a:60:
         47:cb:a9:83:c9:36:2b:3d:d6:9e:8e:e4:53:6c:9d:b7:13:c8:
         2d:6e:0d:8c:83:a6:52:b2:4d:e3:f1:30:84:5e:8f:12:b8:fe:
         99:8d:be:1f:50:0e:93:a3:2e:f8:11:a1:65:d9:8d:6f:9b:c8:
         de:2b:cf:d1:ea:00:83:44:c6:cb:93:e3:73:b2:80:77:d6:01:
         39:9b:a4:1f:11:a0:76:da:33:17:12:ba:40:aa:ae:81:05:25:
         b4:a1:90:78:78:80:1c:06:55:df:c6:f8:2c:75:93:98:e5:07:
         0a:89:f1:7f:70:68:7c:e5:a9:9d:38:09:b4:4a:7b:12:ef:6c:
         dc:73:a5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org