Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/3138312e3233332e3139312e302f32342d3234203d3e20323731353537.roa
File:                     3138312e3233332e3139312e302f32342d3234203d3e20323731353537.roa (raw, json)
Hash identifier:          smbGzg9Tb1gRPrrCO31sHPZwmgLO+AltMBjT9JZ1pZM=
Subject key identifier:   F7:B3:33:28:5B:A0:63:1E:DF:99:79:F1:25:DA:8F:88:25:15:A9:DC
Certificate issuer:       /CN=BDEDBAF5A2A83155974AEA6482B69592C8F88CC3
Certificate serial:       5F51B025FE7B91280E0174FC07AB593860D0B6B7
Authority key identifier: BD:ED:BA:F5:A2:A8:31:55:97:4A:EA:64:82:B6:95:92:C8:F8:8C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/3138312e3233332e3139312e302f32342d3234203d3e20323731353537.roa
Signing time:             Sun 16 Apr 2023 15:08:18 +0000
ROA not before:           Sun 16 Apr 2023 15:03:18 +0000
ROA not after:            Sun 14 Apr 2024 15:08:18 +0000
asID:                     271557
IP address blocks:        181.233.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:51:b0:25:fe:7b:91:28:0e:01:74:fc:07:ab:59:38:60:d0:b6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEDBAF5A2A83155974AEA6482B69592C8F88CC3
        Validity
            Not Before: Apr 16 15:03:18 2023 GMT
            Not After : Apr 14 15:08:18 2024 GMT
        Subject: CN=F7B333285BA0631EDF9979F125DA8F882515A9DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cc:16:57:18:a8:d1:f6:9a:5b:a4:55:ec:cf:
                    4a:ec:19:4d:99:a7:a0:21:32:52:95:bd:c4:44:8b:
                    0c:19:87:9d:39:f0:2e:a2:da:9a:ba:93:b2:2e:3f:
                    58:15:76:f0:04:2d:76:0f:1b:72:37:b3:86:fc:cc:
                    25:86:19:e4:c6:6a:44:f8:04:2c:26:bf:67:f3:10:
                    58:eb:c0:6f:81:81:3b:a2:cb:ea:6e:4f:2e:a8:f1:
                    de:09:91:45:3f:b3:c4:f6:a5:ae:3e:be:c7:9c:b4:
                    58:2e:f8:50:34:69:0a:72:59:48:af:4a:e4:8a:59:
                    02:bd:30:0d:2e:18:69:11:f5:4b:d2:cf:0d:82:92:
                    8e:30:ca:de:44:22:f3:af:03:03:b0:af:89:49:04:
                    42:83:9d:89:35:d1:c2:1b:3c:bc:4d:99:ed:5f:2e:
                    4e:09:83:83:e2:c9:07:6c:34:a9:4d:33:27:aa:4f:
                    6a:6a:f9:77:2c:f5:4f:09:df:77:51:66:31:54:99:
                    11:b2:f3:1a:da:69:d1:5f:09:c7:ef:34:f2:b5:6a:
                    5b:72:a7:8a:b8:a8:ba:6f:aa:fb:6a:45:f1:5e:3a:
                    4e:c2:27:66:7c:ae:40:3a:b0:7f:8d:87:a8:de:72:
                    c8:31:d4:a8:20:f7:35:ad:8f:2e:48:a7:2e:5a:7c:
                    dd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B3:33:28:5B:A0:63:1E:DF:99:79:F1:25:DA:8F:88:25:15:A9:DC
            X509v3 Authority Key Identifier:
                keyid:BD:ED:BA:F5:A2:A8:31:55:97:4A:EA:64:82:B6:95:92:C8:F8:8C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/3138312e3233332e3139312e302f32342d3234203d3e20323731353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:c8:f9:e4:35:4f:ec:c9:a3:73:97:ba:a6:a7:6d:15:52:d6:
         02:15:85:a9:e8:82:e0:7b:63:93:a2:0c:6c:09:c0:dd:2c:40:
         f1:aa:36:a0:a2:2c:09:92:f3:d9:20:57:fd:89:6d:46:47:1a:
         88:35:77:22:b0:a8:0e:af:dc:a8:e8:32:b8:99:ec:51:b7:b2:
         32:c3:3d:2c:07:01:2a:4c:1e:22:c5:c1:08:7d:b7:20:02:24:
         88:e1:38:44:b7:ec:00:9c:42:7e:bf:2d:25:31:c3:0e:07:ee:
         50:18:4b:22:dd:67:31:d8:a3:53:dc:38:f6:08:35:73:df:19:
         91:ad:0f:e0:d9:eb:cb:6a:e1:5f:a1:e3:48:b4:07:0b:4c:f0:
         70:7c:ee:7c:7c:c0:76:ab:ea:71:9a:74:37:20:75:67:b9:92:
         a2:d3:9f:ec:71:8b:ae:7e:44:d6:ab:d7:04:96:3c:10:e7:a3:
         74:8e:9a:f5:35:71:1d:cb:c1:8c:0a:73:60:2d:1c:92:cf:ad:
         1f:94:7e:50:02:2d:e6:26:51:4c:1b:5c:8b:d5:59:f7:6f:23:
         a3:e2:07:b9:82:1e:2c:15:24:0b:95:31:8f:a1:d8:03:54:d2:
         88:45:67:cc:2e:be:b8:a9:62:ef:47:14:5e:b4:71:b0:cc:09:
         2e:b4:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org