Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBqKokTeoUqmdtJvK1kXBjqwexcgPxBhy9PzsdQjT3QL/0/3138312e3233322e3230342e302f32342d3234203d3e20323731343933.roa
File:                     3138312e3233322e3230342e302f32342d3234203d3e20323731343933.roa (raw, json)
Hash identifier:          UNaiuJjb2v71/zELzABo/1eYHwXGFZYczdcOtaAttc0=
Subject key identifier:   1D:50:2B:E1:C4:B9:76:06:75:28:BA:44:D2:AA:9E:7A:80:9A:A5:CE
Certificate issuer:       /CN=402AB61C43024061513081DD235763F7C80713FA
Certificate serial:       33AD943E00717B2A8DC5DA666F916FAADFD5B5DE
Authority key identifier: 40:2A:B6:1C:43:02:40:61:51:30:81:DD:23:57:63:F7:C8:07:13:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/402AB61C43024061513081DD235763F7C80713FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBqKokTeoUqmdtJvK1kXBjqwexcgPxBhy9PzsdQjT3QL/0/3138312e3233322e3230342e302f32342d3234203d3e20323731343933.roa
Signing time:             Mon 01 Aug 2022 22:31:04 +0000
ROA not before:           Mon 01 Aug 2022 22:26:04 +0000
ROA not after:            Mon 31 Jul 2023 22:31:04 +0000
asID:                     271493
IP address blocks:        181.232.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ad:94:3e:00:71:7b:2a:8d:c5:da:66:6f:91:6f:aa:df:d5:b5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402AB61C43024061513081DD235763F7C80713FA
        Validity
            Not Before: Aug  1 22:26:04 2022 GMT
            Not After : Jul 31 22:31:04 2023 GMT
        Subject: CN=1D502BE1C4B976067528BA44D2AA9E7A809AA5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:59:9b:58:e1:0b:d6:75:02:95:bf:2b:a7:b6:
                    d8:06:8f:68:63:a7:98:1e:5e:10:10:8b:c8:70:c2:
                    e7:d6:cf:f8:e7:e1:ec:6b:04:50:92:eb:5b:9b:04:
                    44:08:b4:c9:35:63:f5:95:30:97:a4:06:84:de:be:
                    7c:4b:32:ae:0d:4c:f0:31:46:e5:d5:46:2b:57:f9:
                    59:a2:3a:ae:1b:9e:e5:c9:d2:28:cc:b7:d0:2b:fe:
                    11:07:dc:4c:f9:c1:14:96:e7:dc:d9:62:f8:3d:dd:
                    a8:1d:be:c8:7d:88:65:b2:f7:a3:7c:19:86:20:14:
                    f0:3e:2c:30:e3:af:c8:3b:8e:39:0d:ad:37:a9:ed:
                    44:6a:56:b6:fe:a4:4f:c3:73:6b:d6:84:f8:86:9a:
                    e6:92:48:b2:85:e7:c1:91:c7:20:d7:cb:44:05:9f:
                    bc:5c:d1:ab:08:7c:eb:91:da:14:fc:b5:65:c0:22:
                    74:7f:52:01:01:26:26:f1:63:9e:87:b8:98:13:28:
                    48:c5:51:cc:10:91:88:fb:17:22:b8:ae:4d:78:2a:
                    8c:d3:ec:ab:d9:ee:6a:a3:32:54:4f:0e:b7:04:f0:
                    91:ff:07:02:6d:23:c7:24:4b:c8:df:1f:2c:6b:6a:
                    c4:e7:93:86:5b:b9:1d:06:ef:2d:17:c5:aa:26:fb:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:50:2B:E1:C4:B9:76:06:75:28:BA:44:D2:AA:9E:7A:80:9A:A5:CE
            X509v3 Authority Key Identifier:
                keyid:40:2A:B6:1C:43:02:40:61:51:30:81:DD:23:57:63:F7:C8:07:13:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBqKokTeoUqmdtJvK1kXBjqwexcgPxBhy9PzsdQjT3QL/0/402AB61C43024061513081DD235763F7C80713FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/402AB61C43024061513081DD235763F7C80713FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBqKokTeoUqmdtJvK1kXBjqwexcgPxBhy9PzsdQjT3QL/0/3138312e3233322e3230342e302f32342d3234203d3e20323731343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:72:7e:3d:36:30:fc:59:b7:7b:de:fa:59:a5:d2:60:f9:64:
         e1:a5:7f:33:44:af:f1:8e:71:f5:76:f8:14:c4:36:43:a9:5a:
         31:69:16:ab:e8:90:c6:3c:2c:8a:eb:d0:92:8a:ec:47:84:fd:
         52:e4:bc:e1:32:35:ec:5b:f7:b7:59:38:be:1b:10:76:96:70:
         77:1f:76:3c:22:6a:8e:d0:c6:65:53:09:ef:d7:ae:d2:23:59:
         41:99:dd:33:ec:49:69:1d:02:c5:78:ca:52:d5:18:b9:72:4b:
         42:01:04:16:9c:8b:28:f1:a1:91:62:61:9d:62:40:6d:6d:98:
         1b:e5:7b:ff:50:3e:d3:75:17:25:e8:36:54:68:ef:0d:7a:3c:
         3a:22:90:7a:64:34:6f:76:bb:ba:a1:b7:09:48:ca:e1:50:51:
         ab:50:3e:a8:b5:eb:6d:e3:71:d7:f2:94:34:f0:30:b0:81:6a:
         a5:fe:11:a3:27:89:34:2c:7c:d9:58:53:c4:95:1f:d1:16:68:
         e9:61:0c:1b:e9:e6:e5:96:30:c3:91:34:bf:9d:c0:c3:69:6a:
         f1:1a:61:2d:0b:49:a9:64:97:85:9c:0f:89:f5:94:87:19:14:
         b3:6c:bf:ea:f7:aa:04:33:a9:7b:ab:35:55:94:95:bf:ab:11:
         65:a5:62:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org