Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/3138312e3138392e36342e302f32322d3332203d3e20323731333530.roa
File:                     3138312e3138392e36342e302f32322d3332203d3e20323731333530.roa (raw, json)
Hash identifier:          RLq1UvJ7V17mOWxGhotplfGkYILC4x1G/6hUy0spuk4=
Subject key identifier:   93:B6:8D:CC:3E:08:FD:7C:C2:DA:E1:08:46:57:C3:D6:0F:17:64:54
Certificate issuer:       /CN=AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C
Certificate serial:       3573BD2A0362439760F7705BDC06088875DC394D
Authority key identifier: AD:27:BF:71:D3:4E:93:7B:91:B3:AF:FE:7B:A5:95:DA:A2:8D:B3:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/3138312e3138392e36342e302f32322d3332203d3e20323731333530.roa
Signing time:             Tue 16 Jan 2024 12:39:49 +0000
ROA not before:           Tue 16 Jan 2024 12:34:49 +0000
ROA not after:            Tue 14 Jan 2025 12:39:49 +0000
asID:                     271350
IP address blocks:        181.189.64.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:73:bd:2a:03:62:43:97:60:f7:70:5b:dc:06:08:88:75:dc:39:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C
        Validity
            Not Before: Jan 16 12:34:49 2024 GMT
            Not After : Jan 14 12:39:49 2025 GMT
        Subject: CN=93B68DCC3E08FD7CC2DAE1084657C3D60F176454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:a9:89:f4:40:df:f7:44:97:44:50:fa:e5:
                    65:f6:5c:07:8b:34:a7:5d:fa:f3:0a:bf:76:77:5d:
                    72:19:7d:c9:be:88:51:a3:7e:5f:8c:8f:9f:5c:ba:
                    b9:1d:6f:a1:74:10:07:08:21:e0:2f:b6:3d:3c:03:
                    1b:c3:d9:0a:6e:f2:e8:e9:74:f6:ed:aa:d7:b3:e8:
                    ba:68:16:e8:3c:ef:c8:54:a7:e8:2d:b6:c0:1b:c5:
                    16:ad:37:bc:ba:59:97:a7:9f:bc:f5:e4:f4:62:a5:
                    d3:a8:3c:5f:5d:74:e6:25:d9:38:03:d7:0d:1d:56:
                    97:e0:94:66:72:7d:20:23:3d:df:72:ca:d6:64:d0:
                    e2:ee:9c:0e:c8:49:cc:a4:cf:d0:d9:33:8e:69:32:
                    7c:7a:af:ee:67:dc:f7:1c:e4:ca:02:09:86:b0:13:
                    7f:cc:21:f0:6a:f6:68:95:5e:c8:21:2e:d1:ff:41:
                    e0:98:6f:5e:38:64:35:0b:8d:4e:a1:ea:96:f3:3f:
                    ca:7d:ed:e4:5c:af:e6:55:cf:57:03:1c:50:24:fd:
                    56:81:6f:25:b7:6b:30:e1:f6:29:bb:30:13:b1:f0:
                    c0:d4:fa:b5:b9:fb:52:d1:a7:c3:3d:58:0f:8c:af:
                    8a:aa:b8:9d:21:6e:fd:96:c2:50:5d:d8:2b:9f:0d:
                    32:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B6:8D:CC:3E:08:FD:7C:C2:DA:E1:08:46:57:C3:D6:0F:17:64:54
            X509v3 Authority Key Identifier:
                keyid:AD:27:BF:71:D3:4E:93:7B:91:B3:AF:FE:7B:A5:95:DA:A2:8D:B3:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/3138312e3138392e36342e302f32322d3332203d3e20323731333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:03:ee:34:a0:f4:86:a1:79:52:12:5a:a5:2a:6b:cc:c9:24:
         8c:03:e9:54:38:f0:64:4c:70:88:32:63:d9:d8:cb:d5:f8:aa:
         71:6a:d8:f9:37:2b:a0:1f:96:4b:be:cd:bb:56:7d:87:91:c6:
         65:a9:1a:22:1f:44:68:77:8c:9d:53:04:aa:58:1f:ca:86:2f:
         7a:24:bf:9f:37:73:4f:fa:a9:10:00:d6:33:03:ff:4b:16:63:
         c7:6e:23:1e:88:2e:28:7e:23:7f:32:ba:b4:18:df:5f:b6:6c:
         a5:4a:7d:e6:34:90:fd:6e:ab:f6:19:94:19:4b:63:1c:53:98:
         43:c5:c9:5d:ff:3f:ac:7a:91:2b:98:9a:f4:51:64:6d:37:d6:
         da:64:da:2a:f6:13:f1:26:f0:17:bd:2e:55:39:54:b8:1d:4a:
         fd:21:ca:f6:f1:6e:a1:a2:50:e5:94:00:7f:3b:b3:96:32:39:
         52:59:ed:9e:e9:18:3f:dc:7d:d2:83:12:57:90:0f:d1:59:26:
         df:84:17:f4:9f:f2:e0:3e:79:af:de:c8:ab:96:b4:fa:8a:65:
         3a:56:75:25:1c:a7:c1:f0:d3:2b:b8:6d:f5:ee:02:57:00:08:
         8e:d9:ac:a0:96:11:da:11:db:44:8a:64:7f:d3:51:bf:77:93:
         da:81:30:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org