Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/3138312e3139312e33322e302f32322d3234203d3e20323635393836.roa
File:                     3138312e3139312e33322e302f32322d3234203d3e20323635393836.roa (raw, json)
Hash identifier:          iCqi7CQenyEADcbFsPvvLatA+AT9X61DnBRpRkIU/wI=
Subject key identifier:   D9:98:6F:5D:D8:EC:57:8F:37:9B:4C:82:1E:A3:46:11:6C:96:55:14
Certificate issuer:       /CN=C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9
Certificate serial:       1C4B7EFD62E4410ABE169F323CEACC4A7156AEAD
Authority key identifier: C2:F9:AB:D6:D8:F3:9D:CF:E5:96:9B:42:8D:EA:36:15:CA:D4:E5:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/3138312e3139312e33322e302f32322d3234203d3e20323635393836.roa
Signing time:             Mon 18 Dec 2023 20:08:19 +0000
ROA not before:           Mon 18 Dec 2023 20:03:19 +0000
ROA not after:            Mon 16 Dec 2024 20:08:19 +0000
asID:                     265986
IP address blocks:        181.191.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4b:7e:fd:62:e4:41:0a:be:16:9f:32:3c:ea:cc:4a:71:56:ae:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9
        Validity
            Not Before: Dec 18 20:03:19 2023 GMT
            Not After : Dec 16 20:08:19 2024 GMT
        Subject: CN=D9986F5DD8EC578F379B4C821EA346116C965514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:1c:f5:96:d4:19:e5:ca:5b:8f:fa:11:a7:
                    2f:e3:f9:7c:59:21:ef:ed:5b:68:db:5b:d2:f3:ce:
                    23:f8:6c:d7:62:1e:6f:cf:8e:32:03:04:69:c1:b7:
                    2f:35:54:7f:25:92:f8:7f:b7:c5:46:85:67:4e:c6:
                    77:b6:74:d0:03:8c:a0:18:80:39:3c:80:e5:a1:26:
                    4c:14:66:d4:f5:a8:4b:87:67:2e:35:f4:bf:e6:7a:
                    83:ea:66:4b:c8:a8:e8:3a:e5:07:c9:a3:8f:98:bb:
                    29:66:2c:77:cf:c6:53:d5:17:7c:5c:03:c5:44:bf:
                    ed:48:b7:a9:9c:71:0e:63:54:0f:68:ad:3a:4b:a1:
                    f7:40:43:43:8b:b7:84:38:21:1c:f4:69:56:11:e9:
                    84:9b:4b:76:34:90:b4:15:00:46:2b:71:a1:23:d2:
                    fc:e0:ca:ab:de:f7:9f:a4:87:d7:26:98:ce:1c:84:
                    10:63:2a:45:1d:cc:f3:a4:4a:1b:bb:03:a0:3a:0e:
                    de:3e:89:cb:c2:60:96:3b:78:d5:5e:9e:63:a3:6b:
                    46:81:7d:0a:bd:44:f5:cd:8a:ea:63:e0:47:ba:db:
                    97:26:1d:d2:46:75:14:e6:7e:2e:e4:84:c1:22:3c:
                    c0:49:a0:1a:12:a5:7d:a6:b4:b6:b5:94:c7:a0:8c:
                    4e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:98:6F:5D:D8:EC:57:8F:37:9B:4C:82:1E:A3:46:11:6C:96:55:14
            X509v3 Authority Key Identifier:
                keyid:C2:F9:AB:D6:D8:F3:9D:CF:E5:96:9B:42:8D:EA:36:15:CA:D4:E5:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/3138312e3139312e33322e302f32322d3234203d3e20323635393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:3f:1e:6a:28:4c:d2:15:94:fb:23:b2:b3:2c:98:46:d0:b4:
         e5:99:63:5b:32:9a:91:f6:c5:17:a2:bb:d3:f8:8c:4f:2b:0b:
         ca:5e:4e:4f:82:1c:b0:a3:9d:b3:56:b6:e0:07:f5:80:8a:d2:
         b2:7f:15:c2:84:50:5f:70:d9:b5:d2:b9:01:2f:8a:5c:6a:54:
         b2:08:05:28:97:a2:ce:b2:0c:97:e2:b8:5b:d9:97:fb:c5:16:
         29:54:09:9b:10:92:b2:62:55:0d:00:4d:99:15:be:73:40:9f:
         e4:7c:19:6f:ba:50:c8:f1:ff:31:07:a0:88:15:a2:eb:64:74:
         d8:27:6c:13:03:85:ff:5e:66:da:93:ca:3b:63:95:b9:4f:8e:
         2d:96:06:d1:33:2d:72:91:ad:b3:4d:8f:8f:2a:95:d1:2e:b0:
         ab:fb:7c:7c:a7:47:1e:37:ba:75:9c:b8:fc:53:11:d2:e4:42:
         75:26:38:c5:08:0e:34:a1:94:35:7d:ba:42:0b:85:1a:40:4d:
         01:f5:fe:db:21:66:c7:a3:27:57:85:ff:ca:b0:a0:10:5a:8a:
         71:be:66:fe:f5:af:ad:a2:77:67:dd:62:6d:00:92:28:34:79:
         a1:d1:85:a1:98:68:ad:f0:66:52:19:14:ad:95:fe:e3:c7:40:
         70:f0:11:1c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHEt+/WLkQQq+Fp8yPOrMSnFWrq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJGOUFCRDZEOEYzOURDRkU1OTY5QjQyOERFQTM2MTVD
QUQ0RTVGOTAeFw0yMzEyMTgyMDAzMTlaFw0yNDEyMTYyMDA4MTlaMDMxMTAvBgNV
BAMTKEQ5OTg2RjVERDhFQzU3OEYzNzlCNEM4MjFFQTM0NjExNkM5NjU1MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTZxz1ltQZ5cpbj/oRpy/j+XxZ
Ie/tW2jbW9LzziP4bNdiHm/PjjIDBGnBty81VH8lkvh/t8VGhWdOxne2dNADjKAY
gDk8gOWhJkwUZtT1qEuHZy419L/meoPqZkvIqOg65QfJo4+YuylmLHfPxlPVF3xc
A8VEv+1It6mccQ5jVA9orTpLofdAQ0OLt4Q4IRz0aVYR6YSbS3Y0kLQVAEYrcaEj
0vzgyqve95+kh9cmmM4chBBjKkUdzPOkShu7A6A6Dt4+icvCYJY7eNVenmOja0aB
fQq9RPXNiupj4Ee625cmHdJGdRTmfi7khMEiPMBJoBoSpX2mtLa1lMegjE5DAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2ZhvXdjsV483m0yCHqNGEWyWVRQwHwYDVR0j
BBgwFoAUwvmr1tjznc/llptCjeo2FcrU5fkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWk0VFVoNnlmcTV3cFpCYURxRWhTZHg5TWtkbkhIYXZtVjhUeHdSNzU5
blIvMC9DMkY5QUJENkQ4RjM5RENGRTU5NjlCNDI4REVBMzYxNUNBRDRFNUY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MyRjlBQkQ2RDhGMzlEQ0ZF
NTk2OUI0MjhERUEzNjE1Q0FENEU1RjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VpNFRVaDZ5ZnE1d3BaQmFEcUVoU2R4OU1rZG5ISGF2bVY4VHh3Ujc1OW5SLzAv
MzEzODMxMmUzMTM5MzEyZTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzOTM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK1vyAwDQYJKoZIhvcNAQELBQADggEBAG8/Hmoo
TNIVlPsjsrMsmEbQtOWZY1sympH2xReiu9P4jE8rC8peTk+CHLCjnbNWtuAH9YCK
0rJ/FcKEUF9w2bXSuQEvilxqVLIIBSiXos6yDJfiuFvZl/vFFilUCZsQkrJiVQ0A
TZkVvnNAn+R8GW+6UMjx/zEHoIgVoutkdNgnbBMDhf9eZtqTyjtjlblPji2WBtEz
LXKRrbNNj48qldEusKv7fHynRx43unWcuPxTEdLkQnUmOMUIDjShlDV9ukILhRpA
TQH1/tshZsejJ1eF/8qwoBBainG+Zv71r62id2fdYm0Akig0eaHRhaGYaK3wZlIZ
FK2V/uPHQHDwERw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:51 2024 by rpki-client on console-ams.rpki-client.org