Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/3138312e3139312e33322e302f32342d3234203d3e20323635393836.roa
File:                     3138312e3139312e33322e302f32342d3234203d3e20323635393836.roa (raw, json)
Hash identifier:          PLJ0D28lQdpSCPbw8fPqga/xjqDJoJol2C+KMu8upHE=
Subject key identifier:   D7:2E:0C:D5:B7:62:64:92:78:9C:AB:02:60:47:10:AC:F5:9A:07:38
Certificate issuer:       /CN=C99F440A77FA805AD87B90E49EB02EDB6ADA0197
Certificate serial:       47830D7753C712A84DB92E137BD765F63E2D936E
Authority key identifier: C9:9F:44:0A:77:FA:80:5A:D8:7B:90:E4:9E:B0:2E:DB:6A:DA:01:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C99F440A77FA805AD87B90E49EB02EDB6ADA0197.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/3138312e3139312e33322e302f32342d3234203d3e20323635393836.roa
Signing time:             Wed 02 Aug 2023 20:34:18 +0000
ROA not before:           Wed 02 Aug 2023 20:29:18 +0000
ROA not after:            Wed 31 Jul 2024 20:34:18 +0000
asID:                     265986
IP address blocks:        181.191.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:83:0d:77:53:c7:12:a8:4d:b9:2e:13:7b:d7:65:f6:3e:2d:93:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C99F440A77FA805AD87B90E49EB02EDB6ADA0197
        Validity
            Not Before: Aug  2 20:29:18 2023 GMT
            Not After : Jul 31 20:34:18 2024 GMT
        Subject: CN=D72E0CD5B7626492789CAB02604710ACF59A0738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:19:6a:5d:30:7e:31:99:5c:07:4d:09:e0:
                    91:e2:4d:7b:f2:bf:4d:1d:88:25:39:cd:73:79:1a:
                    1e:12:6b:aa:2f:13:62:e0:65:92:8f:2b:c3:92:0b:
                    63:bf:8e:77:15:f9:7b:65:48:a1:e7:e9:7f:5b:9e:
                    75:c9:b1:83:47:39:79:10:b2:36:f8:80:9a:63:62:
                    d7:16:40:d7:3a:05:09:46:e4:5f:66:ae:59:61:6d:
                    14:bd:7e:ed:c6:46:8c:57:9b:82:68:a3:92:9c:69:
                    c0:7b:74:ad:a1:d9:32:92:05:e7:bc:2f:49:ce:81:
                    db:ca:d0:a7:3a:7e:50:37:09:05:8a:48:0b:3e:dd:
                    40:5a:12:7d:ae:73:cd:9f:b5:6a:8d:03:73:e9:70:
                    6e:b9:46:2a:10:df:1b:05:0e:14:d7:5e:07:82:9c:
                    83:fb:99:ab:53:e2:c3:6d:a7:f5:6a:22:74:4f:0d:
                    f1:52:e4:07:ff:e9:24:3c:b7:25:17:c7:d5:9a:54:
                    44:c1:ae:e4:bc:06:a1:dc:69:e3:61:ae:31:54:a7:
                    cd:45:12:ba:36:e6:c6:25:85:5c:c4:91:ac:23:86:
                    66:a7:2c:20:ca:d4:af:ac:48:4c:fa:fa:70:b7:39:
                    9e:4f:6f:4e:f2:35:8d:7c:42:40:31:f9:e2:a3:5e:
                    e9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2E:0C:D5:B7:62:64:92:78:9C:AB:02:60:47:10:AC:F5:9A:07:38
            X509v3 Authority Key Identifier:
                keyid:C9:9F:44:0A:77:FA:80:5A:D8:7B:90:E4:9E:B0:2E:DB:6A:DA:01:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/C99F440A77FA805AD87B90E49EB02EDB6ADA0197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C99F440A77FA805AD87B90E49EB02EDB6ADA0197.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/3138312e3139312e33322e302f32342d3234203d3e20323635393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:4e:61:5d:30:24:d8:59:5c:6a:85:ad:c6:d4:a9:53:8a:69:
         00:d6:00:cb:41:85:c1:8e:51:7e:57:cc:5c:76:81:7d:5e:8a:
         7b:4f:77:32:fb:47:30:6f:07:7c:17:31:23:d2:5c:9e:d7:41:
         69:45:6a:ff:c7:02:7b:7c:37:20:2a:a2:40:80:4e:72:ce:5c:
         f1:c2:6d:af:64:48:75:5c:b1:c7:30:ee:77:80:c8:20:8f:5a:
         7c:10:40:70:77:88:6f:e0:81:f2:56:ea:1a:b8:d5:37:80:f7:
         89:be:13:68:41:00:e4:04:c4:8a:a2:b9:24:b1:8f:c2:0b:88:
         b8:9c:4f:50:5e:7a:c2:d7:a6:c0:18:7c:ce:57:ae:45:ca:ea:
         47:45:56:3c:2c:29:6e:cd:a4:ab:9d:f5:c7:19:12:35:c1:93:
         fe:57:1d:9e:de:d4:82:64:92:84:81:2e:50:83:17:da:4f:15:
         17:e7:6d:ee:4b:d9:15:56:1c:ca:33:2e:19:c0:4f:f1:fa:e3:
         e5:ec:12:27:b2:8f:4b:72:a5:53:bf:61:55:8e:12:e0:4d:84:
         2f:29:d4:53:53:64:06:e1:73:cb:bc:f7:42:81:cb:c2:28:0c:
         d4:da:10:61:1e:fb:0f:ed:03:db:b1:a2:83:44:16:2b:a1:4a:
         47:f1:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org