Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/3138312e3139312e33352e302f32342d3234203d3e20323635393836.roa
File:                     3138312e3139312e33352e302f32342d3234203d3e20323635393836.roa (raw, json)
Hash identifier:          XwRpCv+vepUd9SBJ2J7T91smdIWzc51Y8K79J+R736w=
Subject key identifier:   F4:68:42:9D:2D:40:AC:4F:60:2C:66:98:C3:59:F9:92:C8:31:7A:8B
Certificate issuer:       /CN=C99F440A77FA805AD87B90E49EB02EDB6ADA0197
Certificate serial:       3729813B81156587ABA2CEE0D78741E8D6F3B7E7
Authority key identifier: C9:9F:44:0A:77:FA:80:5A:D8:7B:90:E4:9E:B0:2E:DB:6A:DA:01:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C99F440A77FA805AD87B90E49EB02EDB6ADA0197.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/3138312e3139312e33352e302f32342d3234203d3e20323635393836.roa
Signing time:             Wed 02 Aug 2023 20:34:18 +0000
ROA not before:           Wed 02 Aug 2023 20:29:18 +0000
ROA not after:            Wed 31 Jul 2024 20:34:18 +0000
asID:                     265986
IP address blocks:        181.191.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:29:81:3b:81:15:65:87:ab:a2:ce:e0:d7:87:41:e8:d6:f3:b7:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C99F440A77FA805AD87B90E49EB02EDB6ADA0197
        Validity
            Not Before: Aug  2 20:29:18 2023 GMT
            Not After : Jul 31 20:34:18 2024 GMT
        Subject: CN=F468429D2D40AC4F602C6698C359F992C8317A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:04:b4:4f:5d:f2:01:33:66:4e:a4:5e:7c:3c:
                    a0:06:4d:d1:44:1c:2c:8d:f4:5b:80:84:64:86:6e:
                    17:ea:0c:ee:e1:c6:35:d2:69:3e:31:13:71:b5:c4:
                    18:89:cc:ad:df:17:e6:1c:b5:9e:93:6c:da:ca:ff:
                    11:12:7e:28:35:cb:14:c2:c1:54:86:58:e7:87:5e:
                    7a:0c:04:83:f9:54:e7:fa:73:05:04:79:a8:aa:0d:
                    b1:68:e2:f5:5c:5d:7c:16:ce:80:8b:98:de:98:4c:
                    47:49:8c:fc:d9:65:40:fd:3f:d6:d0:e3:8d:10:d3:
                    23:0c:64:91:76:5b:cf:09:60:24:ca:aa:ca:21:e1:
                    61:ab:d3:9e:70:52:2c:e0:8e:ee:00:49:1f:0a:40:
                    4b:2f:a5:ce:96:67:28:52:6c:66:4c:fc:36:d3:6c:
                    e2:eb:25:d8:06:10:83:dc:94:d3:3e:39:75:93:b1:
                    39:7d:0c:a2:3d:42:f4:3e:8f:88:b2:72:ec:7e:ac:
                    90:c7:31:7d:59:a9:25:9f:8d:c0:f2:d3:2f:da:45:
                    d6:ad:cc:ab:07:3c:d3:34:bc:09:c8:8d:07:53:62:
                    af:96:6a:2e:ad:42:bb:ec:a4:79:58:75:38:82:c2:
                    10:39:25:8b:01:de:e4:a9:f5:5b:6b:48:77:fe:ea:
                    6d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:68:42:9D:2D:40:AC:4F:60:2C:66:98:C3:59:F9:92:C8:31:7A:8B
            X509v3 Authority Key Identifier:
                keyid:C9:9F:44:0A:77:FA:80:5A:D8:7B:90:E4:9E:B0:2E:DB:6A:DA:01:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/C99F440A77FA805AD87B90E49EB02EDB6ADA0197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C99F440A77FA805AD87B90E49EB02EDB6ADA0197.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/3138312e3139312e33352e302f32342d3234203d3e20323635393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:a4:4c:73:00:8b:ea:5a:43:5a:05:75:b0:3d:8e:e5:47:7f:
         a4:89:15:9e:70:3e:43:29:3c:66:aa:24:2b:56:d2:e1:aa:ff:
         08:4d:db:d5:be:0a:4d:78:f4:25:fa:dd:e4:85:59:0e:e8:c3:
         f7:d3:cf:73:0a:de:cf:a9:50:44:79:5c:00:09:7c:e2:76:f3:
         ce:ff:0e:ed:6e:2c:e1:7e:cb:2f:5b:cd:67:9b:83:cc:6c:d1:
         d3:e5:36:2c:39:6b:26:e9:20:39:f2:86:39:7c:33:0c:a8:7d:
         a4:85:12:0f:0e:ee:f0:41:22:7c:52:12:3b:87:66:a4:ac:85:
         01:13:c7:1b:c9:98:be:27:27:65:e6:56:1b:d3:7d:13:53:04:
         be:1a:db:b7:55:d1:ec:8b:c5:0b:3a:cf:f2:32:a0:45:da:b6:
         e8:e3:a6:42:52:75:fd:93:e5:60:99:b4:4f:2e:8b:11:3f:62:
         c4:58:87:8d:bf:cf:ef:58:0a:83:02:71:0b:4f:73:4c:a6:68:
         72:95:b7:c9:90:4b:ad:cc:fd:e8:a8:01:dc:68:10:d8:9f:14:
         16:23:a7:0c:c3:08:7e:a6:6d:ec:2d:56:c9:1c:7a:f0:78:50:
         6c:34:e0:fe:ba:bd:2e:74:28:79:34:1e:12:78:4a:b8:15:86:
         c7:cf:55:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:51 2024 by rpki-client on console-ams.rpki-client.org