Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/3138312e3138392e36382e302f32322d3234203d3e20323731343232.roa
File:                     3138312e3138392e36382e302f32322d3234203d3e20323731343232.roa (raw, json)
Hash identifier:          RbfDUbIWH4RHAU16fR9fCpQxOXZdKx2/eFcm9X7qq44=
Subject key identifier:   17:84:CF:34:63:EB:AD:6B:76:E9:74:6F:3E:B5:D3:18:D4:02:4E:A6
Certificate issuer:       /CN=AF989BC34E39408F11829121DDD4BE12E79A7C16
Certificate serial:       36E6EF4375F5D7FAF7637A8C7A4F03A1CE3738A6
Authority key identifier: AF:98:9B:C3:4E:39:40:8F:11:82:91:21:DD:D4:BE:12:E7:9A:7C:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF989BC34E39408F11829121DDD4BE12E79A7C16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/3138312e3138392e36382e302f32322d3234203d3e20323731343232.roa
Signing time:             Sun 02 Jul 2023 14:20:50 +0000
ROA not before:           Sun 02 Jul 2023 14:15:50 +0000
ROA not after:            Sun 30 Jun 2024 14:20:50 +0000
asID:                     271422
IP address blocks:        181.189.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e6:ef:43:75:f5:d7:fa:f7:63:7a:8c:7a:4f:03:a1:ce:37:38:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF989BC34E39408F11829121DDD4BE12E79A7C16
        Validity
            Not Before: Jul  2 14:15:50 2023 GMT
            Not After : Jun 30 14:20:50 2024 GMT
        Subject: CN=1784CF3463EBAD6B76E9746F3EB5D318D4024EA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c0:af:08:a6:69:c7:46:e3:4f:38:31:74:f1:
                    13:a1:69:a8:36:9c:7d:a8:0c:1f:00:e4:12:b7:ef:
                    08:0a:aa:17:e2:d7:d2:e5:39:27:16:7c:84:ea:f2:
                    c2:b4:97:07:88:e2:1d:64:d9:79:08:4f:3f:f5:d2:
                    bd:9e:7f:6b:74:08:a1:05:1e:b4:bb:c0:a6:ab:e4:
                    80:0a:c0:ff:93:34:02:58:70:80:26:1c:34:a7:2e:
                    87:c1:4f:51:82:87:73:4c:8f:9a:5b:94:4b:79:35:
                    b5:70:cf:5c:df:22:88:1f:0d:04:0d:04:1f:c4:f5:
                    58:6c:4a:21:81:c1:46:32:c7:53:8e:05:b5:20:f9:
                    50:93:8f:32:de:ba:7d:4b:fd:b2:b5:7b:f5:d8:d5:
                    30:54:a7:ad:02:90:72:9e:f4:93:44:ab:b7:fa:cc:
                    da:7f:2e:d8:f3:b5:f5:ce:8e:59:66:40:43:0b:fb:
                    8e:ee:a3:0f:b4:15:16:40:87:d2:d4:97:18:14:8c:
                    d7:15:89:3c:56:f2:3f:f3:c8:aa:2d:98:7f:93:48:
                    49:65:74:2b:56:91:62:64:d6:28:44:3b:30:a0:31:
                    eb:49:dd:d7:1e:0d:af:5a:50:41:70:ce:d2:b0:4c:
                    47:8f:00:aa:5c:8f:89:89:1b:6f:47:bb:0f:c3:63:
                    f1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:84:CF:34:63:EB:AD:6B:76:E9:74:6F:3E:B5:D3:18:D4:02:4E:A6
            X509v3 Authority Key Identifier:
                keyid:AF:98:9B:C3:4E:39:40:8F:11:82:91:21:DD:D4:BE:12:E7:9A:7C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/AF989BC34E39408F11829121DDD4BE12E79A7C16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF989BC34E39408F11829121DDD4BE12E79A7C16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/3138312e3138392e36382e302f32322d3234203d3e20323731343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:09:61:8f:38:5e:cf:b8:0d:d9:cd:f8:46:80:88:ff:98:70:
         7c:81:0c:57:c1:51:b1:73:36:9a:6d:48:7e:dd:e4:9a:18:26:
         6a:1f:3d:ac:bd:9f:f3:9f:45:8a:15:5b:bf:6c:b9:97:eb:b9:
         7c:ff:f3:aa:42:da:af:a2:35:cc:95:1c:f9:aa:b9:f3:85:ac:
         ff:42:ae:74:a9:da:8f:f3:a4:12:9c:65:d4:90:c3:4f:fb:00:
         cb:65:5d:88:1b:9e:0c:fc:69:92:f3:ac:07:26:e7:5c:7d:59:
         b9:50:63:61:ed:b1:7a:aa:ce:ba:e1:4f:0a:55:40:3a:6c:e3:
         48:e6:1f:6d:cb:c9:9d:ba:9f:9c:90:45:f4:30:23:d4:ee:df:
         fb:8c:4e:d6:26:e4:5b:60:fa:5f:4e:06:b6:4d:c6:98:89:b9:
         d7:a3:1a:6e:55:c9:ac:51:b6:fc:8d:8c:bc:3c:6f:6b:ae:de:
         31:f1:aa:d4:45:00:ff:26:89:c0:8f:ed:0c:16:cd:67:5e:ab:
         d3:38:26:c9:3e:63:5c:78:df:40:b4:02:8f:62:32:65:dd:89:
         83:14:44:8d:22:ce:c5:e4:19:a6:07:39:cb:4f:36:4d:07:d5:
         e6:31:43:18:62:b7:43:b3:56:1b:e5:49:f7:80:32:78:1f:79:
         15:65:87:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org