Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/3138312e3139312e3131392e302f32342d3234203d3e20323637343233.roa
File:                     3138312e3139312e3131392e302f32342d3234203d3e20323637343233.roa (raw, json)
Hash identifier:          3nf5kuBdvMoS3XxAuGX4LCJQABF2bLFqAQdMC1yvUTQ=
Subject key identifier:   98:1A:B2:6E:CC:85:FB:79:0F:77:07:D5:71:3A:F5:F9:91:2B:01:AD
Certificate issuer:       /CN=9830096CEE8970F0B235CCA769E85A3CC1C70EC9
Certificate serial:       49318BDE5F887BC90AE9C851698633E89EB14D8B
Authority key identifier: 98:30:09:6C:EE:89:70:F0:B2:35:CC:A7:69:E8:5A:3C:C1:C7:0E:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9830096CEE8970F0B235CCA769E85A3CC1C70EC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/3138312e3139312e3131392e302f32342d3234203d3e20323637343233.roa
Signing time:             Mon 11 Dec 2023 17:33:35 +0000
ROA not before:           Mon 11 Dec 2023 17:28:35 +0000
ROA not after:            Mon 09 Dec 2024 17:33:35 +0000
asID:                     267423
IP address blocks:        181.191.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:31:8b:de:5f:88:7b:c9:0a:e9:c8:51:69:86:33:e8:9e:b1:4d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9830096CEE8970F0B235CCA769E85A3CC1C70EC9
        Validity
            Not Before: Dec 11 17:28:35 2023 GMT
            Not After : Dec  9 17:33:35 2024 GMT
        Subject: CN=981AB26ECC85FB790F7707D5713AF5F9912B01AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0f:d9:76:a7:b2:25:49:5b:79:95:bc:8e:d9:
                    31:26:fd:e8:b6:94:bc:8f:53:08:92:8e:4e:02:6c:
                    e0:af:d8:68:ab:e3:ad:e0:e3:01:ba:a7:5f:69:30:
                    3e:d7:66:f1:6f:21:ff:45:79:57:6f:f5:7d:50:e0:
                    75:53:08:ea:60:3a:75:44:7e:b7:0a:d2:16:cd:07:
                    09:f3:fb:6b:1f:a1:f6:d6:3e:b2:91:f0:b4:13:b6:
                    99:69:94:1e:84:8f:6b:b0:7e:be:57:39:5c:74:c9:
                    0b:c2:1e:84:5a:61:d5:73:d8:28:62:61:7a:ac:59:
                    f4:81:07:1e:a7:0e:3b:68:58:f9:4d:77:9e:c4:c9:
                    a9:4c:db:cf:57:42:e1:b2:b1:a8:2d:ae:c0:9b:df:
                    8c:b2:f9:b5:63:fa:34:60:44:f3:88:ee:7f:24:7f:
                    30:cc:83:ae:1b:37:f2:7c:67:48:9b:6d:60:f4:2f:
                    a1:ec:98:98:99:5a:d0:9c:da:92:22:89:9b:9a:1a:
                    c6:ee:d9:b6:73:d6:b4:d8:b4:83:bd:82:8d:be:36:
                    08:e7:73:9d:e1:19:f6:0d:59:a8:48:35:e2:76:75:
                    87:6f:22:f9:bc:01:0a:fa:96:b9:1b:60:d2:b9:d9:
                    34:89:92:32:5d:58:47:c3:2a:05:9a:e4:b9:a2:29:
                    80:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1A:B2:6E:CC:85:FB:79:0F:77:07:D5:71:3A:F5:F9:91:2B:01:AD
            X509v3 Authority Key Identifier:
                keyid:98:30:09:6C:EE:89:70:F0:B2:35:CC:A7:69:E8:5A:3C:C1:C7:0E:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/9830096CEE8970F0B235CCA769E85A3CC1C70EC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9830096CEE8970F0B235CCA769E85A3CC1C70EC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/3138312e3139312e3131392e302f32342d3234203d3e20323637343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:61:8e:9b:4c:93:b0:46:55:05:12:ec:51:b7:e7:bd:52:7a:
         b3:38:a3:52:84:1b:97:c4:d4:71:90:0d:a8:40:4c:c4:60:3f:
         42:95:4a:d0:7b:40:30:eb:18:c5:b3:eb:e8:19:4e:2c:5d:95:
         fd:45:d8:9f:09:3d:f9:61:37:d5:d7:b2:59:22:03:53:67:0d:
         01:11:28:45:c0:b0:b6:f0:21:41:39:3d:b2:1e:e6:b2:78:78:
         bf:49:9e:d1:ae:b0:6a:db:a9:1d:9a:ac:c2:cb:b5:ff:25:e2:
         de:e0:0e:ba:12:f5:2d:a3:f2:1b:58:05:37:07:3c:c6:f5:f9:
         16:bd:32:d0:f4:72:60:47:80:09:26:28:90:02:e4:f4:ae:c8:
         26:b8:51:5b:8e:ac:cb:2f:cf:1d:8c:51:03:ae:cc:ae:ca:21:
         9a:72:87:80:f5:c5:3c:25:18:98:68:0f:d3:0b:10:a4:65:51:
         bd:df:d6:c3:95:0d:3a:3b:28:1d:57:54:ac:f4:53:7a:d3:64:
         6f:53:3a:97:c7:3c:85:42:9a:95:c8:43:9a:b1:f8:95:0d:11:
         2a:b1:60:2a:40:b0:be:55:a6:99:fe:84:c2:0b:83:9b:33:5d:
         c1:1a:0d:32:31:06:16:cb:eb:62:ff:1f:c2:a6:a9:31:59:dd:
         f3:40:3b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:02 2024 by rpki-client on console-ams.rpki-client.org