Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/3138312e3233332e3131322e302f32322d3232203d3e20323731343536.roa
File:                     3138312e3233332e3131322e302f32322d3232203d3e20323731343536.roa (raw, json)
Hash identifier:          +5TS4XePkujRvMMGGpY3QJdoT1wlF60YrmbLJh7palA=
Subject key identifier:   DA:2A:38:68:2B:11:92:22:9B:1E:8C:40:56:A4:AB:3A:47:84:DB:71
Certificate issuer:       /CN=DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1
Certificate serial:       28E6BE8C671A6A1A53460445BF69ED09AD620A36
Authority key identifier: DF:4A:B5:F9:B9:65:30:45:23:F2:CE:BC:86:6B:AF:3C:C8:3D:E7:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/3138312e3233332e3131322e302f32322d3232203d3e20323731343536.roa
Signing time:             Wed 21 Feb 2024 20:16:57 +0000
ROA not before:           Wed 21 Feb 2024 20:11:57 +0000
ROA not after:            Wed 19 Feb 2025 20:16:57 +0000
asID:                     271456
IP address blocks:        181.233.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e6:be:8c:67:1a:6a:1a:53:46:04:45:bf:69:ed:09:ad:62:0a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1
        Validity
            Not Before: Feb 21 20:11:57 2024 GMT
            Not After : Feb 19 20:16:57 2025 GMT
        Subject: CN=DA2A38682B1192229B1E8C4056A4AB3A4784DB71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:55:62:d3:3f:3f:a0:3c:58:1b:70:f5:9f:
                    01:82:d5:ae:d7:fa:29:a0:3f:5b:0c:58:40:cc:91:
                    8d:2a:99:73:33:3f:07:14:6a:24:76:d5:12:82:a5:
                    7f:e5:32:53:9c:39:9d:0c:d5:1f:2c:82:f7:19:bc:
                    27:50:ae:23:b6:01:76:7d:93:1b:66:4d:ed:fe:02:
                    8d:02:7d:22:13:12:72:d6:e0:6d:fb:87:bf:d7:67:
                    58:dd:a7:9c:50:b3:0a:e3:79:51:b1:cc:2e:8a:ca:
                    c8:bc:17:a3:a4:27:5c:b4:4b:74:5d:7b:08:c2:8f:
                    6a:f8:60:5f:46:b5:98:e4:9a:57:4f:b6:a1:0a:38:
                    19:38:ed:2f:d9:9e:57:d1:19:c5:77:50:08:2b:23:
                    88:a0:33:f8:b0:f5:ae:13:b7:4d:99:a1:da:e4:82:
                    5c:93:fb:bc:ec:23:39:43:69:e2:6e:b1:f3:e7:23:
                    c1:9b:08:f3:17:d5:5a:04:88:f9:b9:3d:02:51:1a:
                    83:b3:2e:f8:d3:f8:68:b3:d3:42:5a:67:19:bb:78:
                    81:cc:6e:0f:e9:fd:24:a1:06:f7:3e:ae:ea:65:d7:
                    36:6d:70:2b:03:ae:ac:7c:66:ef:d6:8d:25:7c:23:
                    d7:eb:d2:8d:cb:35:8b:2d:cb:0f:f4:78:5d:2c:c7:
                    4a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2A:38:68:2B:11:92:22:9B:1E:8C:40:56:A4:AB:3A:47:84:DB:71
            X509v3 Authority Key Identifier:
                keyid:DF:4A:B5:F9:B9:65:30:45:23:F2:CE:BC:86:6B:AF:3C:C8:3D:E7:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF4AB5F9B965304523F2CEBC866BAF3CC83DE7A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/3138312e3233332e3131322e302f32322d3232203d3e20323731343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:e4:7d:03:17:2b:0d:46:ae:59:bf:56:e9:ea:d1:44:76:48:
         f6:cf:b3:a5:2b:95:c1:28:79:87:a1:cc:c1:7c:0a:13:e9:dc:
         62:65:7e:3b:76:c7:b0:91:6e:fd:63:9f:01:2e:a5:ad:a2:17:
         fe:ab:41:65:10:f2:55:32:de:7d:c4:ae:af:11:92:ea:04:a1:
         c6:6e:64:f5:ed:e3:dd:e0:f4:f3:e4:45:a8:d3:ed:e1:73:5e:
         d1:aa:02:1d:5d:72:46:77:50:d7:51:5f:4d:ec:c6:9f:2f:a8:
         10:dd:21:b5:ab:3c:12:d1:50:18:17:74:0a:26:3b:6a:95:f6:
         dc:e5:f8:5d:a9:32:f1:33:48:97:4b:9b:cf:0b:23:cd:ca:01:
         de:35:71:b8:ef:f9:f3:d7:ee:93:f2:d7:30:b5:bb:cc:fe:ef:
         10:0c:1a:fc:ff:ea:17:03:09:9f:14:4e:21:b9:71:d8:b3:07:
         63:50:28:a8:4c:af:f0:0b:c7:30:1b:45:82:b5:0f:c8:17:56:
         de:bb:7a:53:d7:df:2f:51:66:c2:d7:7f:85:2d:63:0f:d5:17:
         a4:00:6b:46:25:46:b2:5b:33:2b:93:99:98:0b:7f:ad:ac:95:
         97:b7:16:83:81:7b:62:a1:2b:18:d6:cf:aa:3d:01:1c:3e:1d:
         fc:f5:0e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org