Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3136382e3138312e3139342e302f32332d3233203d3e203631373438.roa
File:                     3136382e3138312e3139342e302f32332d3233203d3e203631373438.roa (raw, json)
Hash identifier:          hMTKuHDoOTnHqvQr5Y6NQhAg4c3xsA2YuL/NkrNYvrs=
Subject key identifier:   4B:D3:C7:51:8A:FD:92:3D:FB:83:49:9B:28:B6:9D:5C:25:35:A9:E5
Certificate issuer:       /CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
Certificate serial:       353FCF48FF3910968866731066E1527423296044
Authority key identifier: 24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3136382e3138312e3139342e302f32332d3233203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:19:33 +0000
ROA not before:           Wed 10 Apr 2024 19:14:33 +0000
ROA not after:            Wed 09 Apr 2025 19:19:33 +0000
asID:                     61748
IP address blocks:        168.181.194.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:3f:cf:48:ff:39:10:96:88:66:73:10:66:e1:52:74:23:29:60:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
        Validity
            Not Before: Apr 10 19:14:33 2024 GMT
            Not After : Apr  9 19:19:33 2025 GMT
        Subject: CN=4BD3C7518AFD923DFB83499B28B69D5C2535A9E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:bf:be:49:c2:f5:fa:27:d8:1b:7f:42:50:
                    04:21:73:b7:cb:a3:37:78:41:42:28:56:02:4b:c8:
                    01:aa:41:c9:e8:04:93:ed:5e:98:f0:c7:64:39:fe:
                    1c:b1:56:22:0b:0b:b1:f6:29:1f:76:44:dd:dd:7a:
                    cd:92:a0:07:37:ff:ae:34:47:b7:63:c5:da:df:d0:
                    fa:24:2b:54:00:d5:a5:cc:ec:a4:a2:37:10:72:f4:
                    d1:ea:1d:75:38:fc:e2:79:42:fd:a6:73:ca:2a:f9:
                    6a:71:55:09:5f:4a:92:f1:1c:2f:aa:f9:22:88:0e:
                    a8:42:8d:99:f4:d1:4b:ee:4f:97:68:08:14:1b:05:
                    39:ff:72:ed:ec:53:f6:55:97:e9:f5:a5:76:bf:01:
                    9c:c5:df:f0:ff:9e:b9:ba:11:4b:9a:d7:09:b8:b0:
                    73:72:ff:eb:52:e5:13:f7:c2:ab:27:ef:49:3e:54:
                    28:22:85:8f:16:d6:36:76:fd:c5:9f:1f:f5:90:00:
                    41:3c:48:fc:bf:b8:9f:91:a8:b4:52:fd:9f:54:30:
                    fc:6a:ec:d2:2f:cf:60:1c:33:af:bc:01:d1:2d:c6:
                    1c:f0:cd:2c:bf:d9:c6:bf:43:40:e5:b5:8e:40:74:
                    fc:31:48:bc:37:e4:7d:d4:c5:67:29:5f:f6:a6:60:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D3:C7:51:8A:FD:92:3D:FB:83:49:9B:28:B6:9D:5C:25:35:A9:E5
            X509v3 Authority Key Identifier:
                keyid:24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/2483D2805F2966A13A1FF7E130907B7443BE7FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3136382e3138312e3139342e302f32332d3233203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:2f:ae:6f:30:2b:94:af:42:97:59:13:69:1b:16:b2:97:a8:
         65:b7:94:01:eb:5e:6f:61:5a:05:eb:18:0d:09:65:6f:55:c6:
         b4:d2:67:db:b8:b0:12:ed:41:a5:f1:fd:e9:c6:04:cd:b5:f1:
         3b:c8:8b:5b:34:70:90:f6:da:32:a2:be:6e:47:32:c2:9f:13:
         3c:dc:c5:35:98:9d:f7:88:ca:1d:f9:17:fc:ec:41:50:5a:6e:
         de:d4:ca:6d:89:d6:58:be:5c:87:b5:9e:6c:5a:30:16:4b:8f:
         65:68:a3:4d:04:59:bd:f8:17:26:9a:7d:09:49:72:db:6a:03:
         8e:20:31:90:41:0e:a7:87:a8:c4:24:ee:41:8a:d0:a6:91:48:
         52:36:f7:cf:44:87:1e:de:cb:1c:43:08:ea:b7:0b:90:ef:8a:
         03:23:a2:9b:f6:bc:a0:16:14:3f:41:98:7c:66:83:da:9f:70:
         40:a8:51:ce:86:23:25:e5:14:54:23:89:6f:c9:fa:b4:ac:4e:
         20:03:b9:c5:dc:b1:6e:3a:a5:e6:63:29:53:d5:d8:87:20:7c:
         60:52:21:dc:9d:cc:7f:f7:7c:71:4a:e2:e6:b2:fc:13:90:66:
         20:85:9c:40:40:d1:98:fd:6e:14:c8:4d:bf:75:e5:f1:b1:e0:
         f6:7f:c5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org