Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/3138312e3138392e3132342e302f32322d3332203d3e20323731353032.roa
File:                     3138312e3138392e3132342e302f32322d3332203d3e20323731353032.roa (raw, json)
Hash identifier:          Yvu8asGDS7gijfp9l3mM2aNngcX8IWqrLSMap8zJ5KU=
Subject key identifier:   2F:AC:C5:32:55:55:6A:D7:AD:2F:3C:85:79:53:2D:F0:1D:36:01:DE
Certificate issuer:       /CN=ADD6043AF5E41B4537D6F4F01EC0903C2DC7B7FB
Certificate serial:       48B6C9494D4420DE6D38D98472D57170446B6DAB
Authority key identifier: AD:D6:04:3A:F5:E4:1B:45:37:D6:F4:F0:1E:C0:90:3C:2D:C7:B7:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADD6043AF5E41B4537D6F4F01EC0903C2DC7B7FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/3138312e3138392e3132342e302f32322d3332203d3e20323731353032.roa
Signing time:             Sun 03 Mar 2024 22:11:09 +0000
ROA not before:           Sun 03 Mar 2024 22:06:09 +0000
ROA not after:            Sun 02 Mar 2025 22:11:09 +0000
asID:                     271502
IP address blocks:        181.189.124.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b6:c9:49:4d:44:20:de:6d:38:d9:84:72:d5:71:70:44:6b:6d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD6043AF5E41B4537D6F4F01EC0903C2DC7B7FB
        Validity
            Not Before: Mar  3 22:06:09 2024 GMT
            Not After : Mar  2 22:11:09 2025 GMT
        Subject: CN=2FACC53255556AD7AD2F3C8579532DF01D3601DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1e:a5:cb:3f:a7:cc:10:0e:b9:d5:ca:c9:8f:
                    aa:28:24:7e:a9:6d:12:aa:3a:99:e5:a5:fa:11:67:
                    32:6b:2f:2e:48:99:be:10:ca:19:f4:79:3c:a8:47:
                    c3:0f:52:a5:26:65:0a:1f:f5:fb:87:f7:c9:ba:19:
                    cb:1b:f3:b5:96:bd:12:1b:5a:e2:98:7c:d1:cd:40:
                    87:3c:54:09:52:53:bf:12:bc:dc:30:ed:f5:88:cc:
                    df:93:64:7f:6b:92:d1:84:80:01:f2:24:de:a8:48:
                    36:a6:cb:43:11:bc:9c:e5:6d:c4:04:cd:10:07:b6:
                    e7:9b:9d:0b:3c:fe:2f:61:72:6c:a5:89:be:e5:ae:
                    cb:db:4a:63:be:df:80:13:95:73:37:cc:ec:58:dc:
                    1b:c1:1a:00:07:01:52:23:2e:3e:1d:62:2c:fc:3a:
                    7c:d2:ea:b8:b4:33:04:4a:e4:7d:3c:85:c4:50:55:
                    cc:60:1c:05:01:68:56:f2:6a:b7:90:83:8a:ba:9c:
                    85:14:d0:9b:03:f9:e4:b8:e3:3f:40:60:18:b3:5f:
                    3d:55:4a:9d:29:48:bc:8c:c6:c6:55:53:44:c6:cc:
                    7f:40:a2:6d:3d:46:5f:65:ec:b9:cb:a8:98:e4:c4:
                    c7:2f:47:e0:bf:b2:63:ef:37:37:bd:85:7d:8a:32:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AC:C5:32:55:55:6A:D7:AD:2F:3C:85:79:53:2D:F0:1D:36:01:DE
            X509v3 Authority Key Identifier:
                keyid:AD:D6:04:3A:F5:E4:1B:45:37:D6:F4:F0:1E:C0:90:3C:2D:C7:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/ADD6043AF5E41B4537D6F4F01EC0903C2DC7B7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADD6043AF5E41B4537D6F4F01EC0903C2DC7B7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/3138312e3138392e3132342e302f32322d3332203d3e20323731353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:df:91:a8:11:d9:29:08:ac:65:25:e3:71:5f:45:cd:5d:f5:
         17:a3:f3:80:1e:71:83:a5:09:41:fa:25:2c:a1:76:c2:7d:6e:
         8e:d4:40:ef:16:74:d7:63:b0:10:de:70:bd:db:be:4d:e8:94:
         9e:bd:e2:1e:b2:71:6d:f2:e2:7e:48:55:10:a8:69:68:ca:70:
         88:11:f4:5a:e8:93:54:0f:86:19:cc:4b:b9:70:8e:d7:c2:76:
         fa:98:1e:c1:c2:cf:36:7e:d9:fa:d0:79:82:d5:ba:c5:92:14:
         81:d2:06:71:99:b7:9c:aa:68:b7:89:3f:b9:51:8a:66:3f:f8:
         be:84:5d:f0:65:82:59:e1:dc:8c:4a:35:10:75:c7:24:0a:55:
         0f:9c:51:d0:9f:2a:bd:a5:0b:87:85:ce:3a:48:34:aa:97:fa:
         58:df:53:96:fa:68:63:db:fc:bd:48:91:67:7c:7d:d7:8d:da:
         72:33:e9:22:a7:b1:4e:8c:2c:56:20:7c:0f:94:12:1c:14:27:
         de:b3:7d:8f:a1:4c:c5:2e:80:84:ce:79:e2:f0:fe:96:07:85:
         62:72:38:83:57:29:2d:e4:9a:79:f2:c7:3a:26:d0:8c:9f:b3:
         44:85:64:4f:27:0e:fa:b9:d6:65:55:6e:75:a8:89:34:78:fa:
         ee:30:7f:bc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSLbJSU1EIN5tONmEctVxcERrbaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURENjA0M0FGNUU0MUI0NTM3RDZGNEYwMUVDMDkwM0My
REM3QjdGQjAeFw0yNDAzMDMyMjA2MDlaFw0yNTAzMDIyMjExMDlaMDMxMTAvBgNV
BAMTKDJGQUNDNTMyNTU1NTZBRDdBRDJGM0M4NTc5NTMyREYwMUQzNjAxREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjHqXLP6fMEA651crJj6ooJH6p
bRKqOpnlpfoRZzJrLy5Imb4Qyhn0eTyoR8MPUqUmZQof9fuH98m6Gcsb87WWvRIb
WuKYfNHNQIc8VAlSU78SvNww7fWIzN+TZH9rktGEgAHyJN6oSDamy0MRvJzlbcQE
zRAHtuebnQs8/i9hcmylib7lrsvbSmO+34ATlXM3zOxY3BvBGgAHAVIjLj4dYiz8
OnzS6ri0MwRK5H08hcRQVcxgHAUBaFbyareQg4q6nIUU0JsD+eS44z9AYBizXz1V
Sp0pSLyMxsZVU0TGzH9Aom09Rl9l7LnLqJjkxMcvR+C/smPvNze9hX2KMgN3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUL6zFMlVVatetLzyFeVMt8B02Ad4wHwYDVR0j
BBgwFoAUrdYEOvXkG0U31vTwHsCQPC3Ht/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnpwRjdXNHdKVHZheVYyQnVQTVVGenFxYnExTm9qTVRGYkFYa3lMRFFj
dG8vMC9BREQ2MDQzQUY1RTQxQjQ1MzdENkY0RjAxRUMwOTAzQzJEQzdCN0ZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FERDYwNDNBRjVFNDFCNDUz
N0Q2RjRGMDFFQzA5MDNDMkRDN0I3RkIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z6cEY3VzR3SlR2YXlWMkJ1UE1VRnpxcWJxMU5vak1URmJBWGt5TERRY3RvLzAv
MzEzODMxMmUzMTM4MzkyZTMxMzIzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzczMTM1MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArW9fDANBgkqhkiG9w0BAQsFAAOCAQEAWt+R
qBHZKQisZSXjcV9FzV31F6PzgB5xg6UJQfolLKF2wn1ujtRA7xZ012OwEN5wvdu+
TeiUnr3iHrJxbfLifkhVEKhpaMpwiBH0WuiTVA+GGcxLuXCO18J2+pgewcLPNn7Z
+tB5gtW6xZIUgdIGcZm3nKpot4k/uVGKZj/4voRd8GWCWeHcjEo1EHXHJApVD5xR
0J8qvaULh4XOOkg0qpf6WN9TlvpoY9v8vUiRZ3x9143acjPpIqexTowsViB8D5QS
HBQn3rN9j6FMxS6AhM554vD+lgeFYnI4g1cpLeSaefLHOibQjJ+zRIVkTycO+rnW
ZVVudaiJNHj67jB/vA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org