Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/3138312e3139312e35382e302f32342d3234203d3e20323634393837.roa
File:                     3138312e3139312e35382e302f32342d3234203d3e20323634393837.roa (raw, json)
Hash identifier:          2CwjC6uyUn4oeU3BOvlgszFVEXP9fz4dP6wKmEcLD5E=
Subject key identifier:   66:95:D4:CA:E8:E1:7F:4F:3B:A2:67:14:81:36:92:CD:92:5F:D2:89
Certificate issuer:       /CN=9842039AC3B384E016FBCFF2C783844A2F64CE38
Certificate serial:       2DA023AECF5875B9C406A0F90A37ECD4D73ABB9F
Authority key identifier: 98:42:03:9A:C3:B3:84:E0:16:FB:CF:F2:C7:83:84:4A:2F:64:CE:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9842039AC3B384E016FBCFF2C783844A2F64CE38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/3138312e3139312e35382e302f32342d3234203d3e20323634393837.roa
Signing time:             Thu 04 Apr 2024 10:14:39 +0000
ROA not before:           Thu 04 Apr 2024 10:09:39 +0000
ROA not after:            Thu 03 Apr 2025 10:14:39 +0000
asID:                     264987
IP address blocks:        181.191.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a0:23:ae:cf:58:75:b9:c4:06:a0:f9:0a:37:ec:d4:d7:3a:bb:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9842039AC3B384E016FBCFF2C783844A2F64CE38
        Validity
            Not Before: Apr  4 10:09:39 2024 GMT
            Not After : Apr  3 10:14:39 2025 GMT
        Subject: CN=6695D4CAE8E17F4F3BA26714813692CD925FD289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:d1:6f:ab:93:47:10:d2:c5:32:29:ec:37:
                    b4:00:8d:7f:b7:31:be:ec:e0:66:90:a7:1c:f9:c1:
                    29:c6:c4:4c:f8:33:77:fe:c2:2f:92:08:64:a4:08:
                    5a:55:53:9c:9a:64:74:06:43:49:66:ff:d2:0f:a7:
                    b2:3d:02:4e:ae:91:c1:40:9e:3f:1c:13:c2:2a:97:
                    31:f7:46:38:bd:0c:f3:28:5c:19:42:5c:91:ef:03:
                    d6:30:6f:ab:09:dc:8f:b5:26:31:c7:6b:ee:e2:0a:
                    6a:53:8d:82:d7:d1:10:f4:7e:43:29:18:14:50:91:
                    69:bd:16:5b:29:4e:4e:a7:26:e5:df:c8:b7:bc:bd:
                    aa:15:35:eb:16:63:29:39:d7:4f:b3:aa:08:2c:06:
                    f5:a8:31:f2:53:83:fc:80:d7:06:44:97:4b:24:82:
                    2c:34:6b:1a:65:90:1a:3e:cd:38:6b:ba:40:01:fb:
                    54:86:f2:6f:c7:56:51:05:f3:81:cd:61:32:d2:11:
                    41:58:a7:f4:21:d5:55:20:ca:bc:1e:65:62:7d:8b:
                    0d:c8:dc:9b:65:c1:8e:aa:36:9b:c9:00:5f:77:0c:
                    4c:86:3b:86:cc:5e:58:0f:8b:6c:1f:ba:08:cc:f8:
                    b5:88:47:37:0b:18:88:bb:c7:68:c2:36:0c:1f:48:
                    e7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:95:D4:CA:E8:E1:7F:4F:3B:A2:67:14:81:36:92:CD:92:5F:D2:89
            X509v3 Authority Key Identifier:
                keyid:98:42:03:9A:C3:B3:84:E0:16:FB:CF:F2:C7:83:84:4A:2F:64:CE:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/9842039AC3B384E016FBCFF2C783844A2F64CE38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9842039AC3B384E016FBCFF2C783844A2F64CE38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/3138312e3139312e35382e302f32342d3234203d3e20323634393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:4e:0d:c5:7e:11:9c:aa:da:fa:f0:46:a1:c4:4c:26:9e:3e:
         cc:14:f5:d3:0e:50:fd:81:8b:bb:f2:bc:76:5c:91:cd:5e:07:
         a4:0f:13:79:78:36:75:99:60:c7:0d:ba:88:ac:a8:39:33:54:
         32:ff:43:52:50:00:d8:9f:19:1d:fc:b5:b8:c3:07:8d:3b:07:
         70:f7:97:c5:2c:a7:fa:c6:37:00:9e:d9:8e:35:82:34:b3:1a:
         d7:a4:e5:30:37:fe:41:26:0b:32:60:4d:cb:dd:7a:22:19:24:
         91:6c:2b:0e:0c:ab:01:da:2a:fe:4a:65:a8:ff:ff:db:c6:b1:
         9a:ca:f5:73:96:ef:69:55:79:88:18:9c:88:49:5d:14:2b:0f:
         0e:8d:12:1d:cb:20:3a:d3:e0:4c:7d:6d:d1:08:89:35:29:cc:
         63:99:3f:87:8f:e8:ee:f8:3e:a2:50:ff:9c:c0:4e:26:21:7c:
         21:de:e3:a7:a5:eb:24:2c:7b:ad:d9:0f:06:4a:a6:31:be:b1:
         5b:33:c7:88:4e:03:9e:de:91:cc:d8:4a:1e:34:30:12:41:c6:
         a3:17:e5:fc:d9:a0:7b:9b:28:13:71:38:4d:52:76:9e:b8:f3:
         4b:e1:7e:0a:67:46:8e:ef:a6:da:71:f1:94:b6:ab:f8:c2:b9:
         15:a8:b3:bb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULaAjrs9YdbnEBqD5Cjfs1Nc6u58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg0MjAzOUFDM0IzODRFMDE2RkJDRkYyQzc4Mzg0NEEy
RjY0Q0UzODAeFw0yNDA0MDQxMDA5MzlaFw0yNTA0MDMxMDE0MzlaMDMxMTAvBgNV
BAMTKDY2OTVENENBRThFMTdGNEYzQkEyNjcxNDgxMzY5MkNEOTI1RkQyODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdG9Fvq5NHENLFMinsN7QAjX+3
Mb7s4GaQpxz5wSnGxEz4M3f+wi+SCGSkCFpVU5yaZHQGQ0lm/9IPp7I9Ak6ukcFA
nj8cE8IqlzH3Rji9DPMoXBlCXJHvA9Ywb6sJ3I+1JjHHa+7iCmpTjYLX0RD0fkMp
GBRQkWm9FlspTk6nJuXfyLe8vaoVNesWYyk510+zqggsBvWoMfJTg/yA1wZEl0sk
giw0axplkBo+zThrukAB+1SG8m/HVlEF84HNYTLSEUFYp/Qh1VUgyrweZWJ9iw3I
3JtlwY6qNpvJAF93DEyGO4bMXlgPi2wfugjM+LWIRzcLGIi7x2jCNgwfSOdVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZpXUyujhf087omcUgTaSzZJf0okwHwYDVR0j
BBgwFoAUmEIDmsOzhOAW+8/yx4OESi9kzjgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0dpRlpYSmFiVzY0dGZmWm1QcXFQSnpvVXR3RXd6TWVyTFo4WnNIdWJL
THQvMS85ODQyMDM5QUMzQjM4NEUwMTZGQkNGRjJDNzgzODQ0QTJGNjRDRTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4NDIwMzlBQzNCMzg0RTAx
NkZCQ0ZGMkM3ODM4NDRBMkY2NENFMzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dHaUZaWEphYlc2NHRmZlptUHFxUEp6b1V0d0V3ek1lckxaOFpzSHViS0x0LzEv
MzEzODMxMmUzMTM5MzEyZTM1MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzOTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC1vzowDQYJKoZIhvcNAQELBQADggEBAI1ODcV+
EZyq2vrwRqHETCaePswU9dMOUP2Bi7vyvHZckc1eB6QPE3l4NnWZYMcNuoisqDkz
VDL/Q1JQANifGR38tbjDB407B3D3l8Usp/rGNwCe2Y41gjSzGtek5TA3/kEmCzJg
TcvdeiIZJJFsKw4MqwHaKv5KZaj//9vGsZrK9XOW72lVeYgYnIhJXRQrDw6NEh3L
IDrT4Ex9bdEIiTUpzGOZP4eP6O74PqJQ/5zATiYhfCHe46el6yQse63ZDwZKpjG+
sVszx4hOA57ekczYSh40MBJBxqMX5fzZoHubKBNxOE1Sdp6480vhfgpnRo7vptpx
8ZS2q/jCuRWos7s=
-----END CERTIFICATE-----
Generated at Mon Jul 15 20:53:18 2024 by rpki-client on console-fra.rpki-client.org