Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa
File:                     3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa (raw, json)
Hash identifier:          HSznu+uno8AVrfKgOKl3QDG6YgPelxlGapzTUgeWf7c=
Subject key identifier:   C4:95:C2:D6:79:93:67:E8:70:94:2A:80:F7:C4:94:1E:7C:1F:95:44
Certificate issuer:       /CN=7BD6239E12856936C51835C31766BBA0B4D7B073
Certificate serial:       6C269494970EC3F3B2526DE5613D1F219619CEA9
Authority key identifier: 7B:D6:23:9E:12:85:69:36:C5:18:35:C3:17:66:BB:A0:B4:D7:B0:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BD6239E12856936C51835C31766BBA0B4D7B073.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa
Signing time:             Wed 28 Feb 2024 21:31:07 +0000
ROA not before:           Wed 28 Feb 2024 21:26:07 +0000
ROA not after:            Wed 26 Feb 2025 21:31:07 +0000
asID:                     267560
IP address blocks:        181.191.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:26:94:94:97:0e:c3:f3:b2:52:6d:e5:61:3d:1f:21:96:19:ce:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD6239E12856936C51835C31766BBA0B4D7B073
        Validity
            Not Before: Feb 28 21:26:07 2024 GMT
            Not After : Feb 26 21:31:07 2025 GMT
        Subject: CN=C495C2D6799367E870942A80F7C4941E7C1F9544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:e6:64:02:c2:c0:30:9d:f7:36:60:47:12:
                    ea:52:dc:59:f3:1c:0a:fa:86:44:cb:39:b5:9c:59:
                    bd:c8:e4:1a:c8:53:cd:7b:18:7b:7c:ef:e6:c7:23:
                    e3:10:8b:a3:1b:3e:77:8d:bd:da:c7:64:52:38:a6:
                    fd:0e:d4:e8:c7:91:cd:da:1b:79:18:ce:4b:e1:cb:
                    ef:2f:24:60:8e:bc:bd:02:3f:60:9b:43:b4:16:45:
                    b4:68:a6:fb:e1:55:a7:81:ff:d0:12:3c:1c:a2:e3:
                    3f:b4:c5:a6:7d:09:36:21:49:73:fb:a2:c0:46:9e:
                    e2:ef:13:cf:10:6e:79:ba:42:00:73:00:7e:07:ae:
                    83:32:51:49:9b:cf:a9:e3:65:3b:1d:4e:22:88:ce:
                    2d:83:d2:a6:01:33:46:22:52:41:19:c9:69:58:0c:
                    a9:57:0a:a0:5f:f2:6b:9e:b2:c6:69:7b:fc:b3:35:
                    5b:43:bd:5b:b6:d0:c1:8d:11:70:47:39:a9:21:9c:
                    b1:e4:47:2d:85:f3:aa:f7:a4:23:33:f1:99:2e:ca:
                    f7:07:b2:6b:4f:b5:6a:e7:9f:33:0f:e2:91:eb:29:
                    c2:59:04:04:de:d2:72:67:17:47:42:7d:46:d4:64:
                    1f:6c:0e:ed:b2:a2:62:1d:3a:69:60:20:9d:da:75:
                    8c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:95:C2:D6:79:93:67:E8:70:94:2A:80:F7:C4:94:1E:7C:1F:95:44
            X509v3 Authority Key Identifier:
                keyid:7B:D6:23:9E:12:85:69:36:C5:18:35:C3:17:66:BB:A0:B4:D7:B0:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/7BD6239E12856936C51835C31766BBA0B4D7B073.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BD6239E12856936C51835C31766BBA0B4D7B073.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:4d:36:0a:54:e2:5a:30:8e:07:9d:ed:63:ce:43:0e:ca:7d:
         a1:0f:54:8f:a7:85:69:d5:0f:98:b6:28:1c:13:d0:c3:d2:f0:
         13:b6:15:54:d3:e6:5f:a9:e3:f2:a5:11:c5:cf:24:84:d9:28:
         7b:6a:57:db:ac:55:84:47:a3:8a:22:6d:24:8b:0f:3c:27:a6:
         c2:dd:64:52:47:7e:ef:b9:23:dc:f0:59:1d:68:50:49:b1:bb:
         ae:1a:b5:84:1c:59:6f:0b:1b:f2:d4:02:92:da:8a:b0:b0:d2:
         9c:77:26:72:36:f6:ae:69:84:ad:52:1d:fe:ad:ad:ac:de:09:
         48:22:62:5f:a1:c3:35:17:7f:66:23:ac:5d:11:30:07:c2:84:
         62:44:79:13:93:3f:63:4e:99:70:11:81:67:6b:6a:c9:48:98:
         e5:aa:06:73:64:da:9a:55:60:c2:70:fe:ae:92:bb:5f:82:e1:
         e6:c7:ea:07:11:fd:c0:89:1f:7e:75:51:a8:b5:58:ea:5f:b6:
         7f:67:24:fb:8f:9e:78:b6:c3:a9:27:16:d2:8b:4d:2f:21:d2:
         8e:f3:d7:06:66:36:f2:b6:e0:fa:1c:9c:22:b1:19:21:ff:21:
         19:1f:b8:57:55:6c:31:55:45:63:14:5a:32:82:8b:bc:29:3a:
         c1:6c:7e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org