Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231382e302f32332d3233203d3e20323637353630.roa
File:                     3138312e3139312e3231382e302f32332d3233203d3e20323637353630.roa (raw, json)
Hash identifier:          i5efZVl5kNIKzWCg5LbMduQQGIMxzUril+Dd2XTK+Qo=
Subject key identifier:   71:C8:D3:E9:4D:0A:1F:C5:70:23:EC:7B:99:47:89:4A:21:01:ED:02
Certificate issuer:       /CN=7BD6239E12856936C51835C31766BBA0B4D7B073
Certificate serial:       09CEB0E416B7387B0081DBA006CA79B77E88656D
Authority key identifier: 7B:D6:23:9E:12:85:69:36:C5:18:35:C3:17:66:BB:A0:B4:D7:B0:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BD6239E12856936C51835C31766BBA0B4D7B073.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231382e302f32332d3233203d3e20323637353630.roa
Signing time:             Wed 28 Feb 2024 21:31:10 +0000
ROA not before:           Wed 28 Feb 2024 21:26:10 +0000
ROA not after:            Wed 26 Feb 2025 21:31:10 +0000
asID:                     267560
IP address blocks:        181.191.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ce:b0:e4:16:b7:38:7b:00:81:db:a0:06:ca:79:b7:7e:88:65:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD6239E12856936C51835C31766BBA0B4D7B073
        Validity
            Not Before: Feb 28 21:26:10 2024 GMT
            Not After : Feb 26 21:31:10 2025 GMT
        Subject: CN=71C8D3E94D0A1FC57023EC7B9947894A2101ED02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b0:ea:b5:ac:e0:9d:9b:70:2b:27:39:db:cd:
                    db:7b:6d:1f:b6:74:9c:89:f7:c8:b8:96:1f:ff:71:
                    76:68:38:33:35:dd:a3:73:86:35:c4:fe:b8:ec:d4:
                    b2:b5:44:56:a9:7d:05:d9:c3:fc:ac:97:c1:c3:80:
                    28:67:05:24:b3:45:62:57:da:aa:92:32:9b:0e:31:
                    87:e1:24:03:6d:af:85:5b:1b:0e:cb:56:4d:39:fa:
                    17:b9:ca:97:44:e7:a8:1b:3d:58:84:42:cb:a1:1e:
                    7f:15:7a:c2:a2:72:94:41:52:a0:5c:45:b1:98:08:
                    c3:df:ef:ae:1f:d3:70:67:6b:b8:9f:93:dc:03:9f:
                    db:76:fa:3e:74:b7:bb:4a:18:0d:e6:33:cd:1c:8f:
                    f3:31:01:52:91:27:dd:b4:d4:6f:e9:05:cf:04:f8:
                    9e:c0:af:10:74:11:89:6a:01:34:c4:2e:22:bb:da:
                    99:2a:70:3f:43:49:fb:a4:2d:47:7a:0d:b4:aa:15:
                    1c:f4:e4:74:60:68:17:54:ab:20:9d:e5:9a:01:e1:
                    88:d5:e5:af:31:c6:91:53:86:42:cf:8b:e1:63:88:
                    d0:ac:80:d8:f8:8a:8f:5b:f5:cb:58:82:e2:cd:39:
                    39:16:5d:e1:35:2b:bc:59:8c:ba:9e:c0:49:32:70:
                    23:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C8:D3:E9:4D:0A:1F:C5:70:23:EC:7B:99:47:89:4A:21:01:ED:02
            X509v3 Authority Key Identifier:
                keyid:7B:D6:23:9E:12:85:69:36:C5:18:35:C3:17:66:BB:A0:B4:D7:B0:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/7BD6239E12856936C51835C31766BBA0B4D7B073.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BD6239E12856936C51835C31766BBA0B4D7B073.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231382e302f32332d3233203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:72:74:96:bc:94:6c:1a:de:f6:2e:08:5d:e6:ad:57:80:45:
         17:5e:9a:d2:38:fc:7f:15:62:91:f6:db:67:64:68:7a:15:33:
         b7:8e:ab:d4:55:52:6e:af:64:90:91:35:6d:cd:b5:f2:35:6e:
         b7:a7:23:56:f8:f8:4d:3e:c1:47:3d:05:21:8e:e6:a3:a9:73:
         26:ad:e8:45:bb:7e:9e:01:a9:b5:fe:06:44:96:07:51:5c:94:
         e4:33:6d:c9:b3:10:3a:33:72:31:0e:e0:f6:94:50:90:02:b2:
         65:f2:d2:60:e2:ed:30:0f:79:26:f5:e1:bd:11:68:6d:b9:93:
         b0:46:a4:33:cf:08:8f:5d:35:ed:60:49:08:22:bd:b2:76:6d:
         18:a6:e9:47:5c:ca:af:d7:fd:e7:88:e3:fb:f6:be:48:ee:14:
         10:af:a0:bc:23:65:ea:ee:87:b1:03:74:d2:56:71:54:d3:a5:
         8b:44:74:72:35:f4:a5:93:95:5d:1d:48:22:31:99:92:3b:ee:
         48:37:e8:ed:f4:c9:72:e9:6b:d7:9c:5e:bf:b4:a5:48:1e:a1:
         ff:2a:1f:ad:97:a0:47:65:b9:4a:d0:83:10:c0:73:8c:85:59:
         85:cb:f2:00:41:61:9d:e5:11:c7:74:bb:33:4d:5c:83:ef:d0:
         be:15:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org