Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231382e302f32342d3234203d3e20323637353630.roa
File:                     3138312e3139312e3231382e302f32342d3234203d3e20323637353630.roa (raw, json)
Hash identifier:          339Nx0GJfXHazxFhEgnx8zYMdvLgEfk/2JxU69dYK3o=
Subject key identifier:   5E:E8:70:8D:9F:CC:93:02:6F:84:BD:AF:7B:C4:15:79:8C:4E:34:FA
Certificate issuer:       /CN=C01FB9EA4199295499428B52E0720A6F2480922E
Certificate serial:       1ACCA8FB5CBB27480FB86437CB2B208F7EB00478
Authority key identifier: C0:1F:B9:EA:41:99:29:54:99:42:8B:52:E0:72:0A:6F:24:80:92:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01FB9EA4199295499428B52E0720A6F2480922E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231382e302f32342d3234203d3e20323637353630.roa
Signing time:             Sat 09 Dec 2023 18:15:32 +0000
ROA not before:           Sat 09 Dec 2023 18:10:32 +0000
ROA not after:            Sat 07 Dec 2024 18:15:32 +0000
asID:                     267560
IP address blocks:        181.191.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cc:a8:fb:5c:bb:27:48:0f:b8:64:37:cb:2b:20:8f:7e:b0:04:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01FB9EA4199295499428B52E0720A6F2480922E
        Validity
            Not Before: Dec  9 18:10:32 2023 GMT
            Not After : Dec  7 18:15:32 2024 GMT
        Subject: CN=5EE8708D9FCC93026F84BDAF7BC415798C4E34FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:16:b9:32:61:bf:d9:eb:99:51:7d:90:cc:66:
                    ec:59:72:b0:31:23:dc:e8:69:f8:2b:35:d0:72:83:
                    b1:45:f5:a6:01:79:cb:fe:d5:d1:59:a3:c9:3e:0b:
                    f5:d1:d3:0f:d1:d4:d9:01:95:7b:ff:2f:2c:35:ec:
                    d8:47:97:8a:21:7c:b0:f0:54:7a:80:0f:7e:bf:b1:
                    98:47:de:da:a9:f2:29:71:91:58:63:79:67:00:14:
                    19:b7:80:45:a1:7d:77:25:f4:3f:51:c3:ce:57:75:
                    45:60:29:49:80:66:d2:ca:1c:ac:52:9e:d7:0f:c1:
                    71:b0:37:b8:31:14:1b:4b:ad:b9:08:66:ca:be:c7:
                    0d:ff:39:fc:d6:c2:d1:9c:32:a8:2a:82:47:e1:fe:
                    7e:84:15:1f:23:9b:0c:fe:7f:5c:af:bf:fa:54:4b:
                    1d:93:a1:48:1a:fb:3b:1a:cb:1c:85:e4:71:42:8b:
                    ee:b9:dc:4d:70:65:63:c1:2a:21:67:57:33:e8:ec:
                    4d:42:69:bd:29:f0:5d:ea:de:b3:46:56:27:3e:e8:
                    76:f5:12:3c:01:e9:84:aa:1d:f8:8a:27:0a:06:c0:
                    cc:79:55:08:6a:f2:14:59:46:a2:d3:25:6f:37:0e:
                    70:7c:8f:ab:24:60:aa:ef:6b:a0:50:17:4b:0f:ac:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E8:70:8D:9F:CC:93:02:6F:84:BD:AF:7B:C4:15:79:8C:4E:34:FA
            X509v3 Authority Key Identifier:
                keyid:C0:1F:B9:EA:41:99:29:54:99:42:8B:52:E0:72:0A:6F:24:80:92:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/C01FB9EA4199295499428B52E0720A6F2480922E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01FB9EA4199295499428B52E0720A6F2480922E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231382e302f32342d3234203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:e9:04:75:56:6b:2b:25:84:9c:56:d0:3c:27:43:0e:9b:48:
         8d:19:9a:ca:0d:d7:e8:03:0d:18:03:a3:96:52:66:ad:99:ac:
         37:df:93:cc:f4:90:a9:0b:b1:19:10:d2:c7:83:43:89:93:83:
         7c:e8:d2:4b:41:12:ee:6b:1b:c8:62:b6:5a:53:0c:94:75:ff:
         9b:d3:28:b8:a1:95:3a:6c:4e:55:d1:4c:e7:99:18:9b:a5:2f:
         b3:34:03:13:ca:66:b0:83:28:89:fe:a0:d8:42:51:ef:3c:57:
         d5:73:d9:d0:3c:6c:ce:3c:17:34:37:d6:ba:11:7d:93:d7:9d:
         c0:65:72:f4:c3:98:ba:3e:ac:73:47:e4:24:ad:ca:e3:1a:f5:
         8c:cc:2a:72:69:2e:eb:db:7b:de:87:7a:1d:8c:b7:22:4b:96:
         f6:d2:02:c2:de:de:5c:a4:1d:eb:8c:19:b7:b2:a3:01:9b:b0:
         b5:71:53:74:e0:73:86:2d:e1:86:de:75:5e:a0:78:27:d4:55:
         2e:5d:41:75:5d:ed:da:52:2c:c7:75:d5:4b:d2:ab:b6:44:2d:
         db:9b:22:98:f4:81:1b:82:5a:1e:fa:9a:e8:34:fe:d3:e4:a5:
         69:85:35:fa:d6:4d:1b:b2:f3:af:4a:26:81:2d:6e:0d:f3:d8:
         32:df:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org