Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/3138312e3139312e3231362e302f32342d3234203d3e20323637353630.roa
File:                     3138312e3139312e3231362e302f32342d3234203d3e20323637353630.roa (raw, json)
Hash identifier:          8LWcqH030m4ALYRRAwPASbtfxDkdUcsVlpt2OEWhp3g=
Subject key identifier:   BF:49:6D:0A:56:DF:F7:CD:2C:49:70:17:9F:C7:98:A7:6C:5C:1E:4A
Certificate issuer:       /CN=08EDA787E9DEE1DD42901F0A35C48977DEF4E693
Certificate serial:       3CD578522E4C6448EAB881F2829F3F7FCD74DECA
Authority key identifier: 08:ED:A7:87:E9:DE:E1:DD:42:90:1F:0A:35:C4:89:77:DE:F4:E6:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08EDA787E9DEE1DD42901F0A35C48977DEF4E693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/3138312e3139312e3231362e302f32342d3234203d3e20323637353630.roa
Signing time:             Wed 03 Apr 2024 20:56:18 +0000
ROA not before:           Wed 03 Apr 2024 20:51:18 +0000
ROA not after:            Wed 02 Apr 2025 20:56:18 +0000
asID:                     267560
IP address blocks:        181.191.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d5:78:52:2e:4c:64:48:ea:b8:81:f2:82:9f:3f:7f:cd:74:de:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08EDA787E9DEE1DD42901F0A35C48977DEF4E693
        Validity
            Not Before: Apr  3 20:51:18 2024 GMT
            Not After : Apr  2 20:56:18 2025 GMT
        Subject: CN=BF496D0A56DFF7CD2C4970179FC798A76C5C1E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:63:c6:7e:5e:45:84:95:42:0a:6e:7d:fb:
                    83:dc:b0:4d:86:b1:3e:29:5a:90:0d:7a:db:91:30:
                    c7:5e:86:a9:55:bb:80:7e:c4:fa:52:76:00:36:73:
                    74:18:65:ed:5f:46:d7:11:9d:d9:30:d0:0d:b6:48:
                    c1:e4:dd:64:be:f6:80:f9:cd:d6:a9:9c:58:51:2f:
                    14:06:a8:25:cc:22:c0:1a:b6:72:79:38:58:5a:ac:
                    0c:76:e1:17:2d:e9:dd:23:36:c8:35:67:c2:67:a8:
                    14:ca:ab:55:c5:a8:e6:d7:f4:99:de:99:57:ef:30:
                    d8:b1:21:ba:80:00:4f:d5:6f:94:b0:8b:2a:20:e1:
                    68:8b:83:70:68:96:86:51:3a:21:64:df:18:6d:10:
                    3d:3e:40:d6:b1:52:00:05:44:d0:d8:af:12:0d:e2:
                    0d:54:c3:34:65:51:49:e7:b4:f9:41:24:87:30:0f:
                    a2:9f:dd:8b:b9:f7:c5:23:52:0b:d6:58:a3:a7:e5:
                    18:33:59:0c:ea:77:3c:b4:d6:d6:e6:16:c8:fd:4e:
                    ac:0e:e9:84:43:9b:f3:c7:2e:90:cd:00:6c:20:b3:
                    74:80:92:86:73:96:22:02:46:73:9a:53:8d:29:c0:
                    f2:f0:a2:fe:0a:42:24:c7:a8:36:ed:d7:d8:07:96:
                    b9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:49:6D:0A:56:DF:F7:CD:2C:49:70:17:9F:C7:98:A7:6C:5C:1E:4A
            X509v3 Authority Key Identifier:
                keyid:08:ED:A7:87:E9:DE:E1:DD:42:90:1F:0A:35:C4:89:77:DE:F4:E6:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/08EDA787E9DEE1DD42901F0A35C48977DEF4E693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08EDA787E9DEE1DD42901F0A35C48977DEF4E693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/3138312e3139312e3231362e302f32342d3234203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:03:48:03:36:41:d5:6b:6e:54:07:19:7d:5d:54:ad:dc:30:
         08:7c:12:08:02:f3:5d:e5:ed:18:96:dd:67:2a:1e:8f:25:b7:
         74:1a:fe:0e:06:ca:9c:20:51:33:6d:06:45:03:a6:de:fe:48:
         a4:b1:1c:65:ef:d2:8d:1a:9e:ed:0b:ef:d3:6c:97:95:f9:5b:
         e3:ce:09:a2:a5:3f:94:86:7c:37:5a:a9:95:be:7d:d0:7d:a8:
         a7:5f:64:a9:19:a1:72:1b:29:21:fb:92:55:cb:1c:ec:ef:7a:
         43:8c:f1:c0:f2:5e:59:99:8a:a2:58:ec:92:82:ca:a0:80:59:
         2e:cb:7c:c5:9a:c9:65:8c:f6:4b:11:c7:0f:f7:8f:52:c9:fd:
         ec:0f:8c:9e:64:86:49:f3:58:cf:ce:50:30:07:d2:a9:8b:7a:
         37:ef:4a:89:2f:e8:37:57:fb:02:be:6b:5c:ce:7c:ec:24:4d:
         de:15:04:43:f1:92:a5:47:8b:1b:58:a0:61:89:44:93:97:e5:
         54:d4:70:80:3b:62:2e:59:74:d9:22:f1:15:a6:8a:c3:a6:24:
         30:14:ef:e5:22:b9:ed:aa:e6:bd:25:82:5e:47:2c:68:e9:3b:
         59:16:20:77:fd:15:f1:cc:39:b5:c2:39:76:67:10:5a:40:9a:
         52:25:45:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org