Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa
File:                     3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa (raw, json)
Hash identifier:          KPtMT86kJEBLXuP4YyBmGeVaqWT/lDmxP0ESV8qnqy4=
Subject key identifier:   4A:66:7F:74:4C:DA:B9:6F:40:89:CE:65:46:4E:0E:94:1A:66:9F:76
Certificate issuer:       /CN=AC88E2B8518089044D3F00C0A71F5699DC4E11FA
Certificate serial:       422498F024D74A01ABF82318F55E69EC12B32067
Authority key identifier: AC:88:E2:B8:51:80:89:04:4D:3F:00:C0:A7:1F:56:99:DC:4E:11:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC88E2B8518089044D3F00C0A71F5699DC4E11FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa
Signing time:             Wed 25 Oct 2023 22:57:07 +0000
ROA not before:           Wed 25 Oct 2023 22:52:07 +0000
ROA not after:            Wed 23 Oct 2024 22:57:07 +0000
asID:                     271512
IP address blocks:        181.232.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:24:98:f0:24:d7:4a:01:ab:f8:23:18:f5:5e:69:ec:12:b3:20:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC88E2B8518089044D3F00C0A71F5699DC4E11FA
        Validity
            Not Before: Oct 25 22:52:07 2023 GMT
            Not After : Oct 23 22:57:07 2024 GMT
        Subject: CN=4A667F744CDAB96F4089CE65464E0E941A669F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:89:9b:a6:7a:6f:01:72:f9:7f:0b:8c:21:
                    69:79:bb:2c:fb:10:57:d8:f6:e6:5d:ad:40:c9:4e:
                    93:7b:be:7e:31:52:73:a1:8c:e2:d1:37:7d:5e:4d:
                    95:26:ec:cb:62:d4:03:01:0c:55:16:71:2c:cc:ed:
                    53:6e:b9:22:cf:c4:3d:7c:81:54:6f:06:02:96:64:
                    e5:5c:12:85:80:55:b9:23:2f:c4:92:88:79:dc:a2:
                    55:d5:89:4f:5e:b3:44:21:e6:78:e2:9d:ef:d8:34:
                    16:58:c5:9b:cf:91:93:15:85:3a:69:14:28:49:00:
                    e4:27:5c:8e:da:e2:bc:31:e9:eb:7c:2c:08:83:04:
                    05:d6:81:8c:0e:1f:4f:3f:53:e9:74:cd:7e:3e:0e:
                    26:33:a2:02:76:57:93:20:5d:29:61:bb:c8:63:1f:
                    77:cb:67:0f:ae:77:c6:d0:bf:f5:32:45:5d:da:2f:
                    41:84:8a:1e:c4:45:63:6f:72:67:1e:b8:ac:a3:04:
                    85:ae:37:bf:72:15:e6:e4:2b:24:02:e3:a4:03:7e:
                    e6:14:62:36:e4:2a:12:36:b2:81:ed:c0:94:94:a1:
                    c0:07:d0:a8:76:eb:bb:e1:20:30:42:2d:8e:26:6a:
                    b4:c6:5a:94:59:2a:df:0d:77:3f:1b:22:74:34:58:
                    43:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:66:7F:74:4C:DA:B9:6F:40:89:CE:65:46:4E:0E:94:1A:66:9F:76
            X509v3 Authority Key Identifier:
                keyid:AC:88:E2:B8:51:80:89:04:4D:3F:00:C0:A7:1F:56:99:DC:4E:11:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/AC88E2B8518089044D3F00C0A71F5699DC4E11FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC88E2B8518089044D3F00C0A71F5699DC4E11FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:87:5b:ab:9d:3f:2a:d2:f1:ba:87:45:da:be:56:ef:0c:69:
         0a:a8:0e:2f:2d:06:13:4f:f3:9f:04:d7:af:9b:09:bc:d8:23:
         cb:8c:2c:dc:4a:5a:f2:f3:7d:20:9d:a8:82:b7:97:3c:9b:89:
         32:93:10:e5:40:e7:ca:3f:5f:55:37:65:7e:45:77:b1:85:21:
         f5:01:f9:91:de:ae:c1:bf:19:e6:0c:c1:3c:55:d4:8c:33:1d:
         cc:9c:63:62:93:d4:de:41:30:b7:ea:18:05:a3:ae:cd:30:61:
         d6:97:cb:26:14:a4:90:97:61:7e:59:23:99:95:89:c5:8e:92:
         43:a4:9e:0c:d4:ea:ca:50:b0:26:d7:4d:9a:b7:8c:b6:05:4e:
         35:5b:3d:c3:7f:fe:2e:1d:c6:f8:79:3f:bc:1c:a8:2a:b9:e2:
         73:e9:75:04:e8:a3:ca:e3:3d:cb:ae:64:10:4c:3b:0e:fd:b5:
         cd:74:0e:74:22:0f:1f:7a:61:41:45:86:c8:c6:4c:2e:09:9a:
         8b:2d:1f:d9:b7:b9:be:94:27:1a:57:46:1a:2c:70:6b:e6:20:
         f3:7e:80:33:e3:f3:21:f7:0c:81:39:f7:5e:0e:ba:fc:30:db:
         c1:93:36:39:10:b1:0b:fc:ae:c1:7f:70:23:85:f3:7f:6b:10:
         25:e4:af:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org