Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/3138312e3232342e37362e302f32332d3233203d3e20323731343932.roa
File:                     3138312e3232342e37362e302f32332d3233203d3e20323731343932.roa (raw, json)
Hash identifier:          tHc1g6BcdzBXYyp1CuVrU0rKmFm2pZ+QuZuK4jshIno=
Subject key identifier:   42:AE:87:DA:CF:23:DF:DA:75:95:A1:2C:D8:69:A3:60:F8:A1:B5:0D
Certificate issuer:       /CN=0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB
Certificate serial:       49C4048460717E0B2508C6CC2617B443D8A9D031
Authority key identifier: 0F:F0:34:B9:BE:86:ED:04:F4:7C:8E:99:B1:7F:D2:2F:D9:B5:8B:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/3138312e3232342e37362e302f32332d3233203d3e20323731343932.roa
Signing time:             Sat 10 Jun 2023 14:00:29 +0000
ROA not before:           Sat 10 Jun 2023 13:55:29 +0000
ROA not after:            Sat 08 Jun 2024 14:00:29 +0000
asID:                     271492
IP address blocks:        181.224.76.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c4:04:84:60:71:7e:0b:25:08:c6:cc:26:17:b4:43:d8:a9:d0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB
        Validity
            Not Before: Jun 10 13:55:29 2023 GMT
            Not After : Jun  8 14:00:29 2024 GMT
        Subject: CN=42AE87DACF23DFDA7595A12CD869A360F8A1B50D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:2c:f0:ae:1a:7c:83:96:12:45:b3:24:4f:
                    43:75:d4:4d:f4:6c:fe:a2:9f:5e:27:c0:11:07:7b:
                    39:2a:ff:70:70:c3:d1:84:99:3b:09:b8:98:1e:b2:
                    1e:3b:3e:84:ba:fb:6c:9c:0b:6c:a8:57:0d:36:3c:
                    06:6a:e0:ec:c8:30:1c:19:f7:9f:2b:54:62:7f:6c:
                    82:3b:8c:0f:37:4c:c8:78:00:67:48:19:a2:72:40:
                    6f:35:6f:04:71:e1:4f:ad:e3:65:41:21:d7:a6:49:
                    69:fd:68:26:ca:e6:0c:a5:d1:ac:21:08:30:6f:da:
                    01:21:b0:e8:04:49:22:d7:11:84:4b:88:bc:68:f4:
                    96:14:90:a3:bc:fb:88:28:5a:f6:00:36:b2:ca:5c:
                    1d:5d:1e:a8:29:0f:02:4f:30:19:8e:58:f9:23:b3:
                    6e:66:89:6e:d0:b4:55:0e:7b:99:35:aa:c5:cf:3a:
                    d8:24:11:4c:55:76:30:ed:53:c4:55:b4:34:b4:4f:
                    2f:33:71:00:f4:ea:41:50:66:a2:b1:de:70:fc:37:
                    5e:b8:21:41:7a:76:b6:13:7f:9c:08:ed:a1:1b:4d:
                    c6:78:c8:37:3f:23:98:4a:5c:08:b6:18:78:22:19:
                    b4:19:ef:24:38:d7:e5:54:a0:9c:59:47:f5:6b:14:
                    af:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AE:87:DA:CF:23:DF:DA:75:95:A1:2C:D8:69:A3:60:F8:A1:B5:0D
            X509v3 Authority Key Identifier:
                keyid:0F:F0:34:B9:BE:86:ED:04:F4:7C:8E:99:B1:7F:D2:2F:D9:B5:8B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF034B9BE86ED04F47C8E99B17FD22FD9B58BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/1/3138312e3232342e37362e302f32332d3233203d3e20323731343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:e4:eb:bf:13:4d:97:02:db:9d:81:15:13:6d:f4:d1:07:88:
         c1:a7:70:5f:e5:03:c6:4e:dd:1c:e7:b0:65:40:03:84:47:31:
         91:0e:a9:ed:f7:f0:f2:b1:95:d9:43:43:40:ac:f9:32:0b:d5:
         42:3e:3f:31:c8:6a:fa:de:eb:c4:a9:4a:b6:0c:30:b0:5c:3a:
         28:e4:71:7f:d6:45:5b:4d:c7:e3:af:15:1f:f6:7b:2e:89:18:
         5e:c8:a0:fc:0a:cb:c0:62:5b:10:29:7c:ba:c5:e3:eb:a4:e9:
         8c:24:e1:b2:01:76:4b:e2:c0:15:d0:c2:48:7b:c7:d8:a4:00:
         96:4b:a4:94:8d:67:2d:53:25:06:c5:e6:2f:80:c1:be:db:99:
         e6:25:8d:b9:fc:f7:57:ee:11:69:f0:1e:d3:ad:5b:f6:35:d5:
         6a:d9:4a:c0:49:98:c0:4f:f8:76:bc:49:44:35:77:47:70:1d:
         9b:13:7c:19:45:4b:b8:cf:27:ca:5a:23:dd:01:ce:75:80:85:
         2d:4d:21:8b:70:54:a9:dc:27:23:3c:14:69:90:38:f2:cc:5a:
         96:14:35:07:24:0c:61:bf:1d:ca:04:de:5b:54:7f:cd:0e:8f:
         9f:87:33:bd:e5:21:55:d7:a5:4d:a8:d2:8a:18:50:0c:c8:61:
         9c:57:a6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:55:14 2025 by rpki-client