Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130372e302f32342d3234203d3e20323731333930.roa
File:                     3138312e3138392e3130372e302f32342d3234203d3e20323731333930.roa (raw, json)
Hash identifier:          fX2yF0W32iG4uTdK6IGRams/P4cADYPcWzP7aK0NcWE=
Subject key identifier:   30:F3:96:DF:E1:03:10:60:1C:E4:F4:B3:53:15:5F:DE:17:E0:6C:DB
Certificate issuer:       /CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
Certificate serial:       36104CD835BCA62344A51AF55B397A345B208CE5
Authority key identifier: 4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130372e302f32342d3234203d3e20323731333930.roa
Signing time:             Fri 12 Apr 2024 16:19:57 +0000
ROA not before:           Fri 12 Apr 2024 16:14:57 +0000
ROA not after:            Fri 11 Apr 2025 16:19:57 +0000
asID:                     271390
IP address blocks:        181.189.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:10:4c:d8:35:bc:a6:23:44:a5:1a:f5:5b:39:7a:34:5b:20:8c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
        Validity
            Not Before: Apr 12 16:14:57 2024 GMT
            Not After : Apr 11 16:19:57 2025 GMT
        Subject: CN=30F396DFE10310601CE4F4B353155FDE17E06CDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9e:54:71:f3:59:16:52:20:e2:be:55:7e:96:
                    81:71:2f:a7:4e:5d:c1:c0:ea:fa:96:66:9d:9e:98:
                    c4:39:bb:ac:f6:45:15:e8:69:dc:ba:42:e2:91:f4:
                    d5:76:17:a2:e8:4b:56:7c:af:b7:72:e1:f8:17:a9:
                    91:08:b2:6a:5d:71:01:71:13:5c:66:c3:ea:88:6a:
                    48:3c:0a:9c:59:07:9d:bb:eb:15:fa:7f:27:5a:17:
                    40:9d:d6:81:2f:a5:e8:49:67:b9:58:05:0b:f5:2d:
                    9d:c6:5e:75:d4:4a:bf:49:00:0b:63:04:eb:19:4d:
                    34:f1:5c:25:cf:e5:0e:c8:ef:f8:fb:02:46:8b:3f:
                    65:8c:7c:32:df:0e:67:c0:d9:03:2f:64:68:84:fc:
                    4d:c9:9d:8b:6d:79:30:be:91:98:63:de:5a:e2:61:
                    2a:8b:68:7a:31:ae:60:07:c1:21:b1:a5:27:44:ce:
                    1c:34:a2:b7:6f:c6:ab:5c:0e:04:75:50:fa:11:fc:
                    d2:c7:95:82:b6:16:d2:e5:46:02:6f:2e:1e:ad:ba:
                    e4:b4:0f:4e:71:9c:c7:97:38:cc:80:95:aa:1b:fa:
                    c6:92:94:6e:d7:68:64:5e:25:49:71:e1:6b:96:63:
                    3f:12:7a:d4:01:f6:4a:cb:30:36:1e:c4:d6:80:f0:
                    93:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F3:96:DF:E1:03:10:60:1C:E4:F4:B3:53:15:5F:DE:17:E0:6C:DB
            X509v3 Authority Key Identifier:
                keyid:4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/3138312e3138392e3130372e302f32342d3234203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:cb:28:74:bc:25:18:b5:4f:5d:4a:46:4c:95:f4:9a:05:f2:
         36:40:44:67:c5:fd:4d:57:34:13:66:c5:f6:9a:e4:7f:01:c6:
         53:57:12:3a:de:df:33:4b:55:8b:08:e4:62:9c:2a:0b:8e:8a:
         19:72:6e:f8:5d:d8:99:82:56:5d:29:a3:51:bd:b1:c3:aa:ae:
         cc:a1:b0:18:8f:24:4a:75:cf:21:92:52:4a:78:3e:cb:05:33:
         3c:dd:17:65:2f:9c:3b:7f:cf:09:45:ea:3c:43:ee:63:ef:37:
         26:fd:02:72:60:3f:01:ef:04:33:df:f3:4d:d4:f9:82:8a:8f:
         cc:2e:5b:ef:e0:fb:22:a9:4d:b0:c0:f0:f4:6e:f9:94:9e:48:
         4f:31:52:f8:e4:4f:b8:09:62:a5:2f:5f:23:c2:75:23:5d:de:
         64:a4:eb:f3:b0:cf:0b:2c:ba:9b:1d:e4:dc:a7:e7:78:55:5c:
         5f:1c:ac:05:65:e0:c9:c9:92:e6:9f:b9:fc:3e:10:29:f0:d1:
         28:25:8d:d0:36:ab:8b:0c:59:0a:94:c6:ad:ae:45:3a:4e:a7:
         4e:98:7c:8e:ba:e8:11:d9:8f:ce:90:15:8c:1d:ab:d6:02:4e:
         dd:0d:d7:03:58:c7:ea:ca:93:a5:fe:4d:b6:5a:9e:35:ee:6f:
         c3:c1:72:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:36 2025 by rpki-client