Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/3138312e3137342e3233362e302f32332d3234203d3e20323632383437.roa
File:                     3138312e3137342e3233362e302f32332d3234203d3e20323632383437.roa (raw, json)
Hash identifier:          6htwEkBGTWlunyqJUnlUCx5RoOX4bkt29gheb//8JY0=
Subject key identifier:   49:EF:F3:F9:F6:35:E4:89:0C:0E:D4:9C:F7:FD:19:6B:19:19:B7:20
Certificate issuer:       /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial:       471D1A630469D5E34560F4AE5C4082CB25D7FC8A
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/3138312e3137342e3233362e302f32332d3234203d3e20323632383437.roa
Signing time:             Sun 11 Dec 2022 18:41:34 +0000
ROA not before:           Sun 11 Dec 2022 18:36:34 +0000
ROA not after:            Sun 10 Dec 2023 18:41:34 +0000
asID:                     262847
IP address blocks:        181.174.236.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1d:1a:63:04:69:d5:e3:45:60:f4:ae:5c:40:82:cb:25:d7:fc:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
        Validity
            Not Before: Dec 11 18:36:34 2022 GMT
            Not After : Dec 10 18:41:34 2023 GMT
        Subject: CN=49EFF3F9F635E4890C0ED49CF7FD196B1919B720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:03:f7:8b:66:5e:d4:96:03:ad:b4:ef:4e:55:
                    8d:31:ec:cf:59:e6:4e:cb:10:2e:f0:a7:c0:14:bf:
                    6e:99:7c:1c:b7:f0:da:8f:f7:9c:53:e3:d2:9b:2d:
                    15:46:86:09:c4:aa:86:1f:ae:74:d0:c6:c2:c5:5a:
                    d8:7b:14:47:57:d8:5c:9c:57:5c:f4:8e:51:50:dd:
                    e6:fd:46:98:10:db:0e:88:2e:fe:38:0c:6a:e7:1f:
                    f6:a6:4a:71:07:1c:e2:76:d6:7d:d5:82:9c:c8:77:
                    00:ca:89:99:eb:7d:bd:ba:cb:8b:2a:2b:3f:40:1b:
                    1b:fc:16:92:40:d4:54:8c:b5:64:d1:98:76:29:41:
                    07:8f:ca:f0:fd:38:20:5e:8b:a9:93:f0:26:f7:4a:
                    87:d8:d2:95:11:e7:82:d1:d5:42:7f:81:2f:a3:36:
                    37:4d:1c:71:07:4e:8e:f0:e9:c7:a8:19:6a:77:c4:
                    17:6c:3c:0a:91:40:d4:6b:76:d9:40:97:28:2e:f0:
                    49:25:d4:53:71:95:62:38:76:28:43:97:38:ef:8a:
                    a7:0a:bf:b9:27:73:14:9b:89:4e:f6:3b:c5:37:c8:
                    4c:c8:3d:a6:1d:ce:e3:ed:7e:08:c5:5a:02:04:94:
                    ad:b6:d2:75:a1:4e:f5:c8:8f:24:e9:22:eb:02:24:
                    70:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EF:F3:F9:F6:35:E4:89:0C:0E:D4:9C:F7:FD:19:6B:19:19:B7:20
            X509v3 Authority Key Identifier:
                keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/3138312e3137342e3233362e302f32332d3234203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:d0:91:64:83:60:a6:21:7e:7c:41:73:e8:9a:f3:93:f3:6b:
         7e:02:05:54:57:99:8f:1c:64:96:a2:86:44:80:73:0e:c7:61:
         92:b8:88:4e:fe:e9:5e:64:01:4e:a6:45:59:d9:27:4a:37:98:
         5c:b3:fb:46:31:5a:8c:2a:41:b8:e4:db:10:5b:cf:49:a3:f3:
         73:78:15:8f:6a:62:4e:05:f6:b9:97:19:fa:ef:35:aa:b6:38:
         92:76:58:d7:76:c5:c0:34:64:d0:86:9d:b2:b7:d3:c1:70:fe:
         17:f1:eb:0b:7f:ba:f9:f9:69:2a:25:19:aa:4c:85:f1:49:d3:
         48:46:d5:18:0d:c5:f7:05:dc:93:29:e4:6e:05:78:4c:5f:1b:
         83:d0:4c:bc:1d:30:6b:7d:0d:1f:7d:12:ce:59:6d:a7:43:f2:
         11:90:17:87:55:91:c1:0a:23:a0:6f:fc:32:ed:37:2b:5b:b5:
         ec:bd:ba:7c:99:c6:34:45:d3:e2:fc:fa:4d:38:26:05:5d:dd:
         44:2e:6e:07:14:6a:cd:72:5b:83:1e:33:c9:fc:3d:94:f3:20:
         1d:6c:47:d3:44:ea:37:f2:0d:e6:64:e4:9a:10:ff:2d:9b:03:
         34:51:77:5f:80:90:89:be:b9:32:ae:9a:6e:ed:eb:08:ae:d3:
         9d:d3:63:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:16:58 2025 by rpki-client