Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133372e302f32342d3234203d3e20323731333535.roa
File:                     3138312e3233322e3133372e302f32342d3234203d3e20323731333535.roa (raw, json)
Hash identifier:          sG/EiSUuuToIWKEdISQt4pgXOWye5o/O7EZoNzuyL+c=
Subject key identifier:   35:C5:08:B7:35:29:9D:66:DA:53:D3:04:4A:30:C1:B1:81:26:FB:65
Certificate issuer:       /CN=F5A743CB79514A022DEC422535A63FCBFC40185B
Certificate serial:       429F3F6B352FB73FD400649BFEB391A9E81898E0
Authority key identifier: F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133372e302f32342d3234203d3e20323731333535.roa
Signing time:             Thu 07 Nov 2024 16:43:26 +0000
ROA not before:           Thu 07 Nov 2024 16:38:26 +0000
ROA not after:            Thu 06 Nov 2025 16:43:26 +0000
asID:                     271355
IP address blocks:        181.232.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9f:3f:6b:35:2f:b7:3f:d4:00:64:9b:fe:b3:91:a9:e8:18:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A743CB79514A022DEC422535A63FCBFC40185B
        Validity
            Not Before: Nov  7 16:38:26 2024 GMT
            Not After : Nov  6 16:43:26 2025 GMT
        Subject: CN=35C508B735299D66DA53D3044A30C1B18126FB65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:6f:e0:3e:4d:59:0e:4e:66:91:f9:c3:6f:
                    ed:8a:96:30:5a:87:29:df:44:da:3a:a7:c7:6a:b1:
                    03:70:9a:d2:a5:61:2f:56:cd:ae:a7:18:01:19:6a:
                    85:e1:e4:5b:98:1f:02:fd:6b:53:4a:ff:ec:27:73:
                    ee:a5:7a:13:6e:71:1d:3c:73:7d:62:2f:03:5c:4b:
                    06:b3:69:b8:a4:6e:5f:10:c5:62:b1:98:ea:f5:e0:
                    0b:55:7e:95:9f:77:3e:c6:ee:c9:10:4f:bb:19:13:
                    fd:29:83:19:7f:1b:17:6e:f6:b9:c1:a4:86:f2:7a:
                    5f:07:ac:bf:37:bc:b1:7d:92:f5:f5:3a:6d:e2:ed:
                    cb:a5:62:e3:0c:76:ac:08:ea:a0:be:c6:7f:bc:c6:
                    93:10:22:34:72:2d:53:8c:2b:4e:5a:fd:b0:b0:b1:
                    ea:e6:92:c0:1a:2b:0c:ff:25:e5:94:ad:25:f7:7b:
                    eb:ff:27:8f:1b:19:70:6b:94:e1:b0:a8:cb:51:a9:
                    a1:5b:33:b5:47:89:ad:9b:d4:73:7f:df:ca:da:ac:
                    62:7a:db:9f:d1:f3:7d:be:14:31:6e:d7:f7:24:88:
                    69:60:2f:7e:c1:c0:7b:86:af:8b:ec:7e:3a:08:49:
                    f8:44:80:6b:0e:97:bb:40:ec:4f:e4:29:13:9b:07:
                    84:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C5:08:B7:35:29:9D:66:DA:53:D3:04:4A:30:C1:B1:81:26:FB:65
            X509v3 Authority Key Identifier:
                keyid:F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/F5A743CB79514A022DEC422535A63FCBFC40185B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133372e302f32342d3234203d3e20323731333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:92:44:8d:78:25:e5:c4:8b:04:04:13:a3:fc:f9:52:f7:82:
         6c:34:8c:68:ec:2d:c2:7b:20:a9:2a:a8:06:0f:19:b5:20:d1:
         c2:dc:ca:e4:06:f8:ee:f7:1f:8f:7a:1c:dc:2d:d2:8e:46:25:
         b0:bd:02:b5:a6:12:f7:10:38:67:25:40:c5:6f:b4:c0:9b:2b:
         cb:66:a9:60:6f:f4:26:6a:03:36:b1:1d:7d:d2:96:b4:ff:03:
         3b:17:06:66:95:eb:06:b5:b2:5f:55:45:29:44:87:e9:40:97:
         34:86:0f:36:44:1d:c8:b3:a9:af:e6:33:13:a2:af:c4:40:68:
         e6:ee:cb:f4:8e:18:06:0a:66:89:be:99:3f:23:6a:e2:15:3f:
         74:e6:ea:c5:be:74:e4:45:f0:e1:9a:6f:34:f3:7b:c7:6e:e3:
         a2:96:89:32:36:ba:fa:46:bc:fb:44:0a:6e:97:17:3f:5f:a0:
         40:fa:27:16:fa:7a:77:e6:40:a6:cf:f7:0a:39:e3:a3:6a:7a:
         47:53:f5:7f:83:39:62:71:bf:b9:c5:4c:34:10:3d:ed:20:16:
         bb:08:f0:59:52:ab:56:08:ed:97:63:e5:75:82:55:ee:cc:93:
         94:95:da:46:e1:33:d5:a8:8e:b4:84:f9:b3:8b:96:11:de:ab:
         8c:a9:b5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:11:49 2025 by rpki-client