Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133382e302f32332d3233203d3e20323731333535.roa
File:                     3138312e3233322e3133382e302f32332d3233203d3e20323731333535.roa (raw, json)
Hash identifier:          nx4RPMXYW0tQV+QommnGMzQLNnhhvNAvwh42SqMQWEY=
Subject key identifier:   EB:5F:FB:74:DD:6A:57:8E:EC:95:58:6B:39:22:65:13:CA:37:5D:21
Certificate issuer:       /CN=F5A743CB79514A022DEC422535A63FCBFC40185B
Certificate serial:       78C611333712AB95BE9E02BC35A7D189F78041DF
Authority key identifier: F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133382e302f32332d3233203d3e20323731333535.roa
Signing time:             Thu 07 Nov 2024 16:43:28 +0000
ROA not before:           Thu 07 Nov 2024 16:38:28 +0000
ROA not after:            Thu 06 Nov 2025 16:43:28 +0000
asID:                     271355
IP address blocks:        181.232.138.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c6:11:33:37:12:ab:95:be:9e:02:bc:35:a7:d1:89:f7:80:41:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A743CB79514A022DEC422535A63FCBFC40185B
        Validity
            Not Before: Nov  7 16:38:28 2024 GMT
            Not After : Nov  6 16:43:28 2025 GMT
        Subject: CN=EB5FFB74DD6A578EEC95586B39226513CA375D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:c2:09:c4:42:26:fd:00:35:05:fe:9c:fd:
                    56:26:5c:86:21:35:61:37:0b:2e:48:8e:35:65:27:
                    f2:5d:63:8f:1d:56:8e:21:f3:b3:5c:cc:9b:d5:17:
                    94:76:f4:3c:a9:84:ac:3c:f5:72:cd:0f:0b:8c:82:
                    25:c0:f4:1c:50:b5:2b:63:60:14:42:ae:43:e1:5d:
                    b0:db:40:df:46:da:52:bf:69:44:56:1f:37:fc:61:
                    49:18:f6:54:22:49:27:9b:d2:07:ba:85:5e:bc:56:
                    6c:ec:cf:d2:5c:61:a7:e4:36:fe:b7:10:78:c1:a5:
                    ca:54:20:ff:2f:17:44:dc:3e:f9:43:52:c9:0a:78:
                    4e:25:6a:d2:c5:27:e1:5a:4f:55:e8:19:3d:e8:3b:
                    c6:80:9c:c6:51:71:18:5b:ab:50:50:f7:ce:de:7d:
                    94:af:48:a1:96:84:d2:55:bc:49:5f:99:f3:c9:06:
                    13:56:80:ea:d1:21:2a:ea:72:92:15:2c:26:3c:59:
                    3f:86:f0:7d:90:d0:5c:1b:28:c3:7b:cf:2c:81:d7:
                    74:aa:f7:31:e1:95:10:26:45:98:e5:a1:e9:bc:1f:
                    2c:b0:37:f3:3f:1c:29:fb:2b:01:36:79:57:15:3d:
                    d1:98:d0:08:4a:cc:8f:84:d4:65:a6:90:70:09:fa:
                    62:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5F:FB:74:DD:6A:57:8E:EC:95:58:6B:39:22:65:13:CA:37:5D:21
            X509v3 Authority Key Identifier:
                keyid:F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/F5A743CB79514A022DEC422535A63FCBFC40185B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133382e302f32332d3233203d3e20323731333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:b1:86:b6:58:cc:6d:03:4d:71:57:86:5a:a1:81:de:ea:31:
         1c:16:94:4a:00:21:2d:cd:79:ff:94:90:f2:fa:ab:18:46:26:
         f8:14:4c:9e:23:2b:f8:4f:ea:b8:14:a4:6d:75:29:11:71:54:
         2e:84:68:4a:b5:3c:7a:57:33:ec:24:07:ef:b5:34:de:78:55:
         29:3c:ee:b8:66:c3:36:89:42:e4:97:f2:87:80:3b:18:1f:bf:
         c3:0b:16:48:9e:bc:31:3c:55:d7:64:7c:39:b6:5c:4e:6b:cb:
         eb:2d:a7:c5:54:01:4f:c9:91:94:9e:23:44:25:9a:cf:83:fb:
         f1:99:9a:3c:66:87:96:c3:01:eb:e5:ba:4e:40:07:a0:6f:05:
         2b:d5:34:09:e5:de:ce:c8:96:da:44:f4:1a:b8:1d:0f:b5:e1:
         f4:ad:dc:27:28:1e:be:f6:c3:7a:22:78:b6:e2:c5:50:b2:5c:
         da:0d:86:ec:53:74:85:26:b9:c7:c4:aa:fb:84:70:a7:38:94:
         c8:fe:9b:19:6a:df:a5:18:0b:79:14:32:14:27:43:a9:40:94:
         40:23:93:ff:e7:53:8e:d9:ac:ee:c5:ce:f9:64:4c:47:d0:c2:
         c1:bc:46:56:dd:6c:dd:24:07:bd:d8:f9:34:c3:ce:8a:c1:1e:
         29:88:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:11:21 2025 by rpki-client