Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32352d3235203d3e20323731343834.roa
File:                     3138312e3233332e31382e302f32352d3235203d3e20323731343834.roa (raw, json)
Hash identifier:          KypnfSE3naesNdJzxZSfdo5/1ENrYd/I1mvdlNHKMEU=
Subject key identifier:   B0:82:1A:68:7F:9E:48:B3:9F:F0:76:C3:07:9E:58:11:E8:95:63:68
Certificate issuer:       /CN=3901F783C8B071E55EC65DEEA1779A7234220063
Certificate serial:       1D1F8C9EA50A85CC9FD02E6611B93E49D6D10318
Authority key identifier: 39:01:F7:83:C8:B0:71:E5:5E:C6:5D:EE:A1:77:9A:72:34:22:00:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3901F783C8B071E55EC65DEEA1779A7234220063.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32352d3235203d3e20323731343834.roa
Signing time:             Fri 29 Sep 2023 03:00:09 +0000
ROA not before:           Fri 29 Sep 2023 02:55:09 +0000
ROA not after:            Fri 27 Sep 2024 03:00:09 +0000
asID:                     271484
IP address blocks:        181.233.18.0/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:1f:8c:9e:a5:0a:85:cc:9f:d0:2e:66:11:b9:3e:49:d6:d1:03:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3901F783C8B071E55EC65DEEA1779A7234220063
        Validity
            Not Before: Sep 29 02:55:09 2023 GMT
            Not After : Sep 27 03:00:09 2024 GMT
        Subject: CN=B0821A687F9E48B39FF076C3079E5811E8956368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:b9:75:2b:c4:d4:3a:65:9b:a5:61:1b:8e:
                    29:50:00:12:70:ea:bd:68:f1:af:c6:c7:82:2b:9c:
                    e9:39:1d:a3:a3:5e:e2:33:e9:85:38:6f:01:d5:b5:
                    94:11:2c:ab:51:96:1c:89:69:69:3a:2f:a9:56:a5:
                    59:eb:04:e7:72:db:1d:4b:e0:b1:08:16:9d:da:f8:
                    9d:d1:a5:d5:6b:bd:05:b3:73:51:bc:ee:a7:24:42:
                    ad:c2:1e:17:2b:63:6b:b4:ac:df:db:7b:dc:6c:90:
                    1a:ce:bf:a8:bb:fe:31:e3:78:e8:e5:0b:d5:31:d1:
                    15:90:2a:16:ce:7a:97:4d:08:85:08:3b:48:27:02:
                    16:3d:41:63:c2:d8:93:48:18:91:62:95:1f:14:ff:
                    f6:a6:39:4b:af:c9:e9:f5:9d:b8:a6:2f:5a:8a:84:
                    f3:e3:70:02:2a:5a:97:7d:a2:e6:cf:06:33:5b:7b:
                    17:66:45:1b:28:3b:96:ce:e0:59:5e:37:6a:bd:dd:
                    80:cb:18:23:f1:94:19:81:15:73:6b:76:ce:b0:02:
                    a4:8d:81:77:d1:06:68:bc:7f:33:ef:7a:54:7e:a9:
                    07:6f:b8:41:d0:cc:ff:7a:4f:36:c7:8c:4b:2f:f8:
                    13:b4:01:32:db:dd:83:cd:e8:bb:b2:3a:32:25:46:
                    bc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:82:1A:68:7F:9E:48:B3:9F:F0:76:C3:07:9E:58:11:E8:95:63:68
            X509v3 Authority Key Identifier:
                keyid:39:01:F7:83:C8:B0:71:E5:5E:C6:5D:EE:A1:77:9A:72:34:22:00:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3901F783C8B071E55EC65DEEA1779A7234220063.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3901F783C8B071E55EC65DEEA1779A7234220063.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31382e302f32352d3235203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.18.0/25

    Signature Algorithm: sha256WithRSAEncryption
         5c:31:a0:a0:90:a2:e1:33:92:a1:cb:57:70:6b:a7:96:1d:d7:
         d4:d8:e3:73:50:72:ec:5e:96:1e:67:0d:e8:1c:7c:2c:e5:54:
         7f:73:d4:0b:12:e8:3e:0d:05:df:90:5d:35:22:ae:11:67:e5:
         61:9e:74:8f:af:8f:fc:7b:73:d5:08:2a:35:87:2a:95:a0:8b:
         5d:db:4d:7f:53:fa:0d:27:ad:90:4d:d2:38:86:09:85:46:c0:
         5a:8e:b5:74:b8:43:f8:a8:11:8b:cd:7e:96:27:ef:90:c1:63:
         22:85:bd:28:ab:2e:a0:98:91:05:15:bb:a0:fb:c7:6a:25:2c:
         07:5c:e9:cb:86:b4:cc:da:48:74:5b:d0:aa:3c:9a:5b:35:d6:
         5a:d4:75:76:c2:2e:17:ba:c3:40:43:b0:4f:eb:15:84:ea:56:
         0c:51:05:49:df:0d:e7:13:31:98:ce:f0:b5:ce:a0:0a:39:fd:
         22:dc:97:db:fd:f8:6d:b0:07:0f:27:a0:a4:08:90:98:72:cd:
         25:02:40:1b:27:b4:1a:73:d5:2c:39:5c:fd:71:8a:4d:19:87:
         24:de:b6:ed:eb:a0:aa:be:f7:9a:09:0a:59:96:c5:a4:7c:ff:
         15:76:1f:97:bf:68:3a:da:48:6f:db:9b:5e:33:7b:b0:a2:6c:
         ff:e8:c1:b9
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUHR+MnqUKhcyf0C5mEbk+SdbRAxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkwMUY3ODNDOEIwNzFFNTVFQzY1REVFQTE3NzlBNzIz
NDIyMDA2MzAeFw0yMzA5MjkwMjU1MDlaFw0yNDA5MjcwMzAwMDlaMDMxMTAvBgNV
BAMTKEIwODIxQTY4N0Y5RTQ4QjM5RkYwNzZDMzA3OUU1ODExRTg5NTYzNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcObl1K8TUOmWbpWEbjilQABJw
6r1o8a/Gx4IrnOk5HaOjXuIz6YU4bwHVtZQRLKtRlhyJaWk6L6lWpVnrBOdy2x1L
4LEIFp3a+J3RpdVrvQWzc1G87qckQq3CHhcrY2u0rN/be9xskBrOv6i7/jHjeOjl
C9Ux0RWQKhbOepdNCIUIO0gnAhY9QWPC2JNIGJFilR8U//amOUuvyen1nbimL1qK
hPPjcAIqWpd9oubPBjNbexdmRRsoO5bO4FleN2q93YDLGCPxlBmBFXNrds6wAqSN
gXfRBmi8fzPvelR+qQdvuEHQzP96TzbHjEsv+BO0ATLb3YPN6LuyOjIlRrwpAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUsIIaaH+eSLOf8HbDB55YEeiVY2gwHwYDVR0j
BBgwFoAUOQH3g8iwceVexl3uoXeacjQiAGMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFZyUGRDckJwdURwZnFVeWlKYkYyaWpSdmp0Y0tQclhVa1RWN3lMdmdv
azQvMC8zOTAxRjc4M0M4QjA3MUU1NUVDNjVERUVBMTc3OUE3MjM0MjIwMDYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM5MDFGNzgzQzhCMDcxRTU1
RUM2NURFRUExNzc5QTcyMzQyMjAwNjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRWclBkQ3JCcHVEcGZxVXlpSmJGMmlqUnZqdGNLUHJYVWtUVjd5THZnb2s0LzAv
MzEzODMxMmUzMjMzMzMyZTMxMzgyZTMwMmYzMjM1MmQzMjM1MjAzZDNlMjAzMjM3
MzEzNDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgABMAcDBQe16RIAMA0GCSqGSIb3DQEBCwUAA4IBAQBcMaCg
kKLhM5Khy1dwa6eWHdfU2ONzUHLsXpYeZw3oHHws5VR/c9QLEug+DQXfkF01Iq4R
Z+VhnnSPr4/8e3PVCCo1hyqVoItd201/U/oNJ62QTdI4hgmFRsBajrV0uEP4qBGL
zX6WJ++QwWMihb0oqy6gmJEFFbug+8dqJSwHXOnLhrTM2kh0W9CqPJpbNdZa1HV2
wi4XusNAQ7BP6xWE6lYMUQVJ3w3nEzGYzvC1zqAKOf0i3Jfb/fhtsAcPJ6CkCJCY
cs0lAkAbJ7Qac9UsOVz9cYpNGYck3rbt66CqvveaCQpZlsWkfP8Vdh+Xv2g62khv
25teM3uwomz/6MG5
-----END CERTIFICATE-----
Generated at Fri Mar 14 05:23:02 2025 by rpki-client