Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/3138312e3138392e3130332e302f32342d3234203d3e20323731333938.roa
File:                     3138312e3138392e3130332e302f32342d3234203d3e20323731333938.roa (raw, json)
Hash identifier:          93TqJM5JmXNyp5riaD2s9kOBFjW8btpmsFBiEZcPF5g=
Subject key identifier:   09:ED:10:FC:77:5A:93:73:4C:84:11:16:ED:EF:4A:73:0B:E0:A7:84
Certificate issuer:       /CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
Certificate serial:       76A03B312E1E307E6D4B1B78571FAAB4819A7A2A
Authority key identifier: 7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/3138312e3138392e3130332e302f32342d3234203d3e20323731333938.roa
Signing time:             Tue 18 Feb 2025 18:40:51 +0000
ROA not before:           Tue 18 Feb 2025 18:35:51 +0000
ROA not after:            Tue 17 Feb 2026 18:40:51 +0000
asID:                     271398
IP address blocks:        181.189.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a0:3b:31:2e:1e:30:7e:6d:4b:1b:78:57:1f:aa:b4:81:9a:7a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
        Validity
            Not Before: Feb 18 18:35:51 2025 GMT
            Not After : Feb 17 18:40:51 2026 GMT
        Subject: CN=09ED10FC775A93734C841116EDEF4A730BE0A784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:52:ec:36:cb:c1:d9:d2:e4:c6:b6:7c:be:
                    16:8f:d5:8a:ce:09:e2:f9:81:2d:a2:b9:e2:23:1e:
                    2b:b0:38:33:15:5f:77:9c:de:d6:d8:de:3b:cd:85:
                    b3:9a:27:38:4e:7e:d3:5a:55:15:01:c4:1d:9f:d8:
                    cb:da:43:1e:f1:c9:f0:be:40:47:83:18:d7:7c:6c:
                    b0:3d:95:8c:2c:f5:bb:1a:9e:ea:71:01:28:24:ad:
                    64:42:46:cf:4c:87:1b:96:e7:84:e4:35:5c:0d:58:
                    93:fa:b9:cd:74:e6:07:0f:9f:be:15:fc:82:b2:7f:
                    24:67:11:c2:68:6c:ec:7b:55:2a:d3:48:85:98:2f:
                    3a:e4:a6:c3:d5:4a:15:c9:5c:19:0c:77:21:e9:a2:
                    4f:9a:70:ad:17:68:74:99:67:ff:a3:c0:a7:00:5d:
                    f1:59:8e:f9:88:94:86:40:f2:c7:04:aa:43:a8:6d:
                    78:ea:c1:86:87:35:4d:84:7c:d1:ad:d2:80:57:9a:
                    60:df:39:45:0b:0f:0a:18:a4:c5:81:36:7e:b2:f7:
                    f8:a7:28:5e:8b:5c:8d:16:e7:7f:92:d7:78:b5:45:
                    28:84:a3:0a:21:a8:1e:7f:35:ec:82:d9:ad:86:88:
                    7c:e5:b5:bd:64:ea:eb:e1:d2:2a:be:b0:54:67:a9:
                    19:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:ED:10:FC:77:5A:93:73:4C:84:11:16:ED:EF:4A:73:0B:E0:A7:84
            X509v3 Authority Key Identifier:
                keyid:7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/3138312e3138392e3130332e302f32342d3234203d3e20323731333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:02:a5:f0:a7:c1:d5:b1:41:42:1a:92:0a:c7:d1:ca:5b:37:
         0a:2e:1b:96:ef:f0:34:8a:7f:83:d6:bb:7f:dc:20:41:11:4f:
         31:ea:28:13:79:73:69:ab:aa:ab:a9:56:70:21:8f:af:de:af:
         cb:66:12:84:ee:71:8e:fa:26:fd:e5:a5:69:fe:0f:03:ac:93:
         ce:a8:80:80:3a:6c:05:f8:e5:af:9e:12:58:88:74:f8:85:ea:
         de:87:e4:76:fa:5e:2b:08:f4:a8:32:63:66:66:77:60:a2:9a:
         e8:d2:fe:fc:3d:4d:e6:c2:27:77:4c:c0:80:ba:f9:01:2c:b0:
         dc:8e:26:b0:0b:e3:73:e8:8d:e5:36:b0:35:81:bd:64:44:7a:
         0d:77:06:94:6d:5c:fb:fd:63:f8:0f:fd:0a:5d:50:14:bb:89:
         80:1d:24:34:b2:9c:02:0e:a9:08:f7:f6:af:78:f0:92:77:8a:
         2f:e4:4f:c2:e5:43:15:03:5f:57:79:9c:a4:44:b9:a4:68:76:
         0e:d3:cb:58:e9:84:d2:0f:44:19:da:27:ed:b0:41:17:bf:d0:
         3c:d8:e9:1a:5b:19:b0:60:14:96:36:37:ee:76:b5:49:0a:8d:
         95:ff:a0:4b:10:e0:a2:60:b5:04:40:4a:df:6c:65:20:c7:f6:
         c1:58:5b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:21:18 2025 by rpki-client