Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32322d3232203d3e20323731363236.roa
File:                     3138312e3138392e38302e302f32322d3232203d3e20323731363236.roa (raw, json)
Hash identifier:          wDxU9KZJawUnX5snWQHnkliCwUw2kwgYGQ5U6NhFvhQ=
Subject key identifier:   5B:4A:5C:EE:5D:5A:63:69:87:AB:02:8D:86:39:3D:74:0A:04:FE:DE
Certificate issuer:       /CN=226524F55AA764292A51BB669FC2AD0B4C417266
Certificate serial:       0E18B8E4187755C577D1BEB449B7D6047CF17949
Authority key identifier: 22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32322d3232203d3e20323731363236.roa
Signing time:             Fri 22 Nov 2024 18:21:18 +0000
ROA not before:           Fri 22 Nov 2024 18:16:18 +0000
ROA not after:            Fri 21 Nov 2025 18:21:18 +0000
asID:                     271626
IP address blocks:        181.189.80.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:18:b8:e4:18:77:55:c5:77:d1:be:b4:49:b7:d6:04:7c:f1:79:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226524F55AA764292A51BB669FC2AD0B4C417266
        Validity
            Not Before: Nov 22 18:16:18 2024 GMT
            Not After : Nov 21 18:21:18 2025 GMT
        Subject: CN=5B4A5CEE5D5A636987AB028D86393D740A04FEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:39:90:c0:36:a1:7d:8f:23:a6:3a:27:db:
                    1b:ee:1c:61:07:3f:a7:c8:05:75:7a:33:26:40:73:
                    b5:22:6c:97:6c:9b:2f:28:23:87:55:40:4b:dc:f4:
                    32:6f:d8:ac:6a:59:f3:5a:85:41:f9:df:32:c6:aa:
                    63:90:4d:85:b8:fe:3e:4e:04:ca:56:33:9f:ef:b6:
                    c1:44:b7:9e:f6:50:fe:cd:cd:11:51:d5:ba:7f:02:
                    e5:aa:2b:63:c6:3a:c4:a8:d7:c5:27:6f:78:4a:da:
                    d6:80:46:dd:b4:f8:6e:05:5f:4f:60:aa:7b:4e:63:
                    4b:bd:ec:fb:20:19:ca:1a:b3:85:6b:40:ca:07:64:
                    1e:e9:2f:4e:8c:48:7d:da:46:48:5a:8a:78:b2:a9:
                    2d:c9:b3:92:0c:06:b4:d3:54:4b:4f:8d:55:ca:10:
                    c6:e5:bd:24:80:26:21:9c:48:f4:58:1f:e4:77:c7:
                    65:bb:c0:01:6f:43:9c:49:39:d9:1f:44:9c:e2:fb:
                    23:52:b9:6b:ca:98:b8:c2:b0:a3:e9:c0:22:a7:05:
                    c9:8e:9a:8d:00:0b:00:52:4a:23:03:60:62:30:9d:
                    6e:fb:00:60:3c:a9:31:0c:3f:8e:9b:7f:76:82:a7:
                    b9:fe:8e:48:94:ef:79:25:a6:b3:fc:9a:25:70:bf:
                    a4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4A:5C:EE:5D:5A:63:69:87:AB:02:8D:86:39:3D:74:0A:04:FE:DE
            X509v3 Authority Key Identifier:
                keyid:22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/226524F55AA764292A51BB669FC2AD0B4C417266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32322d3232203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:c5:9a:e5:3f:1b:05:33:c7:7e:dc:fd:97:b7:0d:2e:4d:22:
         af:a0:70:f2:c6:1f:ca:4f:6c:4b:c1:55:59:f2:68:43:cf:72:
         77:01:8c:72:1b:75:45:79:b6:a2:ac:f8:07:32:a2:05:37:6e:
         63:00:8f:94:5d:cd:bc:d7:57:8e:8d:1b:b2:91:e6:5e:ea:79:
         5f:aa:c6:19:de:10:58:94:d2:47:1b:6e:3c:d1:b7:16:07:b8:
         95:df:7d:69:80:3d:76:ba:55:de:0f:7c:b1:16:33:cb:b2:71:
         3f:b9:6b:ec:17:63:ed:63:0c:51:e2:91:f0:c3:a5:88:ad:c2:
         69:2f:b9:f4:5b:43:25:4f:3f:cc:28:22:1c:b7:36:d4:36:50:
         1a:82:06:e7:72:19:9e:aa:ed:90:4a:68:98:04:c9:e3:73:a1:
         af:4c:60:59:94:ad:f7:bb:d1:cb:f1:b7:f6:29:06:0f:fa:2c:
         36:ee:4b:61:da:29:5b:ec:65:81:e6:7c:f3:28:9b:cc:6f:f7:
         85:99:14:aa:6a:29:68:b6:8c:b3:e2:c1:e7:9d:f5:d4:24:7e:
         f9:8e:19:a6:79:76:3d:20:a2:49:3a:d6:fc:4b:00:94:d2:b7:
         df:f8:de:4a:44:80:57:58:5b:02:06:a9:90:99:5e:f8:87:59:
         84:c5:4d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:17:37 2025 by rpki-client