Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32332d3233203d3e20323731363236.roa
File:                     3138312e3138392e38302e302f32332d3233203d3e20323731363236.roa (raw, json)
Hash identifier:          TrlwHgUI+6yHLJQEeV+1lUwB1b9lQ6hvbeNcDAX84eg=
Subject key identifier:   CB:BA:B6:0E:24:12:0C:43:16:9D:76:0C:00:C0:F0:32:39:2C:BD:DD
Certificate issuer:       /CN=226524F55AA764292A51BB669FC2AD0B4C417266
Certificate serial:       2AE7630845DCF535F7D7FFCE22B94BAFD23E6820
Authority key identifier: 22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32332d3233203d3e20323731363236.roa
Signing time:             Fri 22 Nov 2024 18:21:21 +0000
ROA not before:           Fri 22 Nov 2024 18:16:21 +0000
ROA not after:            Fri 21 Nov 2025 18:21:21 +0000
asID:                     271626
IP address blocks:        181.189.80.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e7:63:08:45:dc:f5:35:f7:d7:ff:ce:22:b9:4b:af:d2:3e:68:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226524F55AA764292A51BB669FC2AD0B4C417266
        Validity
            Not Before: Nov 22 18:16:21 2024 GMT
            Not After : Nov 21 18:21:21 2025 GMT
        Subject: CN=CBBAB60E24120C43169D760C00C0F032392CBDDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:13:59:e4:1b:73:4b:2a:0d:40:ed:f9:fa:
                    5a:dc:ce:78:a7:0b:cd:07:21:df:d3:d0:99:9c:d9:
                    53:1e:97:4a:46:4c:d5:36:21:99:3f:fd:7b:f7:76:
                    4b:75:8b:f7:3c:ae:84:78:36:71:7c:ea:a8:4c:ff:
                    ea:ef:a1:8b:74:0b:40:30:f8:fa:6f:74:97:df:9c:
                    5f:96:0a:76:17:ed:1c:7a:c8:98:30:94:ab:b4:e8:
                    d4:90:e1:3a:32:8e:7f:bc:0f:a9:9d:5c:65:89:6a:
                    e5:23:a4:57:6e:c6:ee:68:21:f0:7a:e8:b2:91:e1:
                    a6:95:56:bb:29:52:ee:b8:da:f1:68:6b:32:45:8c:
                    97:e9:4d:62:97:1e:9c:10:2f:07:70:37:f7:81:97:
                    af:25:42:e4:38:93:c4:c4:cf:88:a8:fd:92:31:43:
                    a7:a9:ea:09:71:ca:90:3d:16:66:51:34:04:14:91:
                    23:d3:7b:20:58:0d:eb:d6:86:b8:a3:fd:e1:ed:e0:
                    5a:ff:0d:3a:cd:f6:38:a2:92:bc:76:5a:78:ff:bd:
                    02:0c:ca:00:79:55:7b:a6:ad:67:7f:cb:0b:12:5d:
                    69:07:74:7c:20:16:4a:3c:32:14:0a:b7:3c:b7:1f:
                    85:75:74:a4:3a:87:32:20:fe:60:3d:ee:b9:6f:2d:
                    e8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BA:B6:0E:24:12:0C:43:16:9D:76:0C:00:C0:F0:32:39:2C:BD:DD
            X509v3 Authority Key Identifier:
                keyid:22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/226524F55AA764292A51BB669FC2AD0B4C417266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32332d3233203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:57:3b:0d:ff:6d:d4:91:28:bf:ba:ed:b4:7d:2f:81:4b:f2:
         75:39:d8:c9:37:81:83:c4:a8:5c:a7:65:60:9f:0b:56:e9:14:
         81:39:d3:46:2b:b7:c7:1c:5c:86:d4:a1:af:5d:45:38:99:78:
         a8:ff:9c:e1:7b:59:8a:e3:99:8f:84:5a:d6:3f:13:a6:5e:93:
         9a:8d:6e:5e:b2:18:d0:69:72:3f:97:3e:2c:a1:76:3f:25:53:
         00:0b:c5:b2:d7:d0:ff:d0:7f:3e:6e:9a:53:29:fd:38:e1:f5:
         e1:d5:b9:a4:12:7c:c7:be:03:70:4a:78:88:4e:e3:60:3a:09:
         f0:d5:d5:27:11:e0:d8:d3:33:6b:a4:cb:8d:6b:ce:f1:30:16:
         dd:31:d8:07:cf:9b:91:e2:94:1d:62:93:a3:ba:83:94:e4:17:
         76:e7:61:13:0b:bb:ac:e2:b9:59:14:ae:17:db:2c:8f:83:cb:
         e7:b9:cb:0e:5c:f7:3b:5e:3a:60:fb:d4:ee:f8:bc:f4:59:d9:
         04:5d:18:c8:4f:71:80:eb:ef:e9:a6:ad:c6:31:51:c1:5e:53:
         24:54:e6:10:6c:2d:31:8e:31:c3:ac:3a:bd:5d:ab:81:05:5d:
         c4:f4:e6:fa:e2:c2:00:50:c9:98:e3:b6:6e:18:7a:04:da:64:
         ac:9c:c2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:26:54 2025 by rpki-client