Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32342d3234203d3e20323731363236.roa
File:                     3138312e3138392e38302e302f32342d3234203d3e20323731363236.roa (raw, json)
Hash identifier:          5g45CAkB2kqOu6G1JX2Z/oyTh9AxoXyO8OXpE5fK9hk=
Subject key identifier:   C5:E2:60:96:62:F6:96:40:65:28:3C:28:C9:F4:38:26:17:71:F9:21
Certificate issuer:       /CN=226524F55AA764292A51BB669FC2AD0B4C417266
Certificate serial:       1A8B1DF71DB2BAA6B2CD04D4238FFA99BBB7E2AF
Authority key identifier: 22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32342d3234203d3e20323731363236.roa
Signing time:             Fri 22 Nov 2024 18:21:22 +0000
ROA not before:           Fri 22 Nov 2024 18:16:22 +0000
ROA not after:            Fri 21 Nov 2025 18:21:22 +0000
asID:                     271626
IP address blocks:        181.189.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8b:1d:f7:1d:b2:ba:a6:b2:cd:04:d4:23:8f:fa:99:bb:b7:e2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226524F55AA764292A51BB669FC2AD0B4C417266
        Validity
            Not Before: Nov 22 18:16:22 2024 GMT
            Not After : Nov 21 18:21:22 2025 GMT
        Subject: CN=C5E2609662F6964065283C28C9F438261771F921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:62:10:14:7c:a7:74:2b:9a:46:3b:37:0c:
                    8c:01:0f:e3:62:10:d5:cb:7a:1b:20:ca:56:43:1a:
                    59:96:ca:69:a0:1b:5e:5b:49:e9:bc:80:3f:b5:99:
                    1a:9a:14:7e:7e:15:33:4c:2e:65:48:dd:25:39:93:
                    ae:4f:68:cc:f6:4e:0b:57:5b:39:d6:99:ea:eb:ed:
                    10:d0:72:88:8f:83:1b:92:cc:d0:8d:a4:68:4a:8e:
                    97:72:b8:f9:ef:57:3a:95:2e:59:6b:24:19:b6:39:
                    4c:9f:b6:43:e0:27:97:d9:86:57:50:e8:14:2e:95:
                    b0:ef:70:72:31:59:1e:b9:70:66:d3:e0:f4:82:4d:
                    88:b6:47:2e:f5:34:87:59:d0:76:5a:bf:4e:29:2a:
                    ae:12:50:11:4d:76:6e:51:02:d1:eb:32:38:f0:c2:
                    4f:eb:b9:6d:46:83:f2:8b:b5:de:6f:be:ac:d8:e7:
                    cf:ec:93:69:a7:49:e6:ab:7c:4d:52:e1:1c:0c:30:
                    ab:c6:c8:02:bc:1b:6c:77:74:d4:48:b2:a1:d6:c4:
                    70:c4:3c:f3:1b:6b:7d:59:50:7d:be:c9:22:36:55:
                    36:25:e3:8b:5d:9d:68:51:b2:53:ab:49:d6:63:06:
                    4c:a6:37:dc:c1:aa:e4:ab:c5:ce:a1:ab:c6:ff:e9:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E2:60:96:62:F6:96:40:65:28:3C:28:C9:F4:38:26:17:71:F9:21
            X509v3 Authority Key Identifier:
                keyid:22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/226524F55AA764292A51BB669FC2AD0B4C417266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38302e302f32342d3234203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:57:32:d9:6d:fa:fc:a2:ee:23:7f:b2:ed:3f:11:c4:d7:f2:
         11:cc:d9:ec:44:63:ad:cb:d5:40:a3:4f:5e:5d:f1:2e:a4:83:
         98:43:36:51:94:b5:0e:58:9f:ab:f0:be:34:d1:75:20:fa:5d:
         17:31:bc:1a:22:70:58:0b:14:0e:a7:69:18:4d:7c:cc:7a:16:
         91:5c:04:1c:3b:b9:ff:63:45:2e:b0:02:69:d4:92:f2:7b:7d:
         7d:52:38:5d:61:73:da:68:8c:10:1a:0d:55:99:ab:7f:dc:70:
         0c:b1:dd:dd:42:0a:04:13:64:78:7a:a9:45:b9:f2:74:7b:d2:
         f8:3d:6e:42:97:f2:d6:7d:cf:8c:1b:dc:f7:97:98:10:bc:eb:
         43:c9:e3:2b:a4:96:9a:55:71:b9:2b:57:66:47:53:70:a3:69:
         45:b4:9e:8b:60:32:18:8d:2f:4f:c1:86:64:3f:87:a8:14:b0:
         a7:c6:68:25:fb:49:7c:8d:0e:cf:73:0f:7e:a7:4b:12:a1:cf:
         9c:e1:09:48:36:d0:03:a4:fa:25:ac:df:61:12:04:90:b8:e7:
         24:9c:8f:d6:51:22:97:e4:74:b7:89:24:b5:e4:5e:2f:72:76:
         79:c2:f5:6e:6c:9c:1e:35:7c:9e:0e:cb:eb:ca:32:38:40:96:
         36:1f:73:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:32:18 2025 by rpki-client