Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38312e302f32342d3234203d3e20323731363236.roa
File:                     3138312e3138392e38312e302f32342d3234203d3e20323731363236.roa (raw, json)
Hash identifier:          q+ec0ktLB8TjhBof97HFuFeboc3ZsUO5S8Si2Njli7g=
Subject key identifier:   96:92:C6:AD:31:EC:07:5C:52:B4:8F:F3:FD:AF:C0:99:B8:39:EE:51
Certificate issuer:       /CN=226524F55AA764292A51BB669FC2AD0B4C417266
Certificate serial:       64A81D1DC1938448AE7C96719892CE028D49D982
Authority key identifier: 22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38312e302f32342d3234203d3e20323731363236.roa
Signing time:             Fri 22 Nov 2024 18:21:16 +0000
ROA not before:           Fri 22 Nov 2024 18:16:16 +0000
ROA not after:            Fri 21 Nov 2025 18:21:16 +0000
asID:                     271626
IP address blocks:        181.189.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a8:1d:1d:c1:93:84:48:ae:7c:96:71:98:92:ce:02:8d:49:d9:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226524F55AA764292A51BB669FC2AD0B4C417266
        Validity
            Not Before: Nov 22 18:16:16 2024 GMT
            Not After : Nov 21 18:21:16 2025 GMT
        Subject: CN=9692C6AD31EC075C52B48FF3FDAFC099B839EE51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d5:76:49:2c:92:4b:f4:f2:36:7b:79:aa:ea:
                    b0:7b:3a:8c:6c:27:f1:6b:fd:8b:a5:d0:bb:9c:ec:
                    8c:1f:ac:ee:78:08:78:5d:d1:c6:10:54:0e:f4:39:
                    71:46:58:86:f3:fe:d1:e5:02:ef:6a:d1:4e:fa:4e:
                    c2:ac:20:ba:c6:f7:8d:ef:62:30:e6:66:ba:27:98:
                    68:3d:06:6b:af:0f:d2:fc:b0:58:b7:76:e2:5c:03:
                    61:b3:be:ff:4a:9d:36:4a:73:81:6b:b6:e5:b9:33:
                    6b:3f:ea:6b:1e:5f:a6:ff:82:a9:f0:94:0f:29:b0:
                    9a:da:1d:5d:f1:44:cb:4f:e3:95:d4:31:3c:6b:12:
                    93:a3:6f:c4:7d:f0:26:41:d1:66:0d:c3:ce:a5:52:
                    83:c0:9c:ea:b4:15:0f:f7:08:e8:7d:3c:91:3f:10:
                    30:2a:50:a5:e1:52:fa:0f:d9:1b:4b:70:a0:89:72:
                    89:75:6f:3f:ae:8a:fb:6a:52:33:da:d8:2e:8d:bb:
                    1c:70:08:18:69:84:71:06:bb:70:ff:11:28:f5:3b:
                    79:73:b8:99:27:aa:f3:1e:68:f7:79:08:8d:51:15:
                    a3:06:74:69:6c:75:bd:14:15:48:69:48:bb:f0:0c:
                    63:27:db:d6:0f:c8:2f:1f:20:0c:e1:b4:31:1b:94:
                    49:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:92:C6:AD:31:EC:07:5C:52:B4:8F:F3:FD:AF:C0:99:B8:39:EE:51
            X509v3 Authority Key Identifier:
                keyid:22:65:24:F5:5A:A7:64:29:2A:51:BB:66:9F:C2:AD:0B:4C:41:72:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/226524F55AA764292A51BB669FC2AD0B4C417266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226524F55AA764292A51BB669FC2AD0B4C417266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/3138312e3138392e38312e302f32342d3234203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:3d:f4:88:e1:70:94:c0:8c:80:ef:49:3f:61:a6:fd:e6:2d:
         76:f9:17:d0:ff:9f:67:aa:ad:1f:8a:0a:be:5a:81:cc:27:32:
         7e:9a:a8:39:e1:2e:0a:04:2f:b4:42:2e:13:af:11:19:0c:d1:
         b8:bf:6f:ac:89:b2:bf:c2:52:f9:16:b3:68:c0:18:8d:42:84:
         85:80:a9:5f:c4:60:af:f2:c8:48:78:25:f8:6f:75:9a:49:96:
         02:40:5f:33:80:85:aa:97:b6:9e:7d:49:63:e2:32:3c:2c:1d:
         30:2d:b2:5b:aa:43:15:dd:da:3e:1e:fe:ff:38:52:19:aa:9b:
         fc:d3:e6:7e:3f:93:d1:cc:fe:76:cb:04:8a:0b:30:c8:3d:7e:
         07:a8:55:af:82:b9:30:f8:7e:23:63:ee:a3:a1:8a:95:dc:58:
         ac:cd:72:9c:8b:7f:45:03:9a:5b:d4:05:4f:70:e3:9a:52:9b:
         10:f5:b6:50:95:c3:60:ce:74:1c:62:6d:10:43:0a:da:d7:21:
         ad:4b:10:58:93:ec:0b:8a:d6:5c:f7:b6:e4:7a:d4:f7:f9:95:
         ec:cd:2c:1f:0e:40:ac:42:50:dc:a7:f2:10:46:bc:da:df:7a:
         aa:ad:bc:12:82:62:75:90:fc:19:e6:58:02:54:d7:32:72:eb:
         de:0f:73:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:52 2025 by rpki-client