Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3137302e302f32332d3233203d3e20323730393638.roa
File:                     3138312e3232352e3137302e302f32332d3233203d3e20323730393638.roa (raw, json)
Hash identifier:          axn4nmirW6DWaS9GnngViPfnHtw4lHR8T0UK8hON9+k=
Subject key identifier:   1F:7C:DD:92:D8:2E:0A:54:F2:D3:3B:38:48:13:3F:6C:CD:88:BC:05
Certificate issuer:       /CN=F19407F720951841047B533845445D80DE55C84E
Certificate serial:       5545DE10EE7314333D38F48330D85A529D255AB3
Authority key identifier: F1:94:07:F7:20:95:18:41:04:7B:53:38:45:44:5D:80:DE:55:C8:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19407F720951841047B533845445D80DE55C84E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3137302e302f32332d3233203d3e20323730393638.roa
Signing time:             Sun 29 Dec 2024 16:45:40 +0000
ROA not before:           Sun 29 Dec 2024 16:40:40 +0000
ROA not after:            Sun 28 Dec 2025 16:45:40 +0000
asID:                     270968
IP address blocks:        181.225.170.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:45:de:10:ee:73:14:33:3d:38:f4:83:30:d8:5a:52:9d:25:5a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19407F720951841047B533845445D80DE55C84E
        Validity
            Not Before: Dec 29 16:40:40 2024 GMT
            Not After : Dec 28 16:45:40 2025 GMT
        Subject: CN=1F7CDD92D82E0A54F2D33B3848133F6CCD88BC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4c:9c:bf:a1:e6:3f:57:73:54:c7:05:b3:58:
                    23:47:4a:40:08:13:13:6b:6b:b9:a0:f8:c0:ed:77:
                    a5:f2:35:56:12:eb:14:e3:93:e2:63:0c:3e:e0:07:
                    c9:ea:40:07:58:b7:97:8c:50:fa:b8:4e:19:9c:8f:
                    3f:e5:c6:f9:57:42:7c:40:1b:62:76:99:95:64:8b:
                    33:d1:1c:06:55:ba:c5:2a:90:0a:f6:97:d1:4d:12:
                    11:d0:f9:22:e2:ee:2a:7e:fc:94:0a:63:f7:06:5e:
                    ff:71:f9:36:6e:9c:d9:c4:89:20:9f:19:ee:4a:56:
                    b7:27:26:82:fd:c3:77:82:2d:fe:55:23:84:d3:f9:
                    95:ff:35:31:48:46:30:59:af:c7:26:6e:ac:89:2c:
                    3a:1d:f3:d6:a7:9e:16:2f:4f:c8:02:42:00:c6:3d:
                    b2:fd:99:0f:3e:33:4b:4a:73:d8:a3:d8:7f:99:5f:
                    7a:4d:06:da:10:ba:9f:73:d9:0b:1d:a8:d9:69:58:
                    03:7f:c5:40:98:42:e1:3f:b9:0c:c3:44:a6:15:5b:
                    5d:d3:dd:35:a4:5f:c4:27:51:b9:fd:cc:ad:f1:3a:
                    de:ce:8e:ff:ad:0e:52:6c:2c:04:b0:19:d3:6c:00:
                    a7:ce:24:4b:15:31:c1:76:31:6d:c1:05:e9:c9:cf:
                    ee:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7C:DD:92:D8:2E:0A:54:F2:D3:3B:38:48:13:3F:6C:CD:88:BC:05
            X509v3 Authority Key Identifier:
                keyid:F1:94:07:F7:20:95:18:41:04:7B:53:38:45:44:5D:80:DE:55:C8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/F19407F720951841047B533845445D80DE55C84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19407F720951841047B533845445D80DE55C84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3137302e302f32332d3233203d3e20323730393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:bc:6e:95:d8:0a:48:f6:a5:2c:2c:23:25:2e:fb:14:14:cb:
         9f:78:92:ea:4a:4d:2c:85:c2:80:f1:d7:12:0d:ca:76:81:d3:
         04:0d:63:47:5f:62:22:a1:00:72:65:2d:a4:90:3e:31:98:49:
         fe:e6:39:7b:07:ff:2b:07:c2:88:65:be:fb:95:d8:92:17:61:
         31:74:af:34:cc:31:f0:bc:8f:98:62:83:35:bf:c3:8e:06:f7:
         3b:a8:8a:f2:07:7e:02:17:56:04:db:cc:bd:7d:a6:24:16:a2:
         37:1d:a2:38:d0:8d:25:4e:8e:84:ad:36:77:fd:23:4c:25:6a:
         fe:fb:5e:5d:7b:f2:6b:cd:34:83:46:93:86:f0:bf:41:34:c3:
         19:3f:99:54:17:d3:59:a1:06:3e:a0:6e:71:f1:90:7c:a5:35:
         2b:b0:ea:2d:ea:7f:cd:33:91:d1:4c:c2:0d:e3:fd:78:3b:90:
         1c:88:b6:7d:f7:2b:9a:ee:c8:5e:15:29:95:55:5a:a4:06:1d:
         75:fe:6d:08:8d:fc:aa:c0:98:ea:c5:02:0d:b3:02:d4:04:6b:
         60:e2:a7:89:a1:98:38:9c:f1:5a:3f:44:0d:4b:2d:6a:0f:5c:
         ae:05:ac:bb:56:2e:8e:de:b2:1a:b9:eb:f6:24:ff:3e:9c:b0:
         4d:d0:3d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:58:53 2025 by rpki-client