Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/3138312e3139312e3137302e302f32332d3233203d3e20323637343239.roa
File:                     3138312e3139312e3137302e302f32332d3233203d3e20323637343239.roa (raw, json)
Hash identifier:          0a/oifEX6epiEakddGmgqH1UxgK/2jvJsd32+OrHt5Y=
Subject key identifier:   8D:A6:84:97:17:7E:FA:BE:23:87:28:10:FD:8B:79:A5:90:E7:E7:11
Certificate issuer:       /CN=2A5011451F0E97D5C76B27823EA7E896246FCC89
Certificate serial:       13EE5EC7C52388A2E67C021BDEE3E1E3FCA050E4
Authority key identifier: 2A:50:11:45:1F:0E:97:D5:C7:6B:27:82:3E:A7:E8:96:24:6F:CC:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A5011451F0E97D5C76B27823EA7E896246FCC89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/3138312e3139312e3137302e302f32332d3233203d3e20323637343239.roa
Signing time:             Mon 08 Jan 2024 19:36:44 +0000
ROA not before:           Mon 08 Jan 2024 19:31:44 +0000
ROA not after:            Mon 06 Jan 2025 19:36:44 +0000
asID:                     267429
IP address blocks:        181.191.170.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ee:5e:c7:c5:23:88:a2:e6:7c:02:1b:de:e3:e1:e3:fc:a0:50:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A5011451F0E97D5C76B27823EA7E896246FCC89
        Validity
            Not Before: Jan  8 19:31:44 2024 GMT
            Not After : Jan  6 19:36:44 2025 GMT
        Subject: CN=8DA68497177EFABE23872810FD8B79A590E7E711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:06:35:0b:37:84:60:bf:b1:9c:25:c9:69:
                    1b:9c:f3:2b:74:a3:0a:fb:51:7c:7c:ca:f7:db:bc:
                    fe:ee:6e:24:13:a2:86:54:67:5f:49:fa:51:62:a6:
                    17:4b:42:36:5f:5d:28:c3:e7:66:a9:37:61:f7:80:
                    be:0f:c9:b7:66:f1:5c:4a:3a:72:b3:38:a6:5d:ea:
                    c7:d9:51:62:0a:36:17:5f:38:2d:fe:c3:1e:33:37:
                    f8:4c:00:f4:98:9d:02:4a:50:e8:79:68:95:e1:43:
                    35:97:8e:fb:79:52:3c:cc:32:0e:e6:1b:57:d8:6e:
                    c9:3d:56:21:b8:31:05:8d:4f:c8:97:fc:c2:fe:81:
                    fd:c2:03:49:5e:92:37:b2:b9:49:0e:42:72:0b:43:
                    ec:b9:36:a1:07:cb:a9:c8:05:17:ed:fb:9e:d5:55:
                    84:93:94:b9:ba:c1:af:81:29:a6:bb:ed:3c:b0:43:
                    29:f1:79:77:0f:9e:23:67:17:b9:02:a8:13:2b:bc:
                    8f:76:32:e8:9b:a3:bb:00:ec:64:1e:f7:15:52:2e:
                    3d:71:bd:92:ca:9e:40:f2:97:63:08:41:e1:2a:f7:
                    8c:cb:3a:c6:02:21:37:de:8a:56:ee:2f:03:73:c3:
                    09:aa:97:10:01:fc:f6:a3:c6:5a:a3:ee:7c:62:e4:
                    bc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A6:84:97:17:7E:FA:BE:23:87:28:10:FD:8B:79:A5:90:E7:E7:11
            X509v3 Authority Key Identifier:
                keyid:2A:50:11:45:1F:0E:97:D5:C7:6B:27:82:3E:A7:E8:96:24:6F:CC:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/2A5011451F0E97D5C76B27823EA7E896246FCC89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A5011451F0E97D5C76B27823EA7E896246FCC89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/3138312e3139312e3137302e302f32332d3233203d3e20323637343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:5c:71:bf:6c:f9:4d:f3:9c:0e:29:53:0a:99:7b:86:38:7e:
         d9:3f:4a:7a:5d:0f:ee:a8:f0:51:76:e8:af:03:14:0d:d6:bb:
         01:40:1a:8a:eb:37:20:17:9e:76:e6:9a:b9:f7:2c:df:01:b0:
         ca:4f:4a:2d:d3:99:93:0f:8d:6c:7f:d3:2e:76:31:fa:07:dc:
         fd:96:dd:db:d3:17:d7:a7:91:53:5a:d1:ef:e5:3e:f7:2d:01:
         54:af:9d:15:b6:d8:ea:26:7f:71:76:2b:b9:03:73:2e:ce:dc:
         12:87:85:d9:99:10:55:d6:a6:7d:6d:bd:46:3e:71:8a:3a:29:
         8a:19:f3:45:2c:09:86:20:48:9c:47:4e:b9:9a:22:8d:e3:3d:
         67:2c:61:68:dc:eb:80:c8:fe:b0:ed:37:bf:81:71:2f:12:33:
         4c:7b:c0:b1:9c:19:7f:45:23:8e:dc:19:b2:4d:f4:4e:4e:42:
         46:33:10:c3:86:9e:be:14:81:10:c7:94:56:08:79:14:14:85:
         c0:d7:2e:30:f6:94:c4:78:67:be:35:e9:75:db:de:6e:b6:d3:
         b2:43:93:5a:59:dc:11:fc:8d:c6:39:c5:9d:f5:e6:a7:e9:80:
         01:9e:45:99:5c:f7:82:8d:c0:70:09:58:ed:fd:d0:11:77:fd:
         ab:81:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:30 2025 by rpki-client