Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/3138312e3233322e3235312e302f32342d3234203d3e20323731353431.roa
File:                     3138312e3233322e3235312e302f32342d3234203d3e20323731353431.roa (raw, json)
Hash identifier:          TSotTLguh/p22KYLMTmFK7+IpJEbF+v3kZzCOKW85ys=
Subject key identifier:   3F:2B:06:C5:79:2B:49:FA:7F:56:D9:39:ED:97:97:BE:02:6A:98:65
Certificate issuer:       /CN=85661D4BB5D0C9DD35FA91F11679E902EB66AF4D
Certificate serial:       6AAC8652FB9918A3932155B8AC14AC0D91F04005
Authority key identifier: 85:66:1D:4B:B5:D0:C9:DD:35:FA:91:F1:16:79:E9:02:EB:66:AF:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/3138312e3233322e3235312e302f32342d3234203d3e20323731353431.roa
Signing time:             Tue 23 Jan 2024 21:46:24 +0000
ROA not before:           Tue 23 Jan 2024 21:41:24 +0000
ROA not after:            Tue 21 Jan 2025 21:46:24 +0000
asID:                     271541
IP address blocks:        181.232.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ac:86:52:fb:99:18:a3:93:21:55:b8:ac:14:ac:0d:91:f0:40:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85661D4BB5D0C9DD35FA91F11679E902EB66AF4D
        Validity
            Not Before: Jan 23 21:41:24 2024 GMT
            Not After : Jan 21 21:46:24 2025 GMT
        Subject: CN=3F2B06C5792B49FA7F56D939ED9797BE026A9865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c5:c9:4e:76:06:c9:17:0d:08:3d:7d:cb:0c:
                    8b:d1:e5:e8:1c:9d:70:e3:7c:99:fd:6b:9d:00:01:
                    d7:56:7c:5f:1e:7a:cf:63:12:5f:74:20:36:0b:b3:
                    05:a1:43:8c:6d:f7:50:5d:77:53:88:8d:2d:86:01:
                    34:28:a8:6c:78:77:01:19:2c:68:24:3b:92:9f:96:
                    ad:75:f1:2a:1f:91:e6:8c:15:9e:d8:e5:07:ed:d6:
                    7b:b6:61:43:b9:a1:fb:96:3d:a7:b3:30:5b:42:2c:
                    42:20:25:7a:48:62:ce:e7:49:f8:1f:e6:3d:64:39:
                    de:c7:5c:1e:13:95:5b:3b:c1:0f:89:30:bc:22:9a:
                    c7:4d:55:a6:9f:06:48:3d:6f:fb:98:fa:36:c9:ca:
                    ba:de:f1:6a:d3:97:65:71:48:0b:94:99:25:d6:11:
                    63:e8:9c:c3:42:94:5c:d5:4f:52:6c:af:58:59:bd:
                    8c:bd:e1:99:39:f7:37:13:21:bf:b5:51:9c:5f:f9:
                    2c:18:5a:51:83:a6:04:08:64:9e:31:86:9a:b0:93:
                    f8:68:6e:3a:6f:05:cc:77:31:e0:63:a9:8c:56:5b:
                    11:24:10:d7:af:da:b1:29:1a:bf:c5:9e:a1:75:44:
                    9a:c1:b0:e0:06:6d:1c:bd:21:3d:17:cf:6f:94:16:
                    0b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2B:06:C5:79:2B:49:FA:7F:56:D9:39:ED:97:97:BE:02:6A:98:65
            X509v3 Authority Key Identifier:
                keyid:85:66:1D:4B:B5:D0:C9:DD:35:FA:91:F1:16:79:E9:02:EB:66:AF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/3138312e3233322e3235312e302f32342d3234203d3e20323731353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:ce:1e:d8:b9:2c:aa:db:1d:a5:32:8d:4d:8a:5f:c5:64:7f:
         bf:19:07:02:5b:04:d1:b2:4d:27:4a:59:49:5c:d3:27:f9:f3:
         d3:e6:13:ca:cb:91:91:41:b4:22:b1:2e:40:76:67:78:bd:74:
         e4:dc:19:f0:2e:c7:8a:4f:87:a4:e3:6d:ec:9c:bc:5a:88:67:
         1e:3e:2f:f2:59:32:17:b7:84:30:84:38:20:92:9c:f4:25:a8:
         9f:0c:ff:27:2e:41:64:b3:64:73:58:ab:3b:3d:b6:d4:e3:10:
         ad:9f:3b:27:d0:e3:ad:0c:29:4b:ca:a8:78:50:90:12:5e:65:
         33:8d:d7:34:a0:c7:14:06:12:32:e4:5d:5a:3f:17:e7:a2:1e:
         d9:8c:40:f0:8a:c0:b2:c7:aa:9c:bf:ec:7c:dc:1b:ea:25:59:
         a6:9c:af:8d:99:c4:fe:f5:0c:6f:63:2f:e0:fe:f1:fb:17:12:
         8c:34:a3:c9:b8:95:4b:3f:e3:26:14:4e:05:32:d0:f4:93:43:
         aa:7a:fe:c1:ba:da:eb:33:2a:64:57:f6:99:48:07:4e:8d:b9:
         af:bf:c4:4e:da:ee:d7:90:48:c7:d2:fe:77:1e:81:2d:a7:aa:
         cf:9f:03:87:5c:74:29:c8:09:da:03:21:79:e7:d0:a3:05:9f:
         d8:43:fb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:14:57 2025 by rpki-client