Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbE7tVb2graRAorkXVL3q7n1tvWzhU3fTNDawaD3WYfL/0/3138312e3232342e3136382e302f32342d3234203d3e20323730393132.roa
File:                     3138312e3232342e3136382e302f32342d3234203d3e20323730393132.roa (raw, json)
Hash identifier:          n4Sjne4aIgD3Mrbf8P0ffgTFveHUBy6Rj6Fijg2xY9I=
Subject key identifier:   E5:77:15:9C:14:3F:9A:2A:34:15:64:87:B1:21:56:16:29:ED:89:4A
Certificate issuer:       /CN=4B9BEAFF312ADE7F71D3C3C923DC3F745C38A66E
Certificate serial:       4D8D80851C27AD5B0809164188A0A3C6D0521056
Authority key identifier: 4B:9B:EA:FF:31:2A:DE:7F:71:D3:C3:C9:23:DC:3F:74:5C:38:A6:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B9BEAFF312ADE7F71D3C3C923DC3F745C38A66E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbE7tVb2graRAorkXVL3q7n1tvWzhU3fTNDawaD3WYfL/0/3138312e3232342e3136382e302f32342d3234203d3e20323730393132.roa
Signing time:             Wed 01 Sep 2021 19:43:56 +0000
ROA not before:           Wed 01 Sep 2021 19:38:56 +0000
ROA not after:            Wed 31 Aug 2022 19:43:56 +0000
asID:                     270912
IP address blocks:        181.224.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8d:80:85:1c:27:ad:5b:08:09:16:41:88:a0:a3:c6:d0:52:10:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9BEAFF312ADE7F71D3C3C923DC3F745C38A66E
        Validity
            Not Before: Sep  1 19:38:56 2021 GMT
            Not After : Aug 31 19:43:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:35:49:82:03:cb:7b:39:8d:f8:bc:10:98:
                    6d:c7:bb:37:15:09:1b:47:49:4a:f5:bb:a9:7c:a7:
                    b9:c6:b4:39:bf:ac:b7:3f:de:9e:95:10:ca:11:22:
                    79:af:01:b4:b2:43:c9:be:d9:f7:cc:ca:ac:70:6b:
                    2f:19:95:62:d0:37:a4:21:19:b3:86:6c:5e:fc:81:
                    ad:68:e5:7e:32:35:ce:c8:4d:e2:7d:06:e1:9d:1e:
                    84:dd:53:f3:d0:0f:6f:e7:1e:c5:4f:e0:f1:14:0f:
                    1d:fb:75:3b:c8:a6:1a:d8:25:6b:19:a6:bd:b0:cf:
                    c5:5d:6c:39:d3:50:18:f2:bf:9f:c5:9e:30:e3:96:
                    fe:62:80:22:f1:23:73:5b:01:d5:97:d1:02:b4:70:
                    a0:c0:8f:e5:ea:ea:8f:27:65:10:09:77:86:21:48:
                    5b:d6:72:c7:77:1a:ea:b5:45:75:4e:9f:5b:da:07:
                    b7:46:b5:fe:34:23:65:8c:99:11:f6:3c:41:40:a8:
                    c2:29:85:eb:e0:77:ea:2e:bb:8c:34:d4:ce:fb:20:
                    d4:a6:b0:ca:28:ca:f6:5c:f1:0a:c6:b8:75:eb:34:
                    63:c3:37:d3:f1:ca:e1:75:8d:b7:c3:c0:89:fb:97:
                    cb:c6:d0:99:3b:07:f0:44:0f:32:fb:73:3a:d0:7a:
                    12:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:77:15:9C:14:3F:9A:2A:34:15:64:87:B1:21:56:16:29:ED:89:4A
            X509v3 Authority Key Identifier:
                keyid:4B:9B:EA:FF:31:2A:DE:7F:71:D3:C3:C9:23:DC:3F:74:5C:38:A6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbE7tVb2graRAorkXVL3q7n1tvWzhU3fTNDawaD3WYfL/0/4B9BEAFF312ADE7F71D3C3C923DC3F745C38A66E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B9BEAFF312ADE7F71D3C3C923DC3F745C38A66E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbE7tVb2graRAorkXVL3q7n1tvWzhU3fTNDawaD3WYfL/0/3138312e3232342e3136382e302f32342d3234203d3e20323730393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:0e:da:ef:0a:55:91:08:82:95:8b:2c:8f:8c:36:a5:c6:2d:
         a0:a6:09:81:3f:80:99:89:bc:a3:2b:6a:b5:94:36:9f:d5:ac:
         5e:bb:70:5e:07:69:74:08:a6:a4:74:5c:bc:aa:d5:9f:07:4e:
         75:08:aa:72:29:a2:b9:82:8d:92:03:59:6e:7e:1b:95:d0:5a:
         a1:ec:aa:76:d6:5a:e1:9b:51:a8:6a:28:d7:4e:7e:2d:ab:0d:
         86:10:d8:d3:b0:1b:92:fa:bb:30:a3:68:67:b2:86:bc:ff:7f:
         43:64:08:fd:b1:2f:30:b6:28:57:a3:4a:55:78:1d:e7:4a:dc:
         2d:9c:f5:8f:76:6c:d2:00:80:24:99:52:fe:e5:7b:6e:dc:2c:
         07:fb:0d:45:9b:41:bf:4c:81:30:41:84:b9:11:20:89:42:77:
         a0:48:5d:13:56:51:5b:18:3e:33:04:1c:46:bd:9e:0a:92:bc:
         c1:c3:d5:2d:71:52:a3:1d:05:e8:bb:94:16:d0:ae:06:47:7e:
         d8:08:b0:8f:fa:a8:19:61:a4:24:09:b7:09:06:da:e1:8b:08:
         48:5b:24:2f:e0:36:5e:0d:35:fc:13:52:d9:c4:91:ae:cb:bf:
         28:de:9a:c3:0b:03:14:7a:b8:ce:0f:ed:d8:de:62:b6:3f:99:
         1e:ea:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:56 2025 by rpki-client