Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbE7tVb2graRAorkXVL3q7n1tvWzhU3fTNDawaD3WYfL/0/3138312e3232342e3136392e302f32342d3234203d3e20323730393132.roa
File:                     3138312e3232342e3136392e302f32342d3234203d3e20323730393132.roa (raw, json)
Hash identifier:          ALevnB1qAwPvvFqfogJhnB/5zQ5u1NKszS8WLvMUzLY=
Subject key identifier:   C6:BB:F7:97:C7:5B:CC:A4:C8:67:E6:06:5A:3E:5B:48:89:FD:C7:32
Certificate issuer:       /CN=4B9BEAFF312ADE7F71D3C3C923DC3F745C38A66E
Certificate serial:       24550DF0CF81C8FA654740A5D9B05647A1F6BA90
Authority key identifier: 4B:9B:EA:FF:31:2A:DE:7F:71:D3:C3:C9:23:DC:3F:74:5C:38:A6:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B9BEAFF312ADE7F71D3C3C923DC3F745C38A66E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbE7tVb2graRAorkXVL3q7n1tvWzhU3fTNDawaD3WYfL/0/3138312e3232342e3136392e302f32342d3234203d3e20323730393132.roa
Signing time:             Wed 01 Sep 2021 19:43:59 +0000
ROA not before:           Wed 01 Sep 2021 19:38:59 +0000
ROA not after:            Wed 31 Aug 2022 19:43:59 +0000
asID:                     270912
IP address blocks:        181.224.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:55:0d:f0:cf:81:c8:fa:65:47:40:a5:d9:b0:56:47:a1:f6:ba:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9BEAFF312ADE7F71D3C3C923DC3F745C38A66E
        Validity
            Not Before: Sep  1 19:38:59 2021 GMT
            Not After : Aug 31 19:43:59 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4d:39:9f:36:0f:08:0d:03:9f:56:06:9d:24:
                    ff:9a:36:43:1e:72:ee:b6:65:18:fa:41:5c:a8:d4:
                    46:ce:06:9b:3f:bd:38:e6:6d:40:f8:c8:52:a5:c6:
                    9b:01:47:45:1d:3c:a6:83:9b:f3:e2:b2:28:d2:40:
                    9b:60:f2:71:4b:b9:f8:50:37:46:1e:de:2e:11:09:
                    48:7e:40:1b:3f:24:1b:61:31:f0:4b:ec:91:27:ed:
                    45:b6:55:d8:54:47:b3:64:8c:b3:47:53:37:15:1c:
                    83:6e:56:c0:bb:33:96:dc:29:a8:58:fa:5b:7e:90:
                    8c:e8:35:07:7c:4a:33:79:39:56:77:86:48:14:18:
                    60:c0:70:ca:61:d5:81:c4:d0:22:7a:28:e5:6c:9b:
                    43:1a:cc:e2:67:0e:09:e6:67:c6:4f:f4:f7:af:ab:
                    80:73:d9:03:25:64:71:7e:26:2e:3b:b1:77:85:73:
                    22:99:ec:17:aa:96:59:96:2c:ca:ae:d3:8a:42:cf:
                    e0:4d:6c:c8:fd:e1:f3:d5:c3:fa:1a:33:10:97:d0:
                    dc:b0:c5:4c:10:da:cd:c9:06:c7:d5:4f:0c:b1:ab:
                    79:57:a1:de:fe:d5:5a:2d:04:ab:cb:8e:8e:fa:56:
                    5a:2b:21:0a:62:2d:a4:a5:9c:70:d5:59:4b:1e:75:
                    17:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BB:F7:97:C7:5B:CC:A4:C8:67:E6:06:5A:3E:5B:48:89:FD:C7:32
            X509v3 Authority Key Identifier:
                keyid:4B:9B:EA:FF:31:2A:DE:7F:71:D3:C3:C9:23:DC:3F:74:5C:38:A6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbE7tVb2graRAorkXVL3q7n1tvWzhU3fTNDawaD3WYfL/0/4B9BEAFF312ADE7F71D3C3C923DC3F745C38A66E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B9BEAFF312ADE7F71D3C3C923DC3F745C38A66E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbE7tVb2graRAorkXVL3q7n1tvWzhU3fTNDawaD3WYfL/0/3138312e3232342e3136392e302f32342d3234203d3e20323730393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:ff:8c:bf:bf:ff:97:35:97:a0:ae:3d:1e:ef:2a:ef:6f:fc:
         f2:6e:64:c1:73:2d:ad:68:0b:7b:e3:24:57:4b:f1:a4:65:a7:
         ce:f8:31:c3:19:ee:0f:bb:52:1b:fd:df:32:59:d4:10:b0:14:
         51:b1:ce:18:ac:1b:61:16:5a:58:f7:64:d2:d8:47:31:37:ec:
         08:b0:89:00:14:41:d6:cf:11:11:a4:89:5b:39:51:f5:73:ed:
         d4:12:d7:62:63:3a:db:1c:17:b8:c6:e1:4c:da:8a:37:b3:da:
         f6:39:8a:5c:90:f9:77:f9:96:80:92:69:88:ee:81:84:5a:3b:
         33:93:c9:8f:a4:16:69:92:86:46:3f:2f:df:01:19:c8:41:ed:
         15:f4:b5:50:8c:8c:1d:6d:6e:c0:c5:65:42:03:95:ee:7e:c8:
         f3:bc:79:5d:65:90:c8:a1:a4:29:91:ca:f4:05:cd:c9:bb:8e:
         70:5f:86:20:4f:2d:0d:f0:31:2f:6d:27:19:02:3d:2f:6f:c8:
         57:94:25:2b:5d:ef:c8:b3:23:e8:33:ef:1d:10:43:cd:ef:93:
         43:26:65:ba:cb:c5:9b:5d:d0:c6:e6:0f:0d:75:7f:a1:48:98:
         1e:d7:1b:e3:1e:fb:b9:54:91:40:f3:5d:42:e0:89:a4:a7:1c:
         bd:ef:ed:3c
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUJFUN8M+ByPplR0Cl2bBWR6H2upAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5QkVBRkYzMTJBREU3RjcxRDNDM0M5MjNEQzNGNzQ1
QzM4QTY2RTAeFw0yMTA5MDExOTM4NTlaFw0yMjA4MzExOTQzNTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDQ0RDM5OUYzNjBGMDgwRDAz
OUY1NjA2OUQyNEZGOUEzNjQzMUU3MkVFQjY2NTE4RkE0MTVDQThENDQ2Q0UwNjlC
M0ZCRDM4RTY2RDQwRjhDODUyQTVDNjlCMDE0NzQ1MUQzQ0E2ODM5QkYzRTJCMjI4
RDI0MDlCNjBGMjcxNEJCOUY4NTAzNzQ2MUVERTJFMTEwOTQ4N0U0MDFCM0YyNDFC
NjEzMUYwNEJFQzkxMjdFRDQ1QjY1NUQ4NTQ0N0IzNjQ4Q0IzNDc1MzM3MTUxQzgz
NkU1NkMwQkIzMzk2REMyOUE4NThGQTVCN0U5MDhDRTgzNTA3N0M0QTMzNzkzOTU2
Nzc4NjQ4MTQxODYwQzA3MENBNjFENTgxQzREMDIyN0EyOEU1NkM5QjQzMUFDQ0Uy
NjcwRTA5RTY2N0M2NEZGNEY3QUZBQjgwNzNEOTAzMjU2NDcxN0UyNjJFM0JCMTc3
ODU3MzIyOTlFQzE3QUE5NjU5OTYyQ0NBQUVEMzhBNDJDRkUwNEQ2Q0M4RkRFMUYz
RDVDM0ZBMUEzMzEwOTdEMERDQjBDNTRDMTBEQUNEQzkwNkM3RDU0RjBDQjFBQjc5
NTdBMURFRkVENTVBMkQwNEFCQ0I4RThFRkE1NjVBMkIyMTBBNjIyREE0QTU5Qzcw
RDU1OTRCMUU3NTE3OTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1E05nzYPCA0Dn1YGnST/mjZDHnLutmUY+kFcqNRGzgabP7045m1A
+MhSpcabAUdFHTymg5vz4rIo0kCbYPJxS7n4UDdGHt4uEQlIfkAbPyQbYTHwS+yR
J+1FtlXYVEezZIyzR1M3FRyDblbAuzOW3CmoWPpbfpCM6DUHfEozeTlWd4ZIFBhg
wHDKYdWBxNAieijlbJtDGsziZw4J5mfGT/T3r6uAc9kDJWRxfiYuO7F3hXMimewX
qpZZlizKrtOKQs/gTWzI/eHz1cP6GjMQl9DcsMVMENrNyQbH1U8Msat5V6He/tVa
LQSry46O+lZaKyEKYi2kpZxw1VlLHnUXkwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FMa795fHW8ykyGfmBlo+W0iJ/ccyMB8GA1UdIwQYMBaAFEub6v8xKt5/cdPDySPc
P3RcOKZuMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JiRTd0VmIyZ3JhUkFv
cmtYVkwzcTduMXR2V3poVTNmVE5EYXdhRDNXWWZMLzAvNEI5QkVBRkYzMTJBREU3
RjcxRDNDM0M5MjNEQzNGNzQ1QzM4QTY2RS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80QjlCRUFGRjMxMkFERTdGNzFEM0MzQzkyM0RDM0Y3NDVDMzhB
NjZFLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CYkU3dFZiMmdyYVJBb3JrWFZM
M3E3bjF0dld6aFUzZlRORGF3YUQzV1lmTC8wLzMxMzgzMTJlMzIzMjM0MmUzMTM2
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAzOTMxMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC14KkwDQYJKoZIhvcNAQELBQADggEBALr/jL+//5c1l6CuPR7vKu9v/PJuZMFz
La1oC3vjJFdL8aRlp874McMZ7g+7Uhv93zJZ1BCwFFGxzhisG2EWWlj3ZNLYRzE3
7AiwiQAUQdbPERGkiVs5UfVz7dQS12JjOtscF7jG4Uzaijez2vY5ilyQ+Xf5loCS
aYjugYRaOzOTyY+kFmmShkY/L98BGchB7RX0tVCMjB1tbsDFZUIDle5+yPO8eV1l
kMihpCmRyvQFzcm7jnBfhiBPLQ3wMS9tJxkCPS9vyFeUJStd78izI+gz7x0QQ83v
k0MmZbrLxZtd0MbmDw11f6FImB7XG+Me+7lUkUDzXULgiaSnHL3v7Tw=
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:15 2025 by rpki-client