Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/3138312e3138392e32382e302f32322d3232203d3e20323731343034.roa
File:                     3138312e3138392e32382e302f32322d3232203d3e20323731343034.roa (raw, json)
Hash identifier:          a6AGRDLRqApVepqr18KlKe5XpVJI6JH7TiXCslI1Q6Q=
Subject key identifier:   F3:81:4E:A3:45:87:E4:37:4C:B8:37:D8:89:32:D5:F1:DD:18:24:EF
Certificate issuer:       /CN=195B0E672501530A4C74BA0517CBCD60842BBBC9
Certificate serial:       43EA1741E5A90608BE864ACCA66AF38CD961C68D
Authority key identifier: 19:5B:0E:67:25:01:53:0A:4C:74:BA:05:17:CB:CD:60:84:2B:BB:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/195B0E672501530A4C74BA0517CBCD60842BBBC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/3138312e3138392e32382e302f32322d3232203d3e20323731343034.roa
Signing time:             Tue 18 Feb 2025 12:42:00 +0000
ROA not before:           Tue 18 Feb 2025 12:37:00 +0000
ROA not after:            Tue 17 Feb 2026 12:42:00 +0000
asID:                     271404
IP address blocks:        181.189.28.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ea:17:41:e5:a9:06:08:be:86:4a:cc:a6:6a:f3:8c:d9:61:c6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195B0E672501530A4C74BA0517CBCD60842BBBC9
        Validity
            Not Before: Feb 18 12:37:00 2025 GMT
            Not After : Feb 17 12:42:00 2026 GMT
        Subject: CN=F3814EA34587E4374CB837D88932D5F1DD1824EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:6b:a7:b7:32:fb:0c:06:e0:d5:76:ec:53:
                    e4:f2:c3:ec:3c:8c:aa:23:ce:fa:1c:dd:a9:05:d7:
                    88:61:7e:e8:91:ef:b6:56:93:ef:bf:7d:4b:50:40:
                    82:87:77:87:37:e3:9e:79:0e:41:f3:b6:f8:f9:a9:
                    2e:ca:8c:3c:a0:ff:96:1f:2f:01:14:24:d1:9b:1f:
                    77:c7:33:6b:74:1c:ec:f4:b9:1d:85:2f:d5:32:3d:
                    5e:b2:3c:11:16:b8:48:3d:3c:41:83:72:a6:19:8d:
                    db:c4:b1:41:72:00:69:71:d3:60:7e:ac:34:5a:d9:
                    30:f1:02:4e:bf:2f:4a:53:8b:e6:b4:3c:05:d2:c6:
                    37:ce:a9:6a:0a:84:45:10:6b:9e:e3:f3:f3:7b:ea:
                    99:f3:be:68:df:58:85:01:be:bd:5b:99:d8:f1:7a:
                    86:d9:b5:ab:ec:af:d4:39:fb:00:d8:8e:d3:f3:78:
                    2d:1e:77:81:64:7a:bb:bb:17:90:47:d7:35:8b:05:
                    69:a1:15:d7:a7:5f:04:f4:5f:2c:9c:e7:98:a4:69:
                    53:b7:8c:a9:88:d9:39:76:0d:2b:b9:c1:9f:03:3a:
                    d4:8f:93:34:c5:be:48:ba:f2:d6:a9:97:63:de:f4:
                    f1:80:bb:20:c3:8a:07:0d:4a:93:de:63:f9:cf:27:
                    db:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:81:4E:A3:45:87:E4:37:4C:B8:37:D8:89:32:D5:F1:DD:18:24:EF
            X509v3 Authority Key Identifier:
                keyid:19:5B:0E:67:25:01:53:0A:4C:74:BA:05:17:CB:CD:60:84:2B:BB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/195B0E672501530A4C74BA0517CBCD60842BBBC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/195B0E672501530A4C74BA0517CBCD60842BBBC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/3138312e3138392e32382e302f32322d3232203d3e20323731343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:cd:90:b0:f1:e2:69:a3:6f:16:18:84:36:bc:e8:79:8c:cf:
         10:a4:e6:19:43:bf:d6:e7:4e:97:dd:95:c9:ef:ce:7b:71:34:
         bf:ea:37:7d:70:0d:4f:c4:7e:d6:57:33:ec:80:25:f3:84:0a:
         7b:4e:69:6f:5e:3f:f3:9f:07:c2:8a:4b:d1:7d:16:4c:7c:28:
         4c:6d:e0:4e:03:92:70:50:94:a5:70:89:c8:a1:69:21:07:09:
         9d:a2:b1:72:65:c7:0c:22:7f:fd:73:33:66:d7:21:df:9f:6b:
         67:37:f2:c3:58:9e:f8:b6:b6:52:92:00:eb:c3:8f:b3:f6:3c:
         8e:6b:69:b5:ab:e4:e7:82:ac:51:3c:88:29:59:6b:1a:7e:2e:
         10:e5:ac:26:c0:2d:74:12:82:fe:07:a7:fe:cd:ab:47:4e:fd:
         36:a9:9c:be:e0:a2:3d:4d:07:16:24:0a:01:3a:fb:08:15:43:
         7e:5e:e1:89:c8:08:ac:8e:d4:e9:72:4e:27:8f:91:bc:81:a3:
         c7:0a:62:76:82:f1:6c:cc:13:a7:31:e0:40:5e:96:80:9e:3b:
         bd:97:1b:77:65:c8:98:94:46:81:52:2c:1a:e1:75:4e:eb:38:
         88:33:a1:9d:e6:91:1c:05:fe:4d:f5:11:76:9c:50:68:d3:6d:
         cb:49:a5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:03:32 2025 by rpki-client