Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/3138312e3138392e32382e302f32342d3234203d3e20323731343034.roa
File:                     3138312e3138392e32382e302f32342d3234203d3e20323731343034.roa (raw, json)
Hash identifier:          TH5ljJNEcEgpi1wOeAygdUHz2odmsT7isQoHP0NO+Cg=
Subject key identifier:   DB:80:4B:8C:4A:8D:4A:DB:5B:6B:D1:A7:E5:27:B4:A5:02:B9:94:9C
Certificate issuer:       /CN=195B0E672501530A4C74BA0517CBCD60842BBBC9
Certificate serial:       11F7EA6D50C9647FFB3ABEF2966B09B4302010E8
Authority key identifier: 19:5B:0E:67:25:01:53:0A:4C:74:BA:05:17:CB:CD:60:84:2B:BB:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/195B0E672501530A4C74BA0517CBCD60842BBBC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/3138312e3138392e32382e302f32342d3234203d3e20323731343034.roa
Signing time:             Tue 18 Feb 2025 12:41:59 +0000
ROA not before:           Tue 18 Feb 2025 12:36:59 +0000
ROA not after:            Tue 17 Feb 2026 12:41:59 +0000
asID:                     271404
IP address blocks:        181.189.28.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f7:ea:6d:50:c9:64:7f:fb:3a:be:f2:96:6b:09:b4:30:20:10:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195B0E672501530A4C74BA0517CBCD60842BBBC9
        Validity
            Not Before: Feb 18 12:36:59 2025 GMT
            Not After : Feb 17 12:41:59 2026 GMT
        Subject: CN=DB804B8C4A8D4ADB5B6BD1A7E527B4A502B9949C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:88:80:d2:a9:af:a2:3b:2e:70:2d:27:2d:
                    d1:44:a3:14:ac:b0:ac:60:8e:51:9a:66:a1:40:ae:
                    be:c2:c8:90:3d:29:fc:e8:de:af:71:d0:6e:fc:55:
                    74:2c:e7:fc:85:3f:b4:1e:3f:b0:ab:a2:fa:72:c6:
                    05:8f:7e:fa:f7:23:57:46:ae:99:ff:ba:98:1c:bf:
                    9e:84:e4:08:73:9f:3f:c1:41:d7:80:fa:d7:b4:ee:
                    64:31:54:f1:51:36:c4:7f:db:92:46:fb:37:f9:53:
                    4f:3c:9b:6a:ba:35:95:6a:4d:b3:b0:17:7f:b7:29:
                    db:74:c3:95:52:a6:cf:cb:82:db:17:b7:bd:4f:eb:
                    ce:5c:4d:d3:83:65:ae:ea:c4:94:c3:d0:23:3e:dc:
                    fa:a0:89:7f:d9:c3:59:d2:ff:35:cd:f7:d6:0c:b7:
                    92:f4:ab:76:ec:42:a6:3f:48:e8:44:65:2c:85:62:
                    4f:b1:9e:21:2f:9c:e5:9a:8d:5b:8f:15:f9:6b:83:
                    57:c1:8a:e1:5f:71:07:18:36:66:8e:89:f3:bc:49:
                    ec:62:df:60:5e:7e:54:86:23:8a:02:e7:cc:fc:1a:
                    f1:dc:c9:a5:a6:81:fd:74:d1:99:c1:32:cb:24:7e:
                    c3:76:82:71:67:3d:69:67:e3:3e:db:70:3f:6d:e9:
                    0f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:80:4B:8C:4A:8D:4A:DB:5B:6B:D1:A7:E5:27:B4:A5:02:B9:94:9C
            X509v3 Authority Key Identifier:
                keyid:19:5B:0E:67:25:01:53:0A:4C:74:BA:05:17:CB:CD:60:84:2B:BB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/195B0E672501530A4C74BA0517CBCD60842BBBC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/195B0E672501530A4C74BA0517CBCD60842BBBC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/3138312e3138392e32382e302f32342d3234203d3e20323731343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:5b:24:86:fe:d1:ed:10:49:7c:24:7a:90:fa:cc:5f:a2:63:
         bb:8b:71:e9:e4:75:ae:7f:f7:42:3c:b0:dc:ab:3d:31:11:53:
         73:9b:cf:1b:35:8c:e2:21:ee:6f:bf:be:20:1d:15:c3:4e:44:
         e8:a5:1e:ea:d0:7c:dc:30:91:15:70:78:f7:6a:18:7a:c2:01:
         2b:c2:61:7c:0b:e0:e0:a0:2c:95:55:b4:e3:98:e1:58:71:ca:
         2d:9a:be:8c:3e:03:c0:8c:27:24:51:c1:e5:8f:70:61:5f:75:
         95:45:0c:bd:58:62:0b:83:08:68:85:19:99:99:c9:92:93:08:
         46:ed:4f:25:d3:84:9c:a5:a6:48:27:34:68:3e:11:7f:38:29:
         80:a8:af:d9:49:5c:fd:e5:79:7e:e8:85:c0:9f:15:97:6d:83:
         f3:7a:66:05:db:40:87:b6:ef:47:07:54:6e:bb:ff:86:4e:ce:
         e0:eb:da:02:53:f8:3b:38:97:b5:1c:68:c1:cb:ef:d1:7c:af:
         76:57:77:53:11:61:92:e9:13:a9:42:2d:38:f7:a1:ca:8e:a0:
         26:ad:77:ef:f8:04:d1:b6:80:eb:db:2a:99:19:15:b3:da:3d:
         d3:b7:cc:db:37:a2:a2:b4:18:3b:92:0d:e5:b6:91:42:32:27:
         38:5a:24:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:29:11 2025 by rpki-client