Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/3138312e3138392e32392e302f32342d3234203d3e20323731343034.roa
File:                     3138312e3138392e32392e302f32342d3234203d3e20323731343034.roa (raw, json)
Hash identifier:          jOamcRcMPtUS3/szbzALeeUNXBfGdvfcXca+YhS5fA4=
Subject key identifier:   A5:04:7C:61:44:30:CE:CD:11:4B:F7:37:00:10:67:0D:A1:68:EA:BC
Certificate issuer:       /CN=195B0E672501530A4C74BA0517CBCD60842BBBC9
Certificate serial:       6D0F1FB8EE275E12E8D0E1ABAE6483679B2ADB22
Authority key identifier: 19:5B:0E:67:25:01:53:0A:4C:74:BA:05:17:CB:CD:60:84:2B:BB:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/195B0E672501530A4C74BA0517CBCD60842BBBC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/3138312e3138392e32392e302f32342d3234203d3e20323731343034.roa
Signing time:             Tue 18 Feb 2025 12:41:59 +0000
ROA not before:           Tue 18 Feb 2025 12:36:59 +0000
ROA not after:            Tue 17 Feb 2026 12:41:59 +0000
asID:                     271404
IP address blocks:        181.189.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0f:1f:b8:ee:27:5e:12:e8:d0:e1:ab:ae:64:83:67:9b:2a:db:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195B0E672501530A4C74BA0517CBCD60842BBBC9
        Validity
            Not Before: Feb 18 12:36:59 2025 GMT
            Not After : Feb 17 12:41:59 2026 GMT
        Subject: CN=A5047C614430CECD114BF7370010670DA168EABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:b9:b1:93:0c:02:17:03:ce:bb:aa:f9:ca:
                    68:8e:13:3d:96:43:11:68:de:e2:6b:57:b4:cc:c2:
                    42:66:72:ad:d2:aa:b7:f2:10:c9:10:c1:eb:07:b1:
                    8c:a0:2c:cf:73:5e:4b:1d:01:30:35:6a:47:80:76:
                    75:14:b1:4c:5a:5f:e7:03:48:7b:e5:d5:39:31:d3:
                    c8:f4:b5:c0:4f:f4:a0:6b:89:17:09:18:25:15:5c:
                    af:a2:57:6b:2f:83:61:b4:33:3b:91:3f:5c:e2:4a:
                    35:05:20:6e:b3:be:4c:d1:30:3b:d0:fc:f1:a4:6a:
                    ab:46:f4:f9:01:93:c0:5e:2a:c1:e8:58:d0:3b:2e:
                    a6:42:6f:73:d4:ac:3b:ad:bf:93:67:5e:6f:b5:de:
                    90:2d:97:40:7c:e1:0c:c5:e8:d1:e4:7c:e3:12:cf:
                    d5:b3:5c:88:e4:ea:0f:97:ec:a5:8c:88:a7:af:ed:
                    8c:fd:6a:5f:b0:b1:99:00:10:af:19:34:f0:4e:66:
                    3c:d4:21:17:0f:f4:dc:39:4a:a3:38:50:41:01:9b:
                    98:0c:8b:c5:23:96:2d:33:7f:ae:3c:9e:61:a1:f9:
                    01:4c:3b:fa:12:96:85:72:c9:b2:36:cc:c0:4d:9c:
                    51:dd:52:76:0b:86:bf:ce:5d:07:a9:d2:78:e6:13:
                    b8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:04:7C:61:44:30:CE:CD:11:4B:F7:37:00:10:67:0D:A1:68:EA:BC
            X509v3 Authority Key Identifier:
                keyid:19:5B:0E:67:25:01:53:0A:4C:74:BA:05:17:CB:CD:60:84:2B:BB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/195B0E672501530A4C74BA0517CBCD60842BBBC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/195B0E672501530A4C74BA0517CBCD60842BBBC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/3138312e3138392e32392e302f32342d3234203d3e20323731343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:2a:40:ff:c4:85:44:1f:43:d4:c5:cc:e2:fd:8f:11:85:f7:
         cb:30:9b:ec:7d:f3:78:3e:bd:4e:26:44:fb:c5:6e:f4:5a:00:
         83:81:2c:f8:57:dd:0b:d2:a2:dd:6d:35:2e:11:c5:fb:c7:bd:
         f9:e3:39:b8:f8:0a:02:1e:64:22:94:6a:e6:f9:42:3b:da:d7:
         e3:d4:77:8a:23:28:24:02:f1:3a:71:9e:83:b2:d5:cd:bb:77:
         ae:a6:75:7e:05:81:bb:7f:c0:68:4a:f3:ac:e2:a8:0c:37:22:
         dc:91:d2:26:9f:82:a0:a4:69:0a:3c:f9:b8:4d:94:6a:f1:0b:
         d5:45:43:aa:dc:ab:bc:f0:7d:08:9b:67:16:b5:54:4e:50:04:
         2a:cb:41:f5:7b:d0:cb:25:dc:62:06:2f:34:b9:5c:7a:73:bc:
         7a:2b:60:64:e1:05:68:f7:4b:8a:02:de:ee:a3:40:e6:82:08:
         dd:d9:2c:27:2c:d2:9d:a9:c2:28:d5:7a:b5:bd:aa:c1:6a:fb:
         0d:5e:15:c6:45:5b:b3:9d:eb:79:5f:7c:6f:88:e1:87:ed:fb:
         6e:83:3f:bb:91:2e:7a:11:f1:77:a6:ac:53:6a:ef:00:81:22:
         be:be:5a:71:1f:9a:bc:66:34:e7:14:b3:8f:a6:e2:a8:a7:1b:
         95:80:65:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:10:46 2025 by rpki-client