Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/3138312e3137342e3231342e302f32342d3234203d3e20323731353438.roa
File:                     3138312e3137342e3231342e302f32342d3234203d3e20323731353438.roa (raw, json)
Hash identifier:          ip101EENxHwvPhVOXVyWsSlvcVEXS7ykLnDfRjB8TU4=
Subject key identifier:   DE:90:2A:62:E4:A4:EA:07:CA:FD:FB:86:66:78:FF:95:31:C5:87:3D
Certificate issuer:       /CN=BB14F8790AB22FF52E74DE9483836B16E3A7C74E
Certificate serial:       159BB409DB1A093FE17D1FC71C437B763D4031DA
Authority key identifier: BB:14:F8:79:0A:B2:2F:F5:2E:74:DE:94:83:83:6B:16:E3:A7:C7:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB14F8790AB22FF52E74DE9483836B16E3A7C74E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/3138312e3137342e3231342e302f32342d3234203d3e20323731353438.roa
Signing time:             Tue 07 Nov 2023 21:00:22 +0000
ROA not before:           Tue 07 Nov 2023 20:55:22 +0000
ROA not after:            Tue 05 Nov 2024 21:00:22 +0000
asID:                     271548
IP address blocks:        181.174.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9b:b4:09:db:1a:09:3f:e1:7d:1f:c7:1c:43:7b:76:3d:40:31:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB14F8790AB22FF52E74DE9483836B16E3A7C74E
        Validity
            Not Before: Nov  7 20:55:22 2023 GMT
            Not After : Nov  5 21:00:22 2024 GMT
        Subject: CN=DE902A62E4A4EA07CAFDFB866678FF9531C5873D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d1:76:85:4d:48:da:02:04:3b:29:00:45:e4:
                    38:a4:cd:42:f2:2b:ee:e8:b3:91:24:80:7e:49:51:
                    bd:7e:bc:18:81:0c:36:68:bb:b5:f4:57:47:18:d7:
                    83:57:a8:b5:5d:47:7a:e5:23:72:ce:01:82:1e:25:
                    82:d0:f7:a2:61:e8:da:b6:89:67:19:ec:6b:1c:8f:
                    99:67:2a:b4:63:69:b6:52:4b:f8:6a:88:fd:1e:0f:
                    d4:10:af:24:4f:06:a2:7e:02:c2:3c:94:72:f3:95:
                    6f:d3:6e:3d:df:1b:2e:4e:9e:f5:23:c1:06:c4:be:
                    27:e0:33:f5:e2:53:9d:0e:21:6e:fe:81:34:03:b2:
                    f6:13:73:ee:df:95:6a:2c:4f:c6:0e:f3:38:4e:d8:
                    a2:fa:64:0f:26:96:03:3d:09:2c:bf:85:86:cb:69:
                    d4:39:5e:2b:69:05:0f:95:9a:09:da:4a:44:d7:6d:
                    48:25:6c:36:2f:64:a3:54:b7:9f:9e:5d:35:ef:c8:
                    f9:25:f1:cd:d5:e0:90:c2:b7:fd:74:16:59:d4:e3:
                    cd:98:28:d3:b3:66:1c:3c:38:07:a9:55:4d:64:c5:
                    dd:1b:58:82:29:a2:c2:bd:3a:2b:7b:aa:51:5d:ae:
                    3c:ea:13:ab:09:21:64:a9:f8:52:fb:88:a0:fb:35:
                    86:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:90:2A:62:E4:A4:EA:07:CA:FD:FB:86:66:78:FF:95:31:C5:87:3D
            X509v3 Authority Key Identifier:
                keyid:BB:14:F8:79:0A:B2:2F:F5:2E:74:DE:94:83:83:6B:16:E3:A7:C7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/BB14F8790AB22FF52E74DE9483836B16E3A7C74E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB14F8790AB22FF52E74DE9483836B16E3A7C74E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/3138312e3137342e3231342e302f32342d3234203d3e20323731353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:bf:1b:85:35:ec:6f:bf:c0:b8:63:fe:bd:c6:d4:06:cd:71:
         d6:f5:a0:e4:b4:f8:77:78:63:a8:96:c1:f3:9b:88:99:e7:dd:
         11:6e:6a:84:5b:b6:8a:7a:83:3b:a4:eb:d3:cf:f7:9a:d6:21:
         b1:b2:40:01:4d:2f:89:8a:61:04:4e:5a:af:0b:06:e8:3b:b4:
         cb:ff:0d:53:a7:bc:e8:8e:bf:fa:16:5b:ba:af:d9:6a:32:d8:
         dc:ca:33:18:9e:75:56:39:0b:b6:00:5a:94:e5:97:1a:6c:6b:
         32:7a:9c:7a:62:10:67:5e:e2:6e:28:d6:9c:1d:6a:61:19:1a:
         d5:1b:49:12:1c:df:70:b2:e8:18:44:73:dc:bc:86:da:57:99:
         51:b9:5a:ad:8a:bd:3e:d5:6b:51:0a:b4:88:08:bc:87:0f:03:
         bd:fb:ca:72:57:fd:d0:04:6d:27:49:65:bb:15:c5:7f:38:fc:
         b1:2e:7d:f8:95:73:86:f1:18:8d:d6:39:e2:aa:6f:ee:f6:d9:
         ad:b5:fe:47:a2:e3:7f:5f:7e:29:e9:09:c6:2e:57:01:ff:a0:
         c9:23:70:0b:55:a0:83:05:42:f2:91:31:93:2f:19:d7:d9:64:
         c7:f8:a0:04:74:f5:7e:fc:c6:96:18:f5:91:52:3d:78:eb:4a:
         22:46:7f:fa
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFZu0CdsaCT/hfR/HHEN7dj1AMdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIxNEY4NzkwQUIyMkZGNTJFNzRERTk0ODM4MzZCMTZF
M0E3Qzc0RTAeFw0yMzExMDcyMDU1MjJaFw0yNDExMDUyMTAwMjJaMDMxMTAvBgNV
BAMTKERFOTAyQTYyRTRBNEVBMDdDQUZERkI4NjY2NzhGRjk1MzFDNTg3M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ0XaFTUjaAgQ7KQBF5DikzULy
K+7os5EkgH5JUb1+vBiBDDZou7X0V0cY14NXqLVdR3rlI3LOAYIeJYLQ96Jh6Nq2
iWcZ7Gscj5lnKrRjabZSS/hqiP0eD9QQryRPBqJ+AsI8lHLzlW/Tbj3fGy5OnvUj
wQbEvifgM/XiU50OIW7+gTQDsvYTc+7flWosT8YO8zhO2KL6ZA8mlgM9CSy/hYbL
adQ5XitpBQ+VmgnaSkTXbUglbDYvZKNUt5+eXTXvyPkl8c3V4JDCt/10FlnU482Y
KNOzZhw8OAepVU1kxd0bWIIposK9Oit7qlFdrjzqE6sJIWSp+FL7iKD7NYZdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3pAqYuSk6gfK/fuGZnj/lTHFhz0wHwYDVR0j
BBgwFoAUuxT4eQqyL/UudN6Ug4NrFuOnx04wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzFRNXd5aWJpZ1lyOTkzRlhRTHFaNkxDR0tWdUM5RFcyUlVuUVhKdEhk
aUovMC9CQjE0Rjg3OTBBQjIyRkY1MkU3NERFOTQ4MzgzNkIxNkUzQTdDNzRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JCMTRGODc5MEFCMjJGRjUy
RTc0REU5NDgzODM2QjE2RTNBN0M3NEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0MxUTV3eWliaWdZcjk5M0ZYUUxxWjZMQ0dLVnVDOURXMlJVblFYSnRIZGlKLzAv
MzEzODMxMmUzMTM3MzQyZTMyMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTM1MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALWu1jANBgkqhkiG9w0BAQsFAAOCAQEAgL8b
hTXsb7/AuGP+vcbUBs1x1vWg5LT4d3hjqJbB85uImefdEW5qhFu2inqDO6Tr08/3
mtYhsbJAAU0viYphBE5arwsG6Du0y/8NU6e86I6/+hZbuq/ZajLY3MozGJ51VjkL
tgBalOWXGmxrMnqcemIQZ17ibijWnB1qYRka1RtJEhzfcLLoGERz3LyG2leZUbla
rYq9PtVrUQq0iAi8hw8DvfvKclf90ARtJ0lluxXFfzj8sS59+JVzhvEYjdY54qpv
7vbZrbX+R6Ljf19+KekJxi5XAf+gySNwC1WggwVC8pExky8Z19lkx/igBHT1fvzG
lhj1kVI9eOtKIkZ/+g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:50 2025 by rpki-client