Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31322e302f32342d3234203d3e20323731343638.roa
File:                     3138312e3232342e31322e302f32342d3234203d3e20323731343638.roa (raw, json)
Hash identifier:          sIS9RY1ecTdvD3cP11ae//pbbo4bG/pCUxJovNsXfxE=
Subject key identifier:   7B:92:C8:0E:63:12:01:3F:53:2D:B1:F5:1B:D3:A1:44:C6:D4:07:53
Certificate issuer:       /CN=66F999D364628A7CC2634117B086F1A07B01449C
Certificate serial:       44335C242A61474E5E561ED44848DA4C6F223359
Authority key identifier: 66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31322e302f32342d3234203d3e20323731343638.roa
Signing time:             Wed 19 Feb 2025 10:33:22 +0000
ROA not before:           Wed 19 Feb 2025 10:28:22 +0000
ROA not after:            Wed 18 Feb 2026 10:33:22 +0000
asID:                     271468
IP address blocks:        181.224.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:33:5c:24:2a:61:47:4e:5e:56:1e:d4:48:48:da:4c:6f:22:33:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F999D364628A7CC2634117B086F1A07B01449C
        Validity
            Not Before: Feb 19 10:28:22 2025 GMT
            Not After : Feb 18 10:33:22 2026 GMT
        Subject: CN=7B92C80E6312013F532DB1F51BD3A144C6D40753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:14:6b:b1:51:f3:a0:2d:48:43:5c:c9:0f:
                    34:93:70:1a:bd:e9:de:ad:bb:2c:ce:49:49:99:c3:
                    fb:a2:8f:5b:9a:7c:f3:ff:4a:00:82:18:f6:0a:02:
                    92:08:0f:5a:71:bc:24:9d:09:0c:e6:fb:95:31:18:
                    36:16:8a:52:6d:19:41:38:a2:f1:7a:af:3b:52:02:
                    34:e2:64:0d:4c:98:99:68:47:77:25:ba:fd:5c:de:
                    ce:18:4b:ad:8a:3d:d0:d3:6d:78:d1:4d:3f:2f:2f:
                    bf:a2:c3:2e:e9:04:9f:b2:4a:87:00:df:2a:8d:b2:
                    85:76:b7:3c:62:30:07:31:62:f5:d8:8f:11:81:05:
                    42:9f:8e:ae:c7:66:5c:4c:49:f5:e3:55:72:bb:83:
                    9c:39:a1:9b:2f:c5:e2:93:3e:8b:a4:9b:89:97:96:
                    cc:77:d1:a4:b9:12:81:28:ff:67:1e:ca:4a:d9:54:
                    a9:56:01:9f:2d:d8:30:7b:f2:ad:b5:61:29:14:5c:
                    bd:7c:aa:37:6a:ec:e2:b0:09:f9:29:aa:e9:e2:b2:
                    a2:ed:7f:e6:2a:e9:48:09:1f:56:b6:f9:f8:8e:5f:
                    9b:c8:ec:d4:eb:1f:c1:47:d2:59:49:dc:1a:40:b0:
                    39:80:78:a2:4b:3b:65:99:91:6a:cb:d3:16:b0:bf:
                    88:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:92:C8:0E:63:12:01:3F:53:2D:B1:F5:1B:D3:A1:44:C6:D4:07:53
            X509v3 Authority Key Identifier:
                keyid:66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31322e302f32342d3234203d3e20323731343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:a8:22:4e:17:91:9b:6a:ef:86:16:1d:c7:5a:c8:02:d4:79:
         e1:77:4d:7e:5e:4b:59:e7:39:84:68:cc:57:b1:6d:b0:c6:6e:
         8e:db:00:50:de:2b:33:7f:0f:0a:1e:3f:3d:6c:cd:6f:dc:d8:
         34:bc:46:62:c0:da:5d:39:2b:df:ea:3a:ca:85:d9:58:84:10:
         fe:26:3b:d6:58:e5:6e:f1:fe:17:d1:55:a3:48:cc:ff:ee:f7:
         ac:80:ad:6f:0b:20:63:eb:34:83:97:15:1e:15:94:e2:3a:9a:
         f7:3d:bd:f8:3d:f3:95:c6:32:bd:8f:fb:78:1b:20:e0:56:5c:
         e9:cc:5e:e3:0e:ac:4d:48:f4:40:81:bc:9d:2b:f9:86:e7:2b:
         f3:ff:30:2b:79:1e:c5:e2:1c:ba:a9:e6:70:61:30:87:06:d1:
         7d:fa:61:2f:02:ee:5d:6a:3c:d0:70:ff:cd:29:f4:b0:51:c1:
         8f:aa:95:66:e9:67:3c:7b:a3:ee:ab:ff:78:31:1b:b9:05:95:
         aa:f3:06:98:24:ae:a3:06:33:b9:03:88:53:1f:25:b8:8c:5a:
         75:8e:44:cd:c6:8b:cf:4c:50:4b:05:3d:5a:2c:b7:93:e3:92:
         b4:b6:f4:a1:27:5e:43:c0:ec:d2:9a:b3:36:1e:2b:d8:2a:74:
         24:0b:34:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:35:42 2025 by rpki-client