Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34342e302f32342d3234203d3e20323731343230.roa
File:                     3138312e3233332e34342e302f32342d3234203d3e20323731343230.roa (raw, json)
Hash identifier:          GAOPlYlsUZ0TZ3SeAet1+5TTBS1FMCJPjD2SMATAiWY=
Subject key identifier:   09:3C:DE:E3:B1:B9:47:D4:DA:C0:31:74:45:43:46:F4:CC:99:91:54
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       0D4332918529D2C7A4455DAB6559D8AC57B462EC
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34342e302f32342d3234203d3e20323731343230.roa
Signing time:             Mon 15 Jan 2024 12:10:10 +0000
ROA not before:           Mon 15 Jan 2024 12:05:10 +0000
ROA not after:            Mon 13 Jan 2025 12:10:10 +0000
asID:                     271420
IP address blocks:        181.233.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:43:32:91:85:29:d2:c7:a4:45:5d:ab:65:59:d8:ac:57:b4:62:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Jan 15 12:05:10 2024 GMT
            Not After : Jan 13 12:10:10 2025 GMT
        Subject: CN=093CDEE3B1B947D4DAC03174454346F4CC999154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:8d:27:54:a9:b3:6a:0c:e1:e1:74:f0:17:
                    52:20:32:ad:23:ec:b2:80:60:0e:39:96:29:28:e7:
                    4b:d2:37:84:7a:1f:cc:9b:2c:0d:82:e1:2d:89:fe:
                    e8:b9:8d:3d:b9:a1:66:c2:b5:c9:80:ba:70:b2:37:
                    32:39:64:52:ab:0d:80:26:48:43:9b:44:9b:a8:19:
                    30:9c:08:95:28:5a:3a:7b:6e:76:c3:a7:75:de:8c:
                    fc:02:a9:e4:07:e7:17:b4:f6:24:de:da:ee:d9:7a:
                    68:25:25:4a:42:69:4d:10:0a:4b:cc:b9:f1:28:20:
                    20:c6:9a:b5:c1:e3:e7:a4:ee:c4:d0:27:e0:f1:d4:
                    02:63:48:a9:72:8c:af:c0:69:b1:ba:31:a8:ce:c0:
                    95:4d:85:53:10:57:57:62:c7:dc:41:d2:0f:2a:33:
                    d0:c1:45:68:0b:cc:68:e7:f2:49:5a:06:0c:62:1a:
                    6e:fd:40:73:65:9c:91:13:a2:ff:b2:dc:4d:fd:62:
                    01:7c:d1:35:17:75:0f:6e:50:62:61:4f:71:85:09:
                    b8:1b:f4:50:a8:26:f7:85:bd:0c:dc:27:38:3d:e0:
                    67:30:fa:c3:91:ff:9c:79:b9:26:f4:de:b7:2f:b0:
                    b5:93:ba:08:f8:37:9b:15:c9:c6:95:df:f1:fe:ce:
                    bf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3C:DE:E3:B1:B9:47:D4:DA:C0:31:74:45:43:46:F4:CC:99:91:54
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34342e302f32342d3234203d3e20323731343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:39:1c:2e:97:85:a0:a9:d5:6a:03:8c:35:8c:80:29:33:02:
         7d:e4:58:cb:38:0e:fa:9a:5c:d6:ea:03:fd:c8:58:22:82:00:
         2b:3b:db:00:d8:24:27:53:0b:e8:6e:40:a5:1a:d7:f9:17:c3:
         5f:a1:d1:44:93:bd:51:e1:b0:97:b7:02:97:bc:48:c1:f1:c1:
         ec:af:0f:a8:c2:73:a6:80:96:76:34:95:01:72:bc:be:2f:4c:
         cd:76:67:4d:9a:5d:40:d8:4c:6e:35:cf:06:ab:53:f5:4d:1b:
         e8:9e:4c:7f:1a:8f:c1:d2:81:0c:da:6f:08:0b:57:7e:40:48:
         a2:26:e3:f6:8d:3e:53:1d:ed:92:c1:55:3d:e8:5a:d4:58:62:
         ab:90:dd:ee:aa:8f:6e:4a:12:8d:ca:82:84:4a:4e:2e:b2:13:
         9f:2c:9e:b0:07:9b:17:54:b4:de:d9:8b:76:48:39:d1:5f:96:
         84:de:8e:f2:5d:35:2a:c6:2f:a4:09:a3:0e:e2:ff:6c:23:1f:
         04:23:83:d0:aa:8c:45:fe:95:86:c0:a6:57:25:33:21:2c:7d:
         d0:68:a9:17:9f:d3:30:0f:2c:69:65:fe:44:cc:6a:66:fc:0b:
         f8:d3:40:92:29:21:ef:05:63:1b:d9:d4:6e:61:de:61:53:40:
         02:47:f5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:56 2025 by rpki-client