Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34372e302f32342d3234203d3e20323731343230.roa
File:                     3138312e3233332e34372e302f32342d3234203d3e20323731343230.roa (raw, json)
Hash identifier:          tEDCFqafxuYSdezZqLoaF51lRKlHnUql9Qdh6v/nY8U=
Subject key identifier:   E1:B1:10:7B:A1:28:49:17:DF:F2:DC:B0:46:4E:B0:1B:7E:76:B1:14
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       0C521ACA74BA0D412F82A19B0EFCFBCF8BB7E559
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34372e302f32342d3234203d3e20323731343230.roa
Signing time:             Mon 15 Jan 2024 12:10:10 +0000
ROA not before:           Mon 15 Jan 2024 12:05:10 +0000
ROA not after:            Mon 13 Jan 2025 12:10:10 +0000
asID:                     271420
IP address blocks:        181.233.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:52:1a:ca:74:ba:0d:41:2f:82:a1:9b:0e:fc:fb:cf:8b:b7:e5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Jan 15 12:05:10 2024 GMT
            Not After : Jan 13 12:10:10 2025 GMT
        Subject: CN=E1B1107BA1284917DFF2DCB0464EB01B7E76B114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:79:ca:58:b9:1c:cf:b9:76:2c:3b:f1:b2:09:
                    69:ef:9e:a6:6e:02:11:9c:bc:99:9d:ea:f9:54:d6:
                    63:42:c5:29:e2:59:28:5a:8f:c8:a1:71:c6:df:e2:
                    8f:ca:44:2b:b6:11:8d:6f:1a:e3:17:da:54:24:06:
                    36:59:21:c7:96:9a:e6:ed:67:cf:3b:c9:39:2f:46:
                    90:a1:b6:c8:81:03:86:2c:d1:63:62:f5:03:3d:c2:
                    64:89:67:4b:86:2f:5f:b6:54:5d:88:b0:e1:f9:d1:
                    d0:12:15:a6:86:0d:e0:f0:e4:87:7a:12:a2:83:7f:
                    7f:44:97:bd:c4:95:18:c0:06:49:02:df:69:75:c9:
                    60:be:b8:c3:7b:5c:6d:da:fe:bc:f6:7e:e3:e6:64:
                    16:dd:7f:51:ed:86:e4:59:01:22:01:84:a7:bb:a8:
                    7e:0a:86:fc:89:4c:34:32:d2:35:bb:34:8a:88:23:
                    80:2b:58:8e:93:ff:ff:33:34:ec:c8:46:c9:30:9b:
                    c0:6b:07:24:52:04:45:29:9a:1e:eb:b1:26:ab:e7:
                    20:5c:a8:ff:65:1e:42:2c:2f:eb:84:44:b5:f9:7e:
                    41:a8:b6:c0:4f:76:bd:08:5f:e1:1b:26:de:c1:3c:
                    de:e6:17:c9:70:88:7f:00:39:2b:29:96:d4:45:b9:
                    09:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B1:10:7B:A1:28:49:17:DF:F2:DC:B0:46:4E:B0:1B:7E:76:B1:14
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34372e302f32342d3234203d3e20323731343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:02:2b:59:58:6f:0f:28:f4:ae:88:53:ac:93:6d:c9:e0:f7:
         c2:fa:7b:d4:58:8c:d7:ec:30:9e:bb:01:95:c7:bb:fd:b7:da:
         ff:bc:2e:62:2c:19:7b:28:98:89:ea:27:18:17:8f:64:ad:66:
         94:19:f7:72:8c:de:a3:f2:33:f7:71:9d:cd:8e:ec:3f:10:97:
         c6:ef:7f:41:88:b4:9b:f7:46:08:f9:81:65:b6:88:5d:a3:9f:
         92:93:db:6d:f6:16:db:58:18:37:9f:52:d0:59:ad:8f:e6:28:
         65:ae:91:30:a5:cd:4c:bb:b1:74:32:ce:f8:50:1c:54:4c:dd:
         81:a1:60:72:6b:3f:b6:03:be:c0:68:18:2f:07:18:6b:80:28:
         88:a5:af:44:2e:f8:1e:ff:d4:24:c5:da:c6:cb:35:d6:ad:e4:
         91:79:a3:41:ee:0e:f4:fe:72:0f:aa:70:05:11:be:72:04:28:
         8c:eb:0f:f9:13:24:7f:c9:0f:7a:05:21:d6:80:dd:32:02:2c:
         59:e8:c3:03:3b:d5:00:95:96:c4:1a:7e:dc:8a:cc:ec:ca:6d:
         02:95:1c:24:8b:cf:e9:c4:a3:85:7c:b0:9b:f0:bb:5b:be:9f:
         03:88:dd:a9:05:c4:ca:6b:e3:bd:4e:d7:22:11:95:83:7a:a2:
         1f:0e:dd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:29 2025 by rpki-client