Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/3138312e3232342e34302e302f32322d3232203d3e20323731343138.roa
File:                     3138312e3232342e34302e302f32322d3232203d3e20323731343138.roa (raw, json)
Hash identifier:          phyYFgI6nJEwg0qFbBhl6cMCq6ZxR54gcwYR4Jo1stg=
Subject key identifier:   42:99:7B:26:6A:58:4F:83:CD:E8:7A:AB:09:9F:66:9C:46:DF:00:DC
Certificate issuer:       /CN=24FAD869D13955BC3FF5B25755564DDA5B30A63A
Certificate serial:       081C26FAFE95BAA995F41453A9490CECFF7837D1
Authority key identifier: 24:FA:D8:69:D1:39:55:BC:3F:F5:B2:57:55:56:4D:DA:5B:30:A6:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24FAD869D13955BC3FF5B25755564DDA5B30A63A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/3138312e3232342e34302e302f32322d3232203d3e20323731343138.roa
Signing time:             Fri 16 Dec 2022 22:17:41 +0000
ROA not before:           Fri 16 Dec 2022 22:12:41 +0000
ROA not after:            Fri 15 Dec 2023 22:17:41 +0000
asID:                     271418
IP address blocks:        181.224.40.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1c:26:fa:fe:95:ba:a9:95:f4:14:53:a9:49:0c:ec:ff:78:37:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24FAD869D13955BC3FF5B25755564DDA5B30A63A
        Validity
            Not Before: Dec 16 22:12:41 2022 GMT
            Not After : Dec 15 22:17:41 2023 GMT
        Subject: CN=42997B266A584F83CDE87AAB099F669C46DF00DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:6f:c7:7a:c5:92:59:b9:35:f1:30:95:90:
                    30:cd:f6:a9:ed:bc:e8:02:9b:74:8b:ad:55:75:7a:
                    81:c8:88:16:98:33:6a:f8:0b:f3:3f:da:fe:b0:ca:
                    3f:cc:af:18:25:71:1f:a8:6f:1a:88:f3:43:3c:8c:
                    cb:f0:d8:d3:b9:df:3a:b7:ed:d2:38:a0:89:0a:71:
                    01:c9:24:ff:7e:9f:23:8a:75:ff:02:ee:dd:0a:cd:
                    75:62:82:85:c4:e8:10:19:c4:5d:f3:e7:53:4c:08:
                    1f:a4:21:ac:81:54:42:c9:84:b9:10:eb:4f:35:42:
                    a5:6e:d5:ea:ef:0a:3d:99:3d:b5:49:86:ae:ea:37:
                    0f:e2:cc:8e:4a:71:df:7b:83:de:bf:14:51:0e:1d:
                    b7:db:86:ea:b3:27:43:4b:40:95:96:cc:a7:42:1c:
                    d5:7c:7d:cc:41:48:bf:62:be:17:f5:b3:1f:b4:bf:
                    ea:4d:4f:f3:7a:dc:f1:9c:1e:2e:4a:25:4b:d2:e0:
                    cf:d2:83:15:de:41:a2:cc:bb:ff:76:32:53:3f:ef:
                    e3:a9:6f:8f:33:2d:35:81:6b:8e:93:53:f2:d2:b3:
                    94:81:46:98:53:ab:98:3d:cd:e2:7d:5d:d1:dd:f3:
                    6f:c0:95:0b:b9:4f:5f:7c:c4:53:dd:b4:89:76:6e:
                    c8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:99:7B:26:6A:58:4F:83:CD:E8:7A:AB:09:9F:66:9C:46:DF:00:DC
            X509v3 Authority Key Identifier:
                keyid:24:FA:D8:69:D1:39:55:BC:3F:F5:B2:57:55:56:4D:DA:5B:30:A6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/24FAD869D13955BC3FF5B25755564DDA5B30A63A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24FAD869D13955BC3FF5B25755564DDA5B30A63A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/3138312e3232342e34302e302f32322d3232203d3e20323731343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:c0:15:8f:c7:7a:ec:59:f4:ba:f1:3c:b9:9c:04:e6:5d:57:
         29:ff:d1:2c:81:e6:00:3a:8f:ab:97:d1:79:c4:5f:b0:47:a5:
         40:65:18:30:ad:8f:dd:97:bf:bd:2b:98:7f:b4:e7:ab:9e:ac:
         e3:16:af:6f:21:f0:85:1d:2d:85:06:16:23:e5:1c:fb:7a:a8:
         81:19:96:5f:ee:3e:3f:80:42:f6:b4:ad:69:8f:b4:91:81:5d:
         95:3e:24:58:23:2d:94:d8:13:43:22:9b:60:f9:b1:ea:0b:3c:
         d6:fc:1a:f5:10:6b:b9:86:63:95:2a:78:dc:f7:d2:e1:53:9d:
         a9:f2:ec:91:1c:e1:77:24:5a:72:04:62:3f:d7:de:49:1a:89:
         7d:88:df:85:ab:da:f9:40:cf:fc:9b:b9:93:0d:6f:58:f2:c1:
         50:2d:0b:78:4b:43:6f:e8:92:fa:fe:36:b8:8c:77:03:26:4a:
         c2:32:f1:ab:2c:f0:9f:87:fe:72:59:c9:93:4a:15:9f:69:5f:
         7f:df:d0:4b:59:1d:3d:19:a8:ba:7f:79:cd:30:0c:e7:ad:ce:
         2d:f0:08:b6:27:bf:6b:f0:5d:60:be:61:cd:e0:35:9c:0e:7b:
         04:a7:36:ca:46:fd:4c:0d:64:3c:0d:fd:b3:d8:f0:96:6b:b8:
         2f:cd:69:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:42 2025 by rpki-client