Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/3138312e3232342e34322e302f32332d3233203d3e20323731343138.roa
File:                     3138312e3232342e34322e302f32332d3233203d3e20323731343138.roa (raw, json)
Hash identifier:          wNgE/sFPRK9JwCXnNCZDoTUfkoTj/b6UJxRsmvHf6WI=
Subject key identifier:   F1:16:12:C4:90:DA:C6:47:BC:7E:F9:B9:08:31:A5:37:66:69:D4:7A
Certificate issuer:       /CN=24FAD869D13955BC3FF5B25755564DDA5B30A63A
Certificate serial:       1EB7EFEE5852919D34F63E6C4B353DB6AD7D903B
Authority key identifier: 24:FA:D8:69:D1:39:55:BC:3F:F5:B2:57:55:56:4D:DA:5B:30:A6:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24FAD869D13955BC3FF5B25755564DDA5B30A63A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/3138312e3232342e34322e302f32332d3233203d3e20323731343138.roa
Signing time:             Fri 16 Dec 2022 22:19:37 +0000
ROA not before:           Fri 16 Dec 2022 22:14:37 +0000
ROA not after:            Fri 15 Dec 2023 22:19:37 +0000
asID:                     271418
IP address blocks:        181.224.42.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b7:ef:ee:58:52:91:9d:34:f6:3e:6c:4b:35:3d:b6:ad:7d:90:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24FAD869D13955BC3FF5B25755564DDA5B30A63A
        Validity
            Not Before: Dec 16 22:14:37 2022 GMT
            Not After : Dec 15 22:19:37 2023 GMT
        Subject: CN=F11612C490DAC647BC7EF9B90831A5376669D47A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:d8:7a:e0:e3:11:43:a4:0c:f2:60:00:f4:
                    20:c4:ae:61:00:6e:c6:dd:66:fb:82:a1:b6:46:c1:
                    2b:f7:92:01:4a:e3:d0:37:72:e7:4c:37:96:34:8c:
                    39:13:bf:e2:ef:b4:02:9f:c8:63:3b:74:34:6e:da:
                    01:59:26:48:76:62:ab:f6:10:c9:d4:5e:01:e6:51:
                    55:2f:7b:10:38:26:1d:7c:f6:9d:1f:a1:a8:36:42:
                    b9:d6:a0:2e:a6:c8:09:70:d5:5e:02:5e:5a:3a:bd:
                    48:37:34:ae:a0:e7:33:0d:74:9f:f7:c8:a1:21:0e:
                    6f:9f:57:cc:44:ca:c9:a7:ec:40:ab:aa:00:b1:ae:
                    3a:5e:ff:5e:38:56:80:04:ce:61:11:a9:96:bc:4e:
                    ec:e3:27:e4:7b:5e:2a:f2:86:a0:8d:fc:f1:fe:48:
                    f1:a2:5f:2a:33:4f:b5:e3:a5:e4:f7:47:b8:4e:e4:
                    ad:3c:6d:ba:b7:f5:9e:fa:b0:e3:ef:30:7e:4e:7a:
                    0b:3c:ef:c7:5c:e2:71:10:91:43:be:6d:91:38:6e:
                    1f:17:44:01:b3:dd:7d:1b:1f:49:9c:56:55:9b:2b:
                    34:4f:a0:e1:80:5e:50:de:7e:f5:f7:d1:b1:21:9c:
                    3c:a4:89:e9:96:61:14:82:2a:25:d0:8f:fd:5e:06:
                    da:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:16:12:C4:90:DA:C6:47:BC:7E:F9:B9:08:31:A5:37:66:69:D4:7A
            X509v3 Authority Key Identifier:
                keyid:24:FA:D8:69:D1:39:55:BC:3F:F5:B2:57:55:56:4D:DA:5B:30:A6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/24FAD869D13955BC3FF5B25755564DDA5B30A63A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24FAD869D13955BC3FF5B25755564DDA5B30A63A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/3138312e3232342e34322e302f32332d3233203d3e20323731343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:fb:e3:51:6c:5f:59:42:a8:c6:51:5d:4f:e1:32:92:ed:09:
         28:7f:0d:3e:78:8f:4e:eb:99:e8:34:fe:77:91:ba:ae:bc:f3:
         dd:b9:38:79:a2:06:c3:af:7f:26:a0:2a:93:72:74:63:ef:af:
         5f:fb:89:da:c5:5a:54:2a:d8:2d:b4:98:67:94:e1:b4:d4:65:
         90:af:25:54:76:28:01:7e:68:e5:be:d0:1a:0d:05:21:35:4a:
         3f:0b:83:f2:58:8f:75:ab:bd:5e:4b:ec:e5:f8:d2:4c:01:13:
         58:5d:ac:f1:b3:64:21:45:b5:29:bb:19:09:56:e8:8f:09:3a:
         9f:50:13:38:3a:87:03:09:8b:af:2a:b0:8f:8f:72:1f:f5:c6:
         00:48:11:0a:5b:6f:52:bf:b7:c5:7a:d0:02:b6:69:16:36:77:
         ea:0d:20:d0:dd:6f:7e:43:12:c7:24:7b:40:1b:64:1a:ee:3c:
         dc:e1:00:cc:ed:39:77:f8:6f:3e:66:d0:1a:fc:46:f4:e6:3d:
         10:39:48:51:4e:c4:15:24:68:f1:45:b4:a1:45:4d:e6:7b:ab:
         6b:dc:8b:a9:10:0e:90:02:a6:b2:5c:35:b6:d0:70:e1:04:c6:
         d8:11:94:36:08:ac:1b:c8:48:7f:00:69:88:23:08:64:21:0b:
         c7:18:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:37 2025 by rpki-client