Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/3138312e3138392e36342e302f32322d3332203d3e20323731333530.roa
File:                     3138312e3138392e36342e302f32322d3332203d3e20323731333530.roa (raw, json)
Hash identifier:          UxOt94OsNiKsjXnzAiKXOfKipKOI4fTbgALMLO5bQDc=
Subject key identifier:   A8:5B:DB:3C:69:4C:CE:42:EB:DE:8F:93:F1:C6:64:8F:CE:4F:22:AF
Certificate issuer:       /CN=B402B2248A5D85CA86B32E9524F99609A360791C
Certificate serial:       4B041B21C93C4A362889C1E8ECFBF2369ABB68E1
Authority key identifier: B4:02:B2:24:8A:5D:85:CA:86:B3:2E:95:24:F9:96:09:A3:60:79:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B402B2248A5D85CA86B32E9524F99609A360791C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/3138312e3138392e36342e302f32322d3332203d3e20323731333530.roa
Signing time:             Fri 17 Jan 2025 11:59:56 +0000
ROA not before:           Fri 17 Jan 2025 11:54:56 +0000
ROA not after:            Fri 16 Jan 2026 11:59:56 +0000
asID:                     271350
IP address blocks:        181.189.64.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:04:1b:21:c9:3c:4a:36:28:89:c1:e8:ec:fb:f2:36:9a:bb:68:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B402B2248A5D85CA86B32E9524F99609A360791C
        Validity
            Not Before: Jan 17 11:54:56 2025 GMT
            Not After : Jan 16 11:59:56 2026 GMT
        Subject: CN=A85BDB3C694CCE42EBDE8F93F1C6648FCE4F22AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:dc:ba:c1:41:a6:b4:86:8e:51:75:ab:c3:
                    99:81:8b:1f:55:fa:84:64:e1:80:ef:5f:99:f7:0c:
                    f6:20:e8:38:61:74:72:e4:6c:0c:d5:cc:97:2c:6b:
                    b2:93:6b:61:4f:93:6b:34:f2:c8:4d:f6:f5:bc:b8:
                    3b:0c:c8:71:5d:c2:d9:4d:b7:cf:35:b1:f6:dd:91:
                    a7:b1:42:aa:01:f3:29:d5:cd:c3:d1:09:c9:40:7f:
                    9e:11:8d:f9:70:17:29:07:29:35:bd:38:30:fd:d1:
                    d8:d6:54:e2:56:dc:10:89:20:33:3e:3a:ca:26:3e:
                    19:d4:0d:fa:d4:a4:b8:d1:97:84:9d:9a:70:3f:a8:
                    a8:c3:47:95:c8:da:e3:7e:0a:d1:b2:77:37:61:ed:
                    2f:7e:c1:25:90:f1:79:40:cb:10:92:c7:52:e8:fc:
                    37:94:a9:1b:6b:76:cb:8e:83:72:86:47:f3:fd:b3:
                    c4:09:19:2a:cf:61:6b:b6:0b:c0:30:3b:9d:86:e7:
                    2a:3c:ac:fe:f3:7d:ab:2b:27:cd:37:d0:4b:f4:bf:
                    0a:f8:53:58:dd:26:15:93:26:52:5f:fd:5b:b6:18:
                    41:5e:ef:01:29:64:ec:dc:3d:af:40:58:f2:69:e2:
                    80:84:02:12:0d:56:66:33:8c:5c:49:2b:5f:b3:41:
                    98:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5B:DB:3C:69:4C:CE:42:EB:DE:8F:93:F1:C6:64:8F:CE:4F:22:AF
            X509v3 Authority Key Identifier:
                keyid:B4:02:B2:24:8A:5D:85:CA:86:B3:2E:95:24:F9:96:09:A3:60:79:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/B402B2248A5D85CA86B32E9524F99609A360791C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B402B2248A5D85CA86B32E9524F99609A360791C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/3138312e3138392e36342e302f32322d3332203d3e20323731333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:61:58:0b:c4:4c:7e:db:60:68:29:2a:d2:99:42:72:fb:70:
         c5:c0:2f:be:f6:6a:b5:66:34:38:6f:00:69:ce:e4:a4:c5:63:
         8e:00:4a:f3:5e:6c:9f:af:38:a1:05:bb:70:3d:6a:ec:9b:c2:
         6a:6f:cf:49:bb:aa:a6:ef:32:b0:25:55:77:47:00:ba:ef:25:
         70:14:5f:3d:ea:79:3d:a8:46:3b:7d:66:31:cd:da:b1:29:75:
         dc:24:6f:d1:2c:06:1f:25:9e:b2:14:76:42:3e:a6:9f:bf:7e:
         de:9c:98:2d:b1:36:8b:e1:c3:46:7a:15:bd:d6:8c:5b:ac:78:
         c6:d4:95:a0:92:f3:e7:65:90:86:ab:94:1b:5c:e2:3b:7f:c7:
         fd:47:89:a8:9e:84:ee:ee:7d:38:4f:69:ac:e7:a6:c8:3a:a0:
         22:53:75:f4:99:b8:df:9f:63:5c:75:36:a3:af:d8:4a:3a:f9:
         e8:3e:d2:e9:47:88:7f:3e:41:ad:52:4a:1f:58:d7:52:76:6e:
         ac:b8:ed:65:ae:fa:b6:fa:68:56:08:b9:4f:05:1e:50:53:40:
         08:78:4a:a0:93:be:eb:f9:0d:ea:2c:f2:85:e3:3b:35:d4:7c:
         56:05:8c:c6:9b:84:89:68:18:3c:10:d1:b1:1a:2c:0c:f5:d3:
         d3:16:84:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:42:44 2025 by rpki-client