Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/3138312e3139322e3131322e302f32322d3232203d3e20323730363935.roa
File:                     3138312e3139322e3131322e302f32322d3232203d3e20323730363935.roa (raw, json)
Hash identifier:          e2NTm6/AfWxlnzPeM/BldI0oNC8xRGLJaVWOAw7WYh4=
Subject key identifier:   CD:1A:57:74:E0:1B:05:1B:1A:03:C1:3E:46:42:95:9B:5E:50:B3:5C
Certificate issuer:       /CN=F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E
Certificate serial:       558D3DCE92BA4D95A7EA8DA61E4FA2946069EBE6
Authority key identifier: F9:7F:B7:CD:C7:5E:F9:3F:4D:C2:E4:3C:0C:F4:E4:16:85:27:6A:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/3138312e3139322e3131322e302f32322d3232203d3e20323730363935.roa
Signing time:             Fri 29 Nov 2024 19:12:37 +0000
ROA not before:           Fri 29 Nov 2024 19:07:37 +0000
ROA not after:            Fri 28 Nov 2025 19:12:37 +0000
asID:                     270695
IP address blocks:        181.192.112.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8d:3d:ce:92:ba:4d:95:a7:ea:8d:a6:1e:4f:a2:94:60:69:eb:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E
        Validity
            Not Before: Nov 29 19:07:37 2024 GMT
            Not After : Nov 28 19:12:37 2025 GMT
        Subject: CN=CD1A5774E01B051B1A03C13E4642959B5E50B35C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:d1:b7:35:55:41:44:5b:f5:8f:1f:16:2a:
                    7b:b9:0b:0b:00:cf:93:93:86:43:be:e3:90:f2:9a:
                    ee:3d:c6:fa:0a:3d:d8:5b:8f:53:67:06:84:dd:b6:
                    fc:8b:a9:ea:a7:12:bb:b0:36:42:ce:df:e2:d1:77:
                    06:cf:41:94:b1:89:7b:8a:65:7e:73:b3:6d:e6:9b:
                    aa:52:51:e6:36:be:22:6d:70:05:a7:5c:e5:48:ee:
                    ff:77:8e:7d:41:b0:03:8f:26:f7:7e:e7:43:1f:5a:
                    fc:79:f8:eb:57:d3:ce:94:b8:2b:97:98:93:17:db:
                    af:87:cd:54:5a:76:a6:59:c5:c2:fe:1f:2c:38:84:
                    6b:03:e2:7d:d6:fe:cb:23:5b:6e:a4:5c:98:ea:cf:
                    ae:d9:aa:10:96:ed:7e:80:c4:31:b9:65:5e:0e:01:
                    00:9a:31:83:04:15:db:e8:ff:be:4d:4a:2e:0c:27:
                    46:54:32:ee:bb:eb:4f:fa:f3:23:ad:bd:b3:83:0e:
                    3b:17:d0:2a:27:5c:62:0b:1d:b7:26:98:c5:47:19:
                    8d:2d:79:a2:ac:bf:89:cf:07:8c:c0:9d:7e:9e:14:
                    5b:93:fa:80:cf:cf:40:47:f1:9d:0e:de:78:55:86:
                    2b:34:a1:14:a2:b0:45:5b:97:85:8a:6f:94:62:91:
                    0a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1A:57:74:E0:1B:05:1B:1A:03:C1:3E:46:42:95:9B:5E:50:B3:5C
            X509v3 Authority Key Identifier:
                keyid:F9:7F:B7:CD:C7:5E:F9:3F:4D:C2:E4:3C:0C:F4:E4:16:85:27:6A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/3138312e3139322e3131322e302f32322d3232203d3e20323730363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:6b:2d:77:79:f1:fb:7b:9c:6f:7a:d1:cd:58:84:65:6e:5f:
         52:12:36:67:ec:c0:61:96:fc:e9:bc:be:82:d8:2d:58:36:56:
         dd:17:86:0f:7e:80:b5:24:71:a3:ec:d9:ec:c0:cf:2d:b5:50:
         92:90:cf:ba:ec:a5:1d:39:7b:96:ad:86:8e:68:d8:64:99:8c:
         9f:ca:ea:b6:e3:b7:33:9f:35:f4:99:7d:70:7f:30:46:a0:fe:
         6e:4d:e5:7a:7d:84:a7:68:65:7f:ac:97:42:71:97:c5:04:55:
         53:cc:be:c8:0f:bd:36:03:57:a4:96:e6:c8:c6:21:2d:69:86:
         3a:7a:7a:52:30:3d:43:06:b4:bc:af:23:b0:d8:a2:03:1d:8c:
         29:2d:d1:22:65:d2:e2:c5:6c:fc:eb:5d:57:ad:10:8c:46:48:
         12:8b:1a:9d:49:a5:ba:54:bb:b6:3b:ef:ab:f5:a0:f7:de:06:
         3f:d1:1b:b8:36:6f:63:fe:c5:4a:61:36:3e:97:49:f4:09:39:
         31:95:ab:90:34:63:06:8a:06:fd:ae:24:e4:63:be:2f:5e:61:
         3e:4f:c7:9f:be:57:c4:14:6a:a3:91:e0:5e:cd:50:47:47:99:
         d6:36:9f:1e:63:25:68:de:14:25:0e:9f:12:53:20:b2:7c:ee:
         72:e8:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:42 2025 by rpki-client