Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/3138312e3139322e3131322e302f32332d3233203d3e20323730363935.roa
File:                     3138312e3139322e3131322e302f32332d3233203d3e20323730363935.roa (raw, json)
Hash identifier:          8RzCVQF8MBjgshbBOCS2LeZ0JHinYsOIImeXyphHB8M=
Subject key identifier:   AB:85:6D:79:90:0B:EA:94:CA:51:E9:49:4C:C7:C6:13:66:0C:04:0C
Certificate issuer:       /CN=F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E
Certificate serial:       2B945B99ECE45ADB7C4ED2E7DB2834A61B43982F
Authority key identifier: F9:7F:B7:CD:C7:5E:F9:3F:4D:C2:E4:3C:0C:F4:E4:16:85:27:6A:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/3138312e3139322e3131322e302f32332d3233203d3e20323730363935.roa
Signing time:             Fri 29 Nov 2024 19:13:12 +0000
ROA not before:           Fri 29 Nov 2024 19:08:12 +0000
ROA not after:            Fri 28 Nov 2025 19:13:12 +0000
asID:                     270695
IP address blocks:        181.192.112.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:94:5b:99:ec:e4:5a:db:7c:4e:d2:e7:db:28:34:a6:1b:43:98:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E
        Validity
            Not Before: Nov 29 19:08:12 2024 GMT
            Not After : Nov 28 19:13:12 2025 GMT
        Subject: CN=AB856D79900BEA94CA51E9494CC7C613660C040C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:25:ff:7a:e0:ed:90:9a:f9:73:2c:28:9e:0f:
                    ae:c9:03:58:65:05:2e:81:14:0b:f0:c8:eb:39:8e:
                    2d:89:f9:b1:7f:ee:09:98:31:ba:fd:39:9c:93:ed:
                    2c:db:6e:d1:de:e3:3d:bf:99:c9:e5:10:bd:87:3a:
                    29:82:59:e8:5d:6e:ad:4d:5c:35:38:57:0f:d8:7d:
                    f0:a4:ab:21:e1:3a:6c:0b:f6:80:11:48:4b:dc:54:
                    a3:ec:8e:b1:70:60:f0:d0:15:11:ec:39:b9:55:66:
                    eb:50:f1:27:8c:8e:1f:41:b5:47:63:e9:18:8c:f7:
                    cf:2d:ab:d6:09:25:61:06:c9:db:bc:12:7d:c6:0b:
                    eb:e3:64:1f:12:1d:61:99:59:49:65:f9:0f:f9:d1:
                    27:50:a7:5f:94:c3:f5:3b:11:54:bc:68:e8:f8:4d:
                    64:b0:3e:e4:b7:59:04:db:72:98:68:8b:f5:63:c9:
                    c0:97:23:a9:b0:9c:7b:ba:99:da:c8:19:b5:0b:20:
                    51:72:70:c7:5d:c6:58:fd:40:a2:4b:90:b7:e2:77:
                    ab:02:65:e6:78:6c:c2:af:82:1d:1d:8f:6f:e5:f5:
                    00:66:07:0e:ed:92:6a:f0:2a:8a:70:18:3e:2e:cf:
                    a3:80:f3:82:9e:ce:5d:57:8d:15:88:bc:bf:18:e8:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:85:6D:79:90:0B:EA:94:CA:51:E9:49:4C:C7:C6:13:66:0C:04:0C
            X509v3 Authority Key Identifier:
                keyid:F9:7F:B7:CD:C7:5E:F9:3F:4D:C2:E4:3C:0C:F4:E4:16:85:27:6A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/3138312e3139322e3131322e302f32332d3233203d3e20323730363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:bb:29:2e:76:fb:5d:77:63:1a:72:34:c9:af:52:47:90:cb:
         11:9b:54:ce:aa:4e:71:dc:c4:8b:66:9f:5d:1a:28:1b:ef:13:
         f1:ad:09:b1:a2:09:49:74:85:8b:2a:f4:a9:74:c5:82:12:bf:
         18:d5:47:d2:3a:02:ad:0e:4a:fc:22:4e:9c:94:c8:3a:0e:7b:
         99:dd:d0:f2:c7:ad:6a:b9:fa:e7:d6:bd:06:b8:87:1e:a7:81:
         69:fc:d2:d3:48:d8:76:dd:45:e4:48:88:f6:75:bb:5e:b2:83:
         7a:4d:d3:86:bf:5e:69:9d:e0:55:49:fc:cb:55:83:92:7a:57:
         c3:3f:71:21:a8:e2:1b:fe:36:08:c6:69:0e:0f:d3:fb:af:60:
         c8:13:21:b3:a7:6d:0e:f1:29:18:81:09:e1:d3:0f:4a:78:c7:
         51:67:35:8b:f3:90:89:d6:f9:6e:4e:d8:2a:b7:0e:fd:19:0e:
         fa:67:6f:30:27:01:a8:56:40:26:5b:14:04:7f:af:c9:60:4e:
         48:4b:2d:87:ca:e9:25:b7:d1:c7:ec:93:42:92:9e:e3:26:67:
         e0:18:e0:8b:29:1b:60:4c:3f:de:5a:37:61:23:1f:0f:7c:00:
         ce:86:5d:80:4a:cd:ac:23:81:c8:06:96:ac:82:8d:9c:29:f9:
         3e:f4:a8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:26 2025 by rpki-client