Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/3138312e3139322e3131342e302f32332d3233203d3e20323730363935.roa
File:                     3138312e3139322e3131342e302f32332d3233203d3e20323730363935.roa (raw, json)
Hash identifier:          Zbjx0IFWKHyM0u/Y1kHy48Lx7Gg9fvfgEFh8IPpYnms=
Subject key identifier:   5F:BC:3D:44:BA:47:02:C9:C9:04:39:78:F8:59:65:4E:26:53:32:AB
Certificate issuer:       /CN=F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E
Certificate serial:       108F04BB5212D8CB710FF8FB269AA1508D6C13B7
Authority key identifier: F9:7F:B7:CD:C7:5E:F9:3F:4D:C2:E4:3C:0C:F4:E4:16:85:27:6A:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/3138312e3139322e3131342e302f32332d3233203d3e20323730363935.roa
Signing time:             Fri 29 Nov 2024 19:13:17 +0000
ROA not before:           Fri 29 Nov 2024 19:08:17 +0000
ROA not after:            Fri 28 Nov 2025 19:13:17 +0000
asID:                     270695
IP address blocks:        181.192.114.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:8f:04:bb:52:12:d8:cb:71:0f:f8:fb:26:9a:a1:50:8d:6c:13:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E
        Validity
            Not Before: Nov 29 19:08:17 2024 GMT
            Not After : Nov 28 19:13:17 2025 GMT
        Subject: CN=5FBC3D44BA4702C9C9043978F859654E265332AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b0:a2:54:ec:37:f2:14:a7:10:df:45:de:b6:
                    46:9e:ef:88:50:92:ba:59:fe:29:33:34:47:90:e5:
                    a8:76:2e:45:2d:d4:76:b8:5b:6d:36:ca:95:a1:57:
                    32:cd:95:ed:74:7f:ae:62:35:a1:f6:05:ad:ba:e4:
                    bd:5c:d4:e6:42:f7:6d:3f:15:bd:01:64:d4:91:de:
                    54:b1:8d:77:94:1c:b5:2c:39:38:61:42:e1:57:9f:
                    d7:09:e2:c6:02:b6:af:c8:19:75:be:7f:1b:1b:85:
                    e1:ba:90:5e:b0:4b:4d:e3:4f:20:56:0f:56:9e:59:
                    ed:cb:e0:62:52:47:52:a9:ee:67:ea:69:d8:2c:03:
                    65:bd:83:5d:51:09:c5:4c:34:48:a2:ab:e6:ad:46:
                    05:f4:ef:19:68:a2:6e:2a:7b:84:b8:90:db:08:33:
                    25:0b:e4:f9:61:15:71:53:df:e8:79:4f:3f:88:c3:
                    28:e2:5e:a9:42:a4:3f:e9:28:04:9e:a8:dc:3b:43:
                    de:30:73:99:ce:52:4b:31:8f:2b:65:db:ab:20:cd:
                    a9:6b:c3:e6:c9:d0:aa:6c:c1:ec:50:8c:84:5b:b5:
                    eb:db:61:1a:4b:49:25:ff:e8:cf:b4:ae:ad:86:dd:
                    4c:67:3c:d8:c1:0d:81:d9:fe:f8:b4:04:9b:a3:61:
                    f4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BC:3D:44:BA:47:02:C9:C9:04:39:78:F8:59:65:4E:26:53:32:AB
            X509v3 Authority Key Identifier:
                keyid:F9:7F:B7:CD:C7:5E:F9:3F:4D:C2:E4:3C:0C:F4:E4:16:85:27:6A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/3138312e3139322e3131342e302f32332d3233203d3e20323730363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:b9:d2:ea:70:34:48:06:96:29:8f:aa:2d:63:09:82:45:ea:
         a0:4e:05:7d:3f:76:ca:69:7c:42:2e:60:fc:d6:0b:9c:96:7d:
         47:dc:8a:f2:b1:4e:40:20:db:26:21:82:00:ca:a8:b2:96:29:
         74:42:df:d0:5f:03:ac:30:d0:11:17:c8:fa:a3:08:e7:0f:85:
         97:d2:0b:39:91:c3:91:ce:c8:c3:12:2c:f7:9c:f1:92:78:78:
         94:1b:dd:ae:89:39:40:46:75:01:18:93:b4:f6:d1:b5:c8:4a:
         c6:12:c1:c2:6d:0d:2d:44:c2:94:df:d3:12:25:35:bb:3a:8e:
         b7:c6:7d:93:36:ab:55:6d:a8:5c:1e:7e:59:9d:44:0f:44:43:
         4a:5a:c6:b2:0e:6b:25:4a:13:6c:ed:7d:38:1d:fd:5d:d5:4a:
         e9:18:d6:a3:d4:01:79:af:fe:29:d0:33:02:f4:8d:c8:2f:36:
         ab:5b:43:1d:80:59:54:9b:1d:17:a9:b1:79:55:8f:ba:5f:1c:
         cf:2d:fa:32:e3:bc:51:e1:8d:17:63:b3:77:1d:57:a0:d6:0d:
         a6:da:72:e3:bd:19:10:76:79:4b:50:e2:12:63:cb:0f:03:8e:
         8a:82:68:a6:f3:f8:e1:e4:aa:ad:af:63:69:ac:a3:b7:86:e2:
         32:66:c8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:15:56 2025 by rpki-client