Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/3138312e3139322e3131342e302f32342d3234203d3e20323730363935.roa
File:                     3138312e3139322e3131342e302f32342d3234203d3e20323730363935.roa (raw, json)
Hash identifier:          sd10OG72yUFvyR7nisoku/UNs+molrucaRlBLJmnVKQ=
Subject key identifier:   C9:58:33:4D:9C:28:94:33:C9:85:7F:96:DC:50:21:24:4C:28:88:3B
Certificate issuer:       /CN=F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E
Certificate serial:       7AB7E4FDE56450071F9C19F09F3DF2F0576EC3BE
Authority key identifier: F9:7F:B7:CD:C7:5E:F9:3F:4D:C2:E4:3C:0C:F4:E4:16:85:27:6A:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/3138312e3139322e3131342e302f32342d3234203d3e20323730363935.roa
Signing time:             Thu 26 Dec 2024 14:29:28 +0000
ROA not before:           Thu 26 Dec 2024 14:24:28 +0000
ROA not after:            Thu 25 Dec 2025 14:29:28 +0000
asID:                     270695
IP address blocks:        181.192.114.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b7:e4:fd:e5:64:50:07:1f:9c:19:f0:9f:3d:f2:f0:57:6e:c3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E
        Validity
            Not Before: Dec 26 14:24:28 2024 GMT
            Not After : Dec 25 14:29:28 2025 GMT
        Subject: CN=C958334D9C289433C9857F96DC5021244C28883B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:f2:da:48:a3:3b:07:81:a5:52:52:6f:0c:
                    1b:0b:ee:3a:e1:ad:8c:d7:dc:8c:f6:69:4e:2c:ba:
                    13:79:ea:64:45:db:e2:b0:49:81:70:c2:b6:3a:ee:
                    66:1b:e3:07:34:8d:0b:18:d7:78:2b:54:93:db:ed:
                    85:7c:53:f5:96:cf:16:90:e6:a6:7b:c2:88:d5:f7:
                    fd:68:71:44:1f:c1:5c:bf:66:30:56:9f:e0:ec:96:
                    16:8e:dd:ae:51:7c:ee:1c:6b:39:1b:68:2b:f2:8d:
                    ab:04:dd:b6:ce:14:86:2e:a0:13:a0:07:72:4a:cc:
                    63:eb:d0:f2:72:91:fa:82:ad:c2:9f:e0:6a:19:2f:
                    52:0f:7e:d9:31:fd:3d:24:d8:89:10:f8:fa:5b:0d:
                    c5:d6:32:e5:76:ab:ad:21:da:33:0b:1a:59:9c:98:
                    d5:ea:50:1c:99:21:fe:f5:4f:fa:47:41:cc:a3:0e:
                    ca:4f:4f:14:61:31:50:95:60:29:e7:01:6a:cc:c5:
                    f0:10:93:41:ec:ba:5b:76:74:1f:b3:c7:25:21:86:
                    69:34:71:3a:5d:67:dc:f3:af:e1:bb:78:a2:82:62:
                    25:06:91:a4:cc:3c:36:6d:80:82:8f:6e:70:1b:3f:
                    0d:24:00:c2:15:0c:50:f6:b0:53:2f:a7:ec:9f:a2:
                    40:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:58:33:4D:9C:28:94:33:C9:85:7F:96:DC:50:21:24:4C:28:88:3B
            X509v3 Authority Key Identifier:
                keyid:F9:7F:B7:CD:C7:5E:F9:3F:4D:C2:E4:3C:0C:F4:E4:16:85:27:6A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/3138312e3139322e3131342e302f32342d3234203d3e20323730363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:8d:e8:87:55:29:fc:31:66:43:11:20:98:9a:7d:f3:80:56:
         08:01:f3:25:0c:7b:ab:01:9e:79:46:14:70:c8:1b:51:d0:11:
         f5:31:d9:ec:8a:32:aa:45:c2:b1:0a:a5:99:5d:6c:32:dd:21:
         e8:24:9b:2b:89:74:3f:2b:d8:80:51:97:27:8c:d8:e8:bb:2a:
         1d:b3:08:ab:40:d5:41:68:ff:49:26:24:e1:96:64:80:f6:92:
         f2:a8:c5:3f:83:08:e8:fe:0d:cd:a4:4f:f1:45:75:9f:c0:08:
         4a:28:3f:b5:4f:a5:eb:2c:2d:be:71:23:d8:4f:27:df:66:ba:
         8d:02:14:24:b4:e6:cd:32:2c:fa:fb:dd:08:a1:5d:56:be:48:
         0e:88:c8:b9:86:36:7c:05:89:a1:89:c4:3b:a7:df:59:72:43:
         37:fe:20:d1:9a:89:f5:9f:84:3d:ab:ca:f4:38:b6:cf:ce:a1:
         7e:f8:ea:69:1a:c3:f2:b1:88:75:41:0c:93:4e:31:bf:6d:42:
         b8:d1:8c:27:24:a7:d9:f7:37:a3:6c:7e:dd:de:9f:a7:57:13:
         09:cb:0f:fa:87:d5:0e:1a:dc:38:0a:ab:28:6f:ef:83:d7:ef:
         93:98:49:ef:8b:cc:3d:b4:1e:bd:fe:a8:ce:78:1f:0c:e9:a0:
         03:76:67:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:19:13 2025 by rpki-client