Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39322e302f32322d3232203d3e20323636303032.roa
File:                     3138312e3139312e39322e302f32322d3232203d3e20323636303032.roa (raw, json)
Hash identifier:          DlQBD114aTsxgvdU664SwcBGDEfnpKZ6CONPFVCNsLo=
Subject key identifier:   63:03:3B:CE:03:E4:5D:E2:E5:E7:E4:B9:31:61:2A:3C:9F:0A:6C:5D
Certificate issuer:       /CN=658D206948C4D2E8D5E6077E923EB5A551F916BE
Certificate serial:       39D4EB985866CD45426D17DDF0CBB704010951BD
Authority key identifier: 65:8D:20:69:48:C4:D2:E8:D5:E6:07:7E:92:3E:B5:A5:51:F9:16:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D206948C4D2E8D5E6077E923EB5A551F916BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39322e302f32322d3232203d3e20323636303032.roa
Signing time:             Thu 19 Dec 2024 15:57:27 +0000
ROA not before:           Thu 19 Dec 2024 15:52:27 +0000
ROA not after:            Thu 18 Dec 2025 15:57:27 +0000
asID:                     266002
IP address blocks:        181.191.92.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d4:eb:98:58:66:cd:45:42:6d:17:dd:f0:cb:b7:04:01:09:51:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658D206948C4D2E8D5E6077E923EB5A551F916BE
        Validity
            Not Before: Dec 19 15:52:27 2024 GMT
            Not After : Dec 18 15:57:27 2025 GMT
        Subject: CN=63033BCE03E45DE2E5E7E4B931612A3C9F0A6C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:79:e3:1a:a5:ea:b7:77:9b:37:61:e7:43:
                    9b:c5:19:16:88:cd:db:e5:5e:be:79:04:09:f3:ad:
                    30:a2:aa:ac:fc:c6:4d:3b:05:60:f9:fb:6e:03:c2:
                    a1:8b:63:18:a0:6e:5e:38:dc:4a:ad:54:6b:60:5c:
                    86:e4:2f:3f:bd:ea:62:82:8e:e0:24:5a:e6:b7:d5:
                    0c:4c:c7:4f:a1:c7:b5:09:ef:ea:aa:9a:e4:f0:6a:
                    af:56:bb:20:e1:6c:06:34:13:26:61:08:ab:ff:74:
                    fa:84:80:90:9b:72:18:02:3c:95:68:23:66:cb:37:
                    17:9f:19:7f:f6:8b:45:a4:5e:00:37:0e:c4:66:4f:
                    f3:48:e5:fe:59:39:92:51:eb:a6:2c:37:d2:4a:a7:
                    d6:3a:23:40:2c:f4:ed:e3:78:87:0f:df:cb:d8:e4:
                    8a:e1:17:94:d4:74:f6:0d:93:b0:ba:af:a9:89:60:
                    0d:61:a0:8c:e1:e5:51:85:80:36:03:a1:e7:d2:4a:
                    f6:10:8b:ce:7b:61:eb:55:99:96:b6:52:ea:4e:32:
                    d7:b5:fb:9e:d6:ea:0b:6a:7c:4b:1d:38:8d:17:0d:
                    88:82:ef:ed:d5:3b:c0:cf:b5:68:a3:38:14:7c:8c:
                    2e:9e:e0:13:9f:7b:a8:e0:95:14:b2:5b:a3:32:f7:
                    c8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:03:3B:CE:03:E4:5D:E2:E5:E7:E4:B9:31:61:2A:3C:9F:0A:6C:5D
            X509v3 Authority Key Identifier:
                keyid:65:8D:20:69:48:C4:D2:E8:D5:E6:07:7E:92:3E:B5:A5:51:F9:16:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/658D206948C4D2E8D5E6077E923EB5A551F916BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D206948C4D2E8D5E6077E923EB5A551F916BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39322e302f32322d3232203d3e20323636303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:30:c0:4b:d5:4e:10:4b:8e:cc:67:51:79:00:d2:ae:99:4b:
         68:dd:6a:3b:01:19:6a:12:a8:d2:aa:29:87:57:a2:83:da:a3:
         04:3c:6d:77:54:d7:2b:48:56:e9:63:ee:0b:4d:bf:aa:eb:e3:
         b9:da:e1:22:af:43:17:a1:4f:3a:09:86:aa:aa:30:42:f1:30:
         03:37:b8:74:59:9e:c6:ac:5d:f3:28:40:6a:3d:2b:2e:ef:6a:
         91:71:08:5c:0d:95:60:10:03:a9:eb:89:d8:de:64:cf:da:c5:
         3a:e0:28:7c:e9:e4:49:ad:8c:a9:05:bf:a9:dc:cf:7f:3f:22:
         a6:64:62:e2:c6:75:6e:4c:a0:ff:53:b8:6f:e5:0d:de:62:84:
         c7:86:90:50:70:1d:6f:b4:78:1e:ad:18:a3:e8:59:38:56:7f:
         48:aa:9b:93:8e:43:95:e4:48:88:c6:1f:ad:76:4d:7f:21:25:
         fb:74:cc:a2:60:5d:e1:ed:c7:18:10:ec:c8:88:b8:4c:99:a1:
         c8:af:d6:f4:41:3f:f7:98:41:cf:15:0a:c8:b7:d1:4d:47:e6:
         bc:17:69:62:04:f8:6d:96:84:f2:74:04:7f:bf:c3:85:87:c8:
         32:b4:57:1d:a7:6e:23:cd:00:7f:3b:3f:c7:69:22:aa:28:a8:
         26:13:ad:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:45 2025 by rpki-client