Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39322e302f32322d3234203d3e20323636303032.roa
File:                     3138312e3139312e39322e302f32322d3234203d3e20323636303032.roa (raw, json)
Hash identifier:          u/izobY0qKAF8uMArhGJ1Z0fOXSucKR0nUMJ5GzYzA4=
Subject key identifier:   50:38:38:90:E4:F1:35:67:A8:84:81:74:5F:88:E2:F2:66:85:56:2F
Certificate issuer:       /CN=57D13AC3C4C27F079D880C3989B5840F5AC790B9
Certificate serial:       61DC35256A3E6AC19C3CA222642E3E091973AE35
Authority key identifier: 57:D1:3A:C3:C4:C2:7F:07:9D:88:0C:39:89:B5:84:0F:5A:C7:90:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D13AC3C4C27F079D880C3989B5840F5AC790B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39322e302f32322d3234203d3e20323636303032.roa
Signing time:             Wed 19 Mar 2025 22:10:01 +0000
ROA not before:           Wed 19 Mar 2025 22:05:01 +0000
ROA not after:            Wed 18 Mar 2026 22:10:01 +0000
asID:                     266002
IP address blocks:        181.191.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:dc:35:25:6a:3e:6a:c1:9c:3c:a2:22:64:2e:3e:09:19:73:ae:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57D13AC3C4C27F079D880C3989B5840F5AC790B9
        Validity
            Not Before: Mar 19 22:05:01 2025 GMT
            Not After : Mar 18 22:10:01 2026 GMT
        Subject: CN=50383890E4F13567A88481745F88E2F26685562F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:4b:12:2e:6d:24:56:2d:09:2b:92:be:fb:
                    e6:c0:0f:bd:89:6a:01:1d:98:3a:ae:b0:7d:2f:bc:
                    0e:bb:98:34:42:b8:e9:df:e6:91:d9:7a:d7:0d:a3:
                    f0:a3:c1:2e:a7:38:f7:74:57:90:7a:13:71:6f:28:
                    84:0c:b5:9a:3b:c3:b9:cb:b2:09:ae:1b:6a:ed:38:
                    7e:24:cf:21:20:53:af:1b:31:62:12:6d:45:f8:fb:
                    36:f0:13:4f:d9:bc:47:4d:5b:bc:63:81:fb:b0:09:
                    6b:63:d8:b4:ec:00:4e:88:de:16:1b:82:ee:90:a6:
                    2e:e6:07:ef:be:e4:59:bd:23:97:b4:7a:88:99:e4:
                    f2:7f:ef:ff:14:32:5d:ab:af:f1:3f:84:3c:01:31:
                    01:4f:21:5f:08:8a:b3:fc:5d:41:6c:63:5e:04:6b:
                    b3:1d:5e:73:61:08:33:97:40:b7:0c:0f:d3:f2:cd:
                    87:48:4b:f0:d7:87:2b:c4:ab:79:7b:54:ea:bb:b0:
                    49:77:83:d1:95:92:f8:ab:06:5c:c9:9e:e2:17:55:
                    9c:bc:53:15:6f:79:d6:eb:d4:d4:46:4a:ce:69:6a:
                    02:90:f1:6c:33:95:7f:ec:64:9a:65:ef:32:9c:ed:
                    f3:d8:5d:55:48:9e:f6:06:65:22:68:36:74:91:14:
                    67:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:38:38:90:E4:F1:35:67:A8:84:81:74:5F:88:E2:F2:66:85:56:2F
            X509v3 Authority Key Identifier:
                keyid:57:D1:3A:C3:C4:C2:7F:07:9D:88:0C:39:89:B5:84:0F:5A:C7:90:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/57D13AC3C4C27F079D880C3989B5840F5AC790B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D13AC3C4C27F079D880C3989B5840F5AC790B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39322e302f32322d3234203d3e20323636303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:91:cd:72:d9:c6:2f:b6:e2:b3:9d:f2:fc:b7:82:ba:09:e6:
         90:4f:75:41:76:37:01:21:8b:d4:df:9d:2f:00:18:a1:8e:55:
         ba:ca:4c:31:f8:9c:ce:5f:22:8c:ac:16:95:ae:9b:cf:20:85:
         89:0b:b3:0f:e3:b6:92:7d:71:ce:9f:06:5a:a5:be:f5:63:de:
         37:4f:c1:3d:b1:32:9f:41:94:f0:4c:12:ad:37:31:b8:58:9e:
         65:1a:e4:78:63:0d:f5:6d:11:da:57:82:42:f6:df:b0:18:40:
         4c:c8:b3:5a:5b:6a:45:48:fd:29:ad:93:74:f7:54:65:bb:7f:
         72:b0:01:83:6f:e7:b5:0f:44:c9:8b:c9:d7:b8:10:8f:1a:1e:
         1f:b5:bc:4d:ff:9a:e4:21:f0:c5:6d:4c:96:3c:ae:ba:57:2b:
         f2:4b:5e:b0:24:b5:68:ad:34:c8:8d:d7:ae:c0:22:27:c2:18:
         9b:78:d7:02:ba:8d:5a:16:17:73:45:19:50:5d:34:29:67:d1:
         fc:d4:ad:8f:e5:ce:ec:d3:1e:c4:52:cd:fa:ad:ad:0c:4c:51:
         99:40:f4:29:94:7e:6e:5a:12:73:27:da:0c:d8:2b:55:7c:a5:
         ce:bf:c0:c0:21:c2:c4:16:21:38:fc:04:ef:a5:c0:27:2a:a7:
         9a:6a:2e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:46:15 2025 by rpki-client