Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39342e302f32332d3233203d3e20323636303032.roa
File:                     3138312e3139312e39342e302f32332d3233203d3e20323636303032.roa (raw, json)
Hash identifier:          GEpQHFBFxyiXnckVmZMMq5iAiNZuWebNOBt5Gii4p10=
Subject key identifier:   93:CC:FE:B0:D4:06:D5:9D:24:96:C6:0C:12:53:3B:B6:AF:DD:E4:57
Certificate issuer:       /CN=658D206948C4D2E8D5E6077E923EB5A551F916BE
Certificate serial:       100797C0E5B9B98E4D2F108D0D506C4F1A1391C7
Authority key identifier: 65:8D:20:69:48:C4:D2:E8:D5:E6:07:7E:92:3E:B5:A5:51:F9:16:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D206948C4D2E8D5E6077E923EB5A551F916BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39342e302f32332d3233203d3e20323636303032.roa
Signing time:             Thu 19 Dec 2024 15:57:58 +0000
ROA not before:           Thu 19 Dec 2024 15:52:58 +0000
ROA not after:            Thu 18 Dec 2025 15:57:58 +0000
asID:                     266002
IP address blocks:        181.191.94.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:07:97:c0:e5:b9:b9:8e:4d:2f:10:8d:0d:50:6c:4f:1a:13:91:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658D206948C4D2E8D5E6077E923EB5A551F916BE
        Validity
            Not Before: Dec 19 15:52:58 2024 GMT
            Not After : Dec 18 15:57:58 2025 GMT
        Subject: CN=93CCFEB0D406D59D2496C60C12533BB6AFDDE457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:da:e9:83:47:cb:da:78:2e:d4:a7:57:fe:
                    d9:ac:15:ab:2e:45:df:a4:5d:0e:ed:ad:96:b3:b2:
                    14:24:dc:11:e9:83:81:94:f9:1c:6c:44:90:70:91:
                    4d:8f:e9:c8:5b:db:3c:ae:76:9d:33:e1:11:2c:39:
                    36:8a:49:52:d8:5b:c9:54:36:c6:a9:92:5e:ca:cd:
                    00:29:a4:2e:7a:fb:81:26:e5:45:13:45:76:a6:fb:
                    63:9b:72:f9:16:ae:c0:92:cc:5a:4f:4d:06:a0:66:
                    c3:3e:96:a7:c0:67:a8:53:cc:31:11:51:bb:ed:cb:
                    87:f6:60:5a:4d:d3:73:9e:5c:e0:fa:06:eb:ce:e2:
                    5c:97:c2:a3:13:e5:bc:a0:c3:08:8a:62:09:f8:8e:
                    de:01:93:cf:28:4a:00:a0:a1:28:e0:f4:46:11:c0:
                    8d:00:31:d9:70:95:9c:0a:35:b3:50:dd:54:86:79:
                    a8:99:97:eb:3f:1a:44:dc:ce:77:d0:ab:95:7f:13:
                    c3:33:11:77:c8:3e:9c:be:ef:1f:b8:dd:89:d6:d5:
                    33:0b:d0:40:ea:d2:6e:93:1b:3a:7f:57:c8:5e:b5:
                    9f:e9:48:06:88:21:5c:d7:60:cc:16:3f:95:76:91:
                    5f:b0:7d:80:e4:30:b8:1c:27:e2:39:9d:04:2a:b4:
                    69:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CC:FE:B0:D4:06:D5:9D:24:96:C6:0C:12:53:3B:B6:AF:DD:E4:57
            X509v3 Authority Key Identifier:
                keyid:65:8D:20:69:48:C4:D2:E8:D5:E6:07:7E:92:3E:B5:A5:51:F9:16:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/658D206948C4D2E8D5E6077E923EB5A551F916BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D206948C4D2E8D5E6077E923EB5A551F916BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39342e302f32332d3233203d3e20323636303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:9f:c1:37:ae:8d:05:b7:6d:72:5b:9a:1a:e8:da:35:82:c8:
         14:2b:5b:73:7e:bb:03:4b:53:77:b9:5b:dc:67:f8:f1:b5:87:
         96:4c:c8:a5:66:b9:65:cf:92:9b:5c:63:b7:75:26:dc:c5:44:
         88:6a:a8:9b:f6:13:cb:16:e2:dd:8d:ba:19:e7:1e:39:ea:b3:
         b9:e9:34:b4:ad:c6:40:c6:7e:33:2f:4c:b0:57:b6:3b:ae:b9:
         bc:c1:45:13:b8:33:a8:30:64:d1:07:c9:30:7b:25:3a:88:9e:
         d4:16:8a:8a:9c:b7:b6:44:7c:3b:99:85:9b:dd:10:34:cf:a2:
         7f:0a:ac:08:0f:a1:1a:0f:5b:82:76:0e:a4:74:b1:c6:83:9c:
         60:86:7e:db:17:f0:6c:9f:a7:61:31:4b:5f:20:75:6e:b7:3a:
         b4:16:e0:38:0b:07:7d:35:a1:6b:2c:78:86:56:a7:30:9a:bd:
         69:41:0d:72:0f:ea:6e:da:42:82:c4:fb:e7:4a:83:2a:18:17:
         93:eb:fd:46:2d:d1:fd:30:11:6f:80:97:a3:ce:0b:9d:8c:05:
         33:af:d9:02:25:49:42:07:d8:85:2d:35:5d:6b:3d:93:61:0a:
         52:ee:dd:57:33:20:04:fa:ed:99:15:4c:21:5a:74:a6:90:ed:
         22:ec:d3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 08:17:30 2025 by rpki-client