Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39342e302f32342d3234203d3e20323636303032.roa
File:                     3138312e3139312e39342e302f32342d3234203d3e20323636303032.roa (raw, json)
Hash identifier:          KHuvqPFIq8iyUvhOsZPqtbNT8gXdoeAZB4WS6EOVb/A=
Subject key identifier:   C1:13:59:4F:29:42:E3:08:7C:6F:F3:B4:53:E6:76:63:7F:21:D8:27
Certificate issuer:       /CN=658D206948C4D2E8D5E6077E923EB5A551F916BE
Certificate serial:       4B756D66820CD582543AB59B51A80FDDB8BC4F8A
Authority key identifier: 65:8D:20:69:48:C4:D2:E8:D5:E6:07:7E:92:3E:B5:A5:51:F9:16:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D206948C4D2E8D5E6077E923EB5A551F916BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39342e302f32342d3234203d3e20323636303032.roa
Signing time:             Thu 19 Dec 2024 15:58:02 +0000
ROA not before:           Thu 19 Dec 2024 15:53:02 +0000
ROA not after:            Thu 18 Dec 2025 15:58:02 +0000
asID:                     266002
IP address blocks:        181.191.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:75:6d:66:82:0c:d5:82:54:3a:b5:9b:51:a8:0f:dd:b8:bc:4f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658D206948C4D2E8D5E6077E923EB5A551F916BE
        Validity
            Not Before: Dec 19 15:53:02 2024 GMT
            Not After : Dec 18 15:58:02 2025 GMT
        Subject: CN=C113594F2942E3087C6FF3B453E676637F21D827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:45:7c:10:22:f1:d5:6c:1d:82:ec:1c:53:3c:
                    92:5d:01:f2:d6:b3:ab:b5:7d:1b:06:b1:1b:8a:a9:
                    03:52:a8:25:ca:7c:19:cd:ba:a5:4d:c7:23:1a:a4:
                    3f:97:33:0f:b7:e4:d8:3c:7c:c2:47:dd:f9:a5:cf:
                    83:22:c5:96:6f:12:b8:a6:0d:b8:35:6d:dd:90:e6:
                    53:10:f2:d0:c0:8b:a7:c5:33:94:d2:b0:e5:b2:94:
                    f8:9a:0a:95:58:75:f0:da:93:ea:7a:c0:b6:b8:ee:
                    ca:59:28:36:eb:05:33:f0:f1:34:b5:a9:99:49:b6:
                    3a:d0:6f:21:01:5e:8a:11:2a:2b:f4:4f:10:99:9e:
                    68:b4:28:d8:55:d1:2f:70:9a:00:ae:18:ad:e5:ff:
                    4c:5a:30:9a:e4:38:18:58:7f:af:9d:8e:38:00:f6:
                    d8:33:ae:47:d0:ea:4d:2e:2b:d0:3a:ad:0f:29:4f:
                    11:c9:61:cc:a7:83:43:38:24:10:19:fe:82:bd:a2:
                    cc:63:de:6d:b9:58:a9:e1:40:ed:6c:0e:b0:c3:1c:
                    fb:63:94:62:34:3d:05:e8:3d:fa:15:8d:da:ed:58:
                    b3:23:6a:59:1d:67:1e:b6:8b:6e:26:d1:22:33:eb:
                    1b:b9:6d:86:ec:94:73:65:bd:a3:ed:15:67:ed:e3:
                    6b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:13:59:4F:29:42:E3:08:7C:6F:F3:B4:53:E6:76:63:7F:21:D8:27
            X509v3 Authority Key Identifier:
                keyid:65:8D:20:69:48:C4:D2:E8:D5:E6:07:7E:92:3E:B5:A5:51:F9:16:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/658D206948C4D2E8D5E6077E923EB5A551F916BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D206948C4D2E8D5E6077E923EB5A551F916BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39342e302f32342d3234203d3e20323636303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:79:4c:d9:89:5f:03:b7:39:9a:a7:54:05:46:4f:7d:a3:ab:
         9c:7c:8c:56:ed:d1:9b:a6:9d:62:c2:e1:02:90:dd:92:2a:92:
         b2:31:b1:a9:b9:87:ff:e6:0c:ad:cb:7b:1c:62:27:dd:47:01:
         e5:0c:ae:4b:4b:d5:01:74:20:11:d6:8b:a9:44:dc:de:20:c4:
         de:c3:85:f1:22:23:ff:93:81:d1:14:bd:92:20:5b:a2:7d:bd:
         0b:02:4e:0f:06:16:d4:0f:4b:14:3a:aa:5b:00:03:c3:0c:1f:
         f0:ac:ee:46:a7:aa:9e:9e:2d:7e:94:06:9b:16:ff:78:13:3e:
         b3:3d:8e:90:b1:4e:1b:f0:62:cb:cf:ab:a1:a1:41:fa:c1:68:
         34:c1:1a:2f:82:91:cc:46:71:5a:a3:ff:c8:c3:d0:56:32:1e:
         4d:78:35:41:96:72:d0:80:4a:80:b8:e7:c4:84:f1:d1:c0:64:
         9b:fb:dc:6e:4e:da:cd:d4:0f:9c:69:aa:4d:d5:89:d1:a8:9f:
         c8:cd:ea:23:45:87:e7:7f:db:d1:5e:3d:bf:67:30:d2:34:04:
         b6:90:9a:c6:44:08:cc:69:a9:e0:8e:76:3f:c5:0d:da:a7:4f:
         98:b9:88:a2:4e:43:58:06:03:5b:4b:33:63:1c:f2:75:6c:1a:
         ed:08:c6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:08:48 2025 by rpki-client