Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39352e302f32342d3234203d3e20323636303032.roa
File:                     3138312e3139312e39352e302f32342d3234203d3e20323636303032.roa (raw, json)
Hash identifier:          dFkmxm+jNpFA4mTi3su+5RRYq0BU6DvoSsclt5PJDAw=
Subject key identifier:   8D:9C:08:D3:EB:BB:E8:BA:29:59:EE:6B:51:66:32:30:3B:73:A9:AA
Certificate issuer:       /CN=658D206948C4D2E8D5E6077E923EB5A551F916BE
Certificate serial:       4B2E8D3FD37CC8138D55A17C88DB8BAED4B903DE
Authority key identifier: 65:8D:20:69:48:C4:D2:E8:D5:E6:07:7E:92:3E:B5:A5:51:F9:16:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D206948C4D2E8D5E6077E923EB5A551F916BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39352e302f32342d3234203d3e20323636303032.roa
Signing time:             Thu 19 Dec 2024 15:58:16 +0000
ROA not before:           Thu 19 Dec 2024 15:53:16 +0000
ROA not after:            Thu 18 Dec 2025 15:58:16 +0000
asID:                     266002
IP address blocks:        181.191.95.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2e:8d:3f:d3:7c:c8:13:8d:55:a1:7c:88:db:8b:ae:d4:b9:03:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658D206948C4D2E8D5E6077E923EB5A551F916BE
        Validity
            Not Before: Dec 19 15:53:16 2024 GMT
            Not After : Dec 18 15:58:16 2025 GMT
        Subject: CN=8D9C08D3EBBBE8BA2959EE6B516632303B73A9AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:62:40:eb:bb:7e:5c:a5:e5:3e:12:ae:95:a9:
                    17:ac:0c:3e:65:28:85:46:a3:55:4a:4b:10:06:aa:
                    09:d9:24:41:80:f4:01:3b:bf:39:ab:2d:ca:63:6f:
                    55:0d:19:06:2d:08:28:71:33:a4:64:b0:b4:91:cf:
                    61:70:05:6c:45:6c:e6:d9:83:ae:d8:82:7e:96:c8:
                    51:06:8d:b6:58:53:2b:fe:8f:24:b3:62:6c:f8:48:
                    3b:7b:37:91:06:c3:62:f9:3c:0a:ff:06:f4:05:f9:
                    fe:6d:20:a4:74:23:92:1c:03:fb:a0:ac:ed:7e:c1:
                    46:2a:c0:a0:12:f7:8b:76:e0:54:74:34:21:88:f5:
                    67:95:e7:37:49:9f:b5:7a:35:c3:13:d4:17:c7:49:
                    39:58:11:83:13:54:52:b1:26:f4:d9:f2:30:cc:7e:
                    c7:35:7c:b1:ef:95:2f:fe:77:a6:a7:b9:99:20:1e:
                    a5:cb:7a:8f:47:ca:e2:c2:f7:06:61:4c:7e:cb:16:
                    17:c9:9e:f7:e8:50:2a:4f:5f:fc:fb:5c:3d:2e:bc:
                    ae:53:4a:c1:c7:06:8e:8d:21:1e:1b:81:fd:0d:d0:
                    55:68:9c:fd:fc:08:d6:a9:7c:fd:b2:d6:20:d2:e6:
                    cd:fa:9e:43:5b:a8:a0:e9:8f:55:80:68:99:c9:ce:
                    d6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9C:08:D3:EB:BB:E8:BA:29:59:EE:6B:51:66:32:30:3B:73:A9:AA
            X509v3 Authority Key Identifier:
                keyid:65:8D:20:69:48:C4:D2:E8:D5:E6:07:7E:92:3E:B5:A5:51:F9:16:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/658D206948C4D2E8D5E6077E923EB5A551F916BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D206948C4D2E8D5E6077E923EB5A551F916BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39352e302f32342d3234203d3e20323636303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:72:bb:74:34:03:b7:9c:f5:50:44:4d:4f:c6:ef:30:e5:3c:
         d6:25:e2:f6:08:6c:b0:78:f7:ad:4c:03:cf:64:7a:66:22:d4:
         f5:6c:56:b4:31:79:83:0e:07:a1:21:ae:02:a8:b0:8f:57:86:
         47:2e:a5:7d:71:f8:b3:d7:7b:d0:77:6b:f7:42:89:2b:be:7e:
         4c:6e:d2:43:47:93:42:01:d8:50:cc:b8:25:06:ed:a9:d8:2a:
         83:df:9d:49:cb:fe:3c:bc:f6:65:ad:89:f5:12:d1:f5:9b:90:
         32:ab:13:85:47:b3:4e:78:65:d4:75:45:0b:ea:7d:96:6d:76:
         66:05:49:b3:04:35:fd:c3:3e:13:ea:32:57:07:f1:ae:f9:7e:
         e4:49:3f:25:f2:14:ac:fd:22:de:9c:7c:bd:66:03:16:33:4b:
         b6:16:de:3c:6a:07:02:9a:1f:19:07:6f:7a:8c:3a:e7:77:a6:
         f1:bc:85:a5:a2:1c:0c:90:fb:1f:bd:44:95:1c:1a:39:32:1f:
         ff:4d:c4:7f:9b:96:3c:de:c6:38:da:20:7e:c0:e1:67:ec:43:
         c4:e7:96:3a:3e:3c:2a:ea:8d:b9:61:0a:57:c7:82:3e:3b:3e:
         54:15:76:b2:6a:6e:28:e8:01:f7:fe:03:56:45:b4:08:fb:cf:
         83:c5:58:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:51:47 2025 by rpki-client