Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3230312e3134382e3130382e302f32322d3234203d3e203532363034.roa
File:                     3230312e3134382e3130382e302f32322d3234203d3e203532363034.roa (raw, json)
Hash identifier:          SdMfwOjgcA1R4Gwfzli7K9nzpPKqJk7EL6mIUoQaN1E=
Subject key identifier:   B6:CE:B7:0D:34:83:D3:8D:69:F3:C6:B4:B4:CD:9A:8C:9B:AD:43:E3
Certificate issuer:       /CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
Certificate serial:       1355165F27B1CEAA60D0F4850808F836B1E794F0
Authority key identifier: 7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3230312e3134382e3130382e302f32322d3234203d3e203532363034.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     52604
IP address blocks:        201.148.108.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:55:16:5f:27:b1:ce:aa:60:d0:f4:85:08:08:f8:36:b1:e7:94:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=B6CEB70D3483D38D69F3C6B4B4CD9A8C9BAD43E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ca:40:5c:0e:cf:ca:ec:ce:eb:e3:80:af:98:
                    90:98:14:26:c2:ac:21:8f:e2:ea:90:54:6b:b6:f2:
                    84:4f:93:9b:ba:d4:65:1a:05:86:15:63:5d:cf:3d:
                    72:0f:3d:7a:42:69:b0:9e:00:e5:2f:b7:32:db:98:
                    1d:d0:bc:53:b4:5b:ee:d8:a6:d6:c5:1a:ed:d9:e3:
                    1c:5a:01:2b:06:45:0b:45:16:8d:1d:eb:10:4e:f3:
                    36:50:f4:4f:d7:3e:c2:ea:c5:cf:0a:e2:8f:37:21:
                    8b:de:a0:cb:f7:99:90:99:3c:96:41:6c:81:a4:b8:
                    15:3e:71:36:db:9c:53:33:62:d3:15:98:e7:4b:82:
                    53:39:49:30:71:7b:91:2d:f2:e8:4d:51:f5:90:08:
                    40:f9:8f:c8:02:f6:2c:e2:48:d8:fd:ea:d0:6f:b7:
                    02:a4:ae:b0:fb:63:10:e4:f5:a1:80:14:fd:ca:12:
                    6c:6c:0d:58:32:40:7f:9c:16:3a:30:a0:b9:df:b7:
                    ee:26:12:a5:d7:8e:a0:d1:86:a5:f2:df:13:e0:b2:
                    8a:2e:aa:33:66:e9:e6:2e:14:87:ce:91:8c:75:5d:
                    c0:4e:39:1a:ad:a0:1d:8d:27:58:b8:6f:d6:d5:8e:
                    90:56:dd:ae:01:d0:b1:6a:92:95:e3:be:5e:08:91:
                    fc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CE:B7:0D:34:83:D3:8D:69:F3:C6:B4:B4:CD:9A:8C:9B:AD:43:E3
            X509v3 Authority Key Identifier:
                keyid:7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3230312e3134382e3130382e302f32322d3234203d3e203532363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:6f:1b:bd:96:23:6e:97:ce:6c:24:c4:c1:9b:fa:92:22:16:
         1e:c4:f9:b0:48:b5:a5:bb:30:4c:f5:43:31:05:21:8c:24:8f:
         db:81:0c:0a:99:24:d7:0c:fc:53:f1:f8:84:68:de:7c:cf:c6:
         47:63:83:d5:45:58:a4:36:3d:59:fd:2e:0c:ec:b9:77:78:24:
         83:3a:9d:fb:9a:15:68:20:04:0a:1c:04:f7:51:61:f3:bb:21:
         ef:dc:58:01:8f:08:f2:fc:67:62:8b:53:15:d6:c2:d9:bb:29:
         c3:5e:58:b1:0b:a9:5c:3a:70:1f:21:d1:4f:09:73:7b:0d:40:
         83:3c:2c:47:cd:0b:42:a0:0f:81:cd:67:e7:6b:f2:68:c6:9a:
         33:f2:00:c0:94:b7:57:bd:48:32:0d:0a:55:d7:53:27:0a:3b:
         5e:df:44:1c:a3:8d:28:a1:a5:58:d0:0d:0d:ae:9e:9c:9b:58:
         82:c2:69:f7:58:57:92:ef:d9:c5:11:21:1c:2a:67:25:a4:f0:
         c4:7f:a4:d3:53:9c:d6:e2:0c:48:e1:5b:0a:e2:56:70:15:e5:
         48:ae:9f:8c:c6:1c:22:a1:ac:4e:df:07:0b:a5:93:2b:78:50:
         43:7e:e8:0b:3e:7c:92:e7:91:83:e7:a3:d7:24:96:9d:9c:5d:
         05:69:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:53:31 2025 by rpki-client