Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/3138312e3139312e3131322e302f32322d3232203d3e20323636303130.roa
File:                     3138312e3139312e3131322e302f32322d3232203d3e20323636303130.roa (raw, json)
Hash identifier:          jg6VeXwvA5U21Au+WbMPyPP+ohlzuB5/Ojr3YW5XQwo=
Subject key identifier:   CD:B4:04:3E:71:5D:55:4F:67:30:CA:45:40:B7:FE:60:1F:D7:E7:8B
Certificate issuer:       /CN=D27F46706288934EA75FEFCBDB933497E0E92077
Certificate serial:       5EAD2B949FFF12495D29D909DA012A58B4B843B5
Authority key identifier: D2:7F:46:70:62:88:93:4E:A7:5F:EF:CB:DB:93:34:97:E0:E9:20:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/3138312e3139312e3131322e302f32322d3232203d3e20323636303130.roa
Signing time:             Wed 05 Mar 2025 20:52:43 +0000
ROA not before:           Wed 05 Mar 2025 20:47:43 +0000
ROA not after:            Wed 04 Mar 2026 20:52:43 +0000
asID:                     266010
IP address blocks:        181.191.112.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ad:2b:94:9f:ff:12:49:5d:29:d9:09:da:01:2a:58:b4:b8:43:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27F46706288934EA75FEFCBDB933497E0E92077
        Validity
            Not Before: Mar  5 20:47:43 2025 GMT
            Not After : Mar  4 20:52:43 2026 GMT
        Subject: CN=CDB4043E715D554F6730CA4540B7FE601FD7E78B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:62:3e:ca:36:57:8b:36:54:fe:f8:6c:e0:6d:
                    b4:49:19:b2:44:2e:d4:8a:5e:30:41:1f:e2:db:8f:
                    51:7d:05:e0:f6:c5:86:53:f1:90:35:cc:ca:dd:81:
                    37:8f:81:cf:94:59:68:d5:65:ae:b0:b6:97:34:b0:
                    db:59:82:1c:9b:55:c7:53:24:e2:00:6d:c1:79:77:
                    a7:e9:09:14:43:d2:42:d9:37:bd:cc:3e:86:04:4e:
                    a9:00:5f:8e:5d:b3:73:2a:f9:3e:19:07:c3:b5:e1:
                    e6:fc:7a:e4:f9:82:9a:3c:6a:d4:1b:93:93:39:43:
                    0d:53:c6:ef:9a:5c:b3:be:48:13:cf:75:68:4b:6d:
                    b4:7c:b2:cf:58:ff:22:32:9e:32:40:b6:e7:5f:dc:
                    a4:f9:f9:90:cf:2c:68:5d:f7:eb:4a:82:4c:21:bd:
                    39:52:47:b4:2b:9c:ed:dc:0c:53:b6:84:9a:69:73:
                    f2:83:50:08:dd:d7:d2:cb:e0:c9:58:1e:0e:de:a4:
                    a2:3e:48:44:2e:1a:8d:82:ab:4b:51:31:52:6e:4a:
                    3d:5b:7b:7e:8e:35:18:ad:39:58:13:00:a6:0f:da:
                    4d:b6:a4:1e:9a:c2:ba:53:2b:dd:44:04:2a:a9:5d:
                    42:a8:8f:0b:76:6b:2a:16:cc:42:c3:1e:11:1e:68:
                    84:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B4:04:3E:71:5D:55:4F:67:30:CA:45:40:B7:FE:60:1F:D7:E7:8B
            X509v3 Authority Key Identifier:
                keyid:D2:7F:46:70:62:88:93:4E:A7:5F:EF:CB:DB:93:34:97:E0:E9:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/3138312e3139312e3131322e302f32322d3232203d3e20323636303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:82:ef:db:a3:d7:84:e3:be:e6:f6:b7:fa:b2:b2:84:77:3e:
         32:10:1f:d9:f4:3a:e3:8e:42:42:0b:8a:30:79:c7:64:9a:09:
         a1:17:22:dd:58:57:31:22:c1:62:8b:09:bc:c3:3d:d8:38:f3:
         e6:97:35:0a:48:ac:e1:29:55:a9:71:75:5b:da:3e:6f:f5:b2:
         76:4e:88:3d:0c:fc:b6:53:71:41:0b:b4:84:f4:eb:a8:ce:66:
         43:86:16:e8:01:c8:84:b1:5a:d0:32:3c:e4:58:0a:aa:e7:50:
         8d:41:15:0f:18:b8:80:ff:5b:d4:79:f2:f5:f0:33:38:38:0e:
         e1:af:0d:be:cc:fc:77:c0:bc:41:46:5f:74:3e:a1:02:67:55:
         b8:70:49:08:b5:b3:a8:0e:88:0a:b0:ff:6c:8f:0e:39:4e:11:
         9e:da:14:d2:80:10:c1:1d:2b:b8:04:11:99:82:35:e4:01:70:
         aa:30:19:31:06:f1:e4:4c:cc:92:ce:48:75:6d:8e:59:0f:6c:
         3e:90:c7:90:b3:a2:8d:ff:7c:63:a8:a2:23:2d:2b:01:6f:5f:
         00:74:c3:40:7a:56:b5:c2:2d:74:73:e8:81:ac:dc:13:7b:90:
         1d:ca:90:87:c9:b8:e0:0e:57:8d:6e:c3:20:73:34:0d:3f:0e:
         d6:dd:c2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:38:08 2025 by rpki-client