Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3bwtpDxJGEpW1C8BYQd9RSxxyLqiU93YQd62zf3rgJ8/0/3138312e3233322e3134342e302f32322d3232203d3e20323731333237.roa
File:                     3138312e3233322e3134342e302f32322d3232203d3e20323731333237.roa (raw, json)
Hash identifier:          /bHFrsuGQInGMrrE75Ul+JaTnFfYsz822D7SjTgYn6Y=
Subject key identifier:   F1:DE:74:AA:89:7A:0D:94:9A:EE:57:56:A7:7D:50:B6:01:09:11:43
Certificate issuer:       /CN=E6ED52F9F0DCDFD84391E03FB3FEAF8A3EB74BB0
Certificate serial:       34D0D58AE6F62DFE22A798A06C3FFFB440554785
Authority key identifier: E6:ED:52:F9:F0:DC:DF:D8:43:91:E0:3F:B3:FE:AF:8A:3E:B7:4B:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6ED52F9F0DCDFD84391E03FB3FEAF8A3EB74BB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3bwtpDxJGEpW1C8BYQd9RSxxyLqiU93YQd62zf3rgJ8/0/3138312e3233322e3134342e302f32322d3232203d3e20323731333237.roa
Signing time:             Tue 14 Nov 2023 17:12:59 +0000
ROA not before:           Tue 14 Nov 2023 17:07:59 +0000
ROA not after:            Tue 12 Nov 2024 17:12:59 +0000
asID:                     271327
IP address blocks:        181.232.144.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d0:d5:8a:e6:f6:2d:fe:22:a7:98:a0:6c:3f:ff:b4:40:55:47:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6ED52F9F0DCDFD84391E03FB3FEAF8A3EB74BB0
        Validity
            Not Before: Nov 14 17:07:59 2023 GMT
            Not After : Nov 12 17:12:59 2024 GMT
        Subject: CN=F1DE74AA897A0D949AEE5756A77D50B601091143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:2c:67:4d:fb:bb:88:b6:4f:a7:30:07:45:
                    75:cd:dd:58:c6:e0:3b:a7:b9:66:96:d9:ce:c4:f2:
                    67:ae:05:67:e8:43:d9:2e:e9:a2:fb:96:8d:00:1c:
                    5e:04:d1:60:b4:f3:11:2d:83:d8:af:91:6f:1d:af:
                    5b:66:f5:2e:b4:25:ce:50:a8:06:f8:e7:09:02:9b:
                    c6:d5:a2:20:c7:be:b3:bc:97:0a:5f:e7:06:74:02:
                    77:73:a4:03:1e:e8:9f:35:59:f4:7b:dd:70:a5:c7:
                    f4:0b:eb:0a:57:22:bc:a4:3f:2f:f0:e4:28:02:a2:
                    17:2b:11:19:aa:ad:2d:b7:3e:61:a7:ee:ac:a0:18:
                    be:51:5d:2a:a9:56:c9:b6:23:c7:05:b6:a3:33:12:
                    9b:70:ac:8a:bd:0b:97:d5:fd:d3:8a:68:b9:c2:c7:
                    04:59:1b:90:c5:5c:4c:1e:67:d7:1e:9d:5c:23:75:
                    fe:af:38:9e:cf:a7:ef:7b:f2:9c:e2:e0:51:11:31:
                    29:7d:4d:9a:0c:46:0d:8c:bb:b4:e4:57:4c:ef:8f:
                    42:08:d7:a9:cb:75:4f:a6:bc:68:5e:45:d0:08:ba:
                    1a:be:db:a9:1e:6b:02:87:2d:d9:70:2c:34:99:99:
                    ac:51:d7:66:1f:29:28:a8:2a:03:17:97:f4:75:6d:
                    74:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DE:74:AA:89:7A:0D:94:9A:EE:57:56:A7:7D:50:B6:01:09:11:43
            X509v3 Authority Key Identifier:
                keyid:E6:ED:52:F9:F0:DC:DF:D8:43:91:E0:3F:B3:FE:AF:8A:3E:B7:4B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3bwtpDxJGEpW1C8BYQd9RSxxyLqiU93YQd62zf3rgJ8/0/E6ED52F9F0DCDFD84391E03FB3FEAF8A3EB74BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6ED52F9F0DCDFD84391E03FB3FEAF8A3EB74BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3bwtpDxJGEpW1C8BYQd9RSxxyLqiU93YQd62zf3rgJ8/0/3138312e3233322e3134342e302f32322d3232203d3e20323731333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:d2:03:20:29:a8:9c:4b:dd:87:20:60:1a:18:03:94:ed:8f:
         2e:03:d0:14:c8:3e:02:9e:06:cf:61:3f:e0:53:2e:8e:64:88:
         f2:96:8b:81:da:d3:29:3a:3b:f2:2d:b5:ad:db:85:57:23:d7:
         ca:45:bb:ae:20:d6:38:e7:b1:65:c9:b2:f0:71:c4:3e:ad:52:
         2c:e0:9b:b8:74:37:42:6e:38:1c:cf:97:90:8b:ff:90:00:0d:
         6b:d4:e0:4a:04:e8:5e:1d:e5:b7:98:16:cc:36:b5:58:31:b1:
         9a:5c:ca:d9:24:81:0e:1a:3f:61:35:d1:57:20:cb:19:05:bc:
         ed:bf:ba:78:af:f1:db:67:ee:8a:1c:68:6e:4a:49:c2:c6:bf:
         88:4f:37:87:a7:0f:af:c7:bc:8a:89:a1:e9:4b:76:85:46:4d:
         92:fc:fe:b3:93:c5:89:82:50:82:c1:be:5b:02:c5:f9:a1:52:
         9b:a3:c6:5c:1d:45:74:dc:e0:b5:d0:b1:7e:44:e2:77:a9:ff:
         6b:82:a4:b1:89:0b:e4:97:a9:d8:07:9d:cd:1c:7f:40:4f:0c:
         21:00:24:bd:9d:51:d1:f3:65:20:27:4e:5a:06:22:cf:2a:41:
         15:b3:aa:a3:69:ff:29:f3:61:d5:55:0c:c2:a1:88:dd:fe:64:
         64:6c:79:9f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNNDViub2Lf4ip5igbD//tEBVR4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZFRDUyRjlGMERDREZEODQzOTFFMDNGQjNGRUFGOEEz
RUI3NEJCMDAeFw0yMzExMTQxNzA3NTlaFw0yNDExMTIxNzEyNTlaMDMxMTAvBgNV
BAMTKEYxREU3NEFBODk3QTBEOTQ5QUVFNTc1NkE3N0Q1MEI2MDEwOTExNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykSxnTfu7iLZPpzAHRXXN3VjG
4DunuWaW2c7E8meuBWfoQ9ku6aL7lo0AHF4E0WC08xEtg9ivkW8dr1tm9S60Jc5Q
qAb45wkCm8bVoiDHvrO8lwpf5wZ0AndzpAMe6J81WfR73XClx/QL6wpXIrykPy/w
5CgCohcrERmqrS23PmGn7qygGL5RXSqpVsm2I8cFtqMzEptwrIq9C5fV/dOKaLnC
xwRZG5DFXEweZ9cenVwjdf6vOJ7Pp+978pzi4FERMSl9TZoMRg2Mu7TkV0zvj0II
16nLdU+mvGheRdAIuhq+26keawKHLdlwLDSZmaxR12YfKSioKgMXl/R1bXT7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU8d50qol6DZSa7ldWp31QtgEJEUMwHwYDVR0j
BBgwFoAU5u1S+fDc39hDkeA/s/6vij63S7AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjNid3RwRHhKR0VwVzFDOEJZUWQ5UlN4eHlMcWlVOTNZUWQ2MnpmM3Jn
SjgvMC9FNkVENTJGOUYwRENERkQ4NDM5MUUwM0ZCM0ZFQUY4QTNFQjc0QkIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U2RUQ1MkY5RjBEQ0RGRDg0
MzkxRTAzRkIzRkVBRjhBM0VCNzRCQjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0YzYnd0cER4SkdFcFcxQzhCWVFkOVJTeHh5THFpVTkzWVFkNjJ6ZjNyZ0o4LzAv
MzEzODMxMmUzMjMzMzIyZTMxMzQzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMTMzMzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArXokDANBgkqhkiG9w0BAQsFAAOCAQEAR9ID
ICmonEvdhyBgGhgDlO2PLgPQFMg+Ap4Gz2E/4FMujmSI8paLgdrTKTo78i21rduF
VyPXykW7riDWOOexZcmy8HHEPq1SLOCbuHQ3Qm44HM+XkIv/kAANa9TgSgToXh3l
t5gWzDa1WDGxmlzK2SSBDho/YTXRVyDLGQW87b+6eK/x22fuihxobkpJwsa/iE83
h6cPr8e8iomh6Ut2hUZNkvz+s5PFiYJQgsG+WwLF+aFSm6PGXB1FdNzgtdCxfkTi
d6n/a4KksYkL5Jep2AedzRx/QE8MIQAkvZ1R0fNlICdOWgYizypBFbOqo2n/KfNh
1VUMwqGI3f5kZGx5nw==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:26 2025 by rpki-client