Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3bwtpDxJGEpW1C8BYQd9RSxxyLqiU93YQd62zf3rgJ8/0/3138312e3233322e3134362e302f32332d3233203d3e20323731333237.roa
File:                     3138312e3233322e3134362e302f32332d3233203d3e20323731333237.roa (raw, json)
Hash identifier:          mLhJvtsh2zmhjxHsi9Uj8P86Ng9oGezlmJbkYU6GDdQ=
Subject key identifier:   A9:0F:16:EB:8D:61:51:71:66:21:3E:B4:07:0F:C3:CA:DE:4D:0F:0C
Certificate issuer:       /CN=E6ED52F9F0DCDFD84391E03FB3FEAF8A3EB74BB0
Certificate serial:       2159BE7FAA44179A1CB073D4898A5D4360A722AB
Authority key identifier: E6:ED:52:F9:F0:DC:DF:D8:43:91:E0:3F:B3:FE:AF:8A:3E:B7:4B:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6ED52F9F0DCDFD84391E03FB3FEAF8A3EB74BB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3bwtpDxJGEpW1C8BYQd9RSxxyLqiU93YQd62zf3rgJ8/0/3138312e3233322e3134362e302f32332d3233203d3e20323731333237.roa
Signing time:             Tue 14 Nov 2023 17:12:59 +0000
ROA not before:           Tue 14 Nov 2023 17:07:59 +0000
ROA not after:            Tue 12 Nov 2024 17:12:59 +0000
asID:                     271327
IP address blocks:        181.232.146.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:59:be:7f:aa:44:17:9a:1c:b0:73:d4:89:8a:5d:43:60:a7:22:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6ED52F9F0DCDFD84391E03FB3FEAF8A3EB74BB0
        Validity
            Not Before: Nov 14 17:07:59 2023 GMT
            Not After : Nov 12 17:12:59 2024 GMT
        Subject: CN=A90F16EB8D61517166213EB4070FC3CADE4D0F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4a:3d:05:e7:a3:7e:49:28:23:2e:42:9b:0e:
                    a9:4c:d9:f1:e2:8f:c9:72:51:b3:df:dc:78:0e:58:
                    f5:54:1c:a0:24:38:7d:41:ee:50:19:86:cc:b4:96:
                    3f:d1:4e:6b:17:ff:57:6c:8c:6b:f3:1b:a1:dd:f3:
                    96:0d:a7:78:b6:7d:0c:7b:31:c7:5b:86:71:e9:4b:
                    cc:91:e4:b7:49:11:e5:5a:86:57:f6:1a:41:44:a3:
                    02:8d:c2:cb:9d:26:31:72:ad:a8:71:8e:1e:36:96:
                    78:fd:63:32:ef:c0:57:0f:28:ef:c7:7d:cd:71:58:
                    26:11:d1:c7:bb:b6:e1:c6:3e:42:03:db:2c:d9:93:
                    5f:ba:6f:03:b6:45:b2:af:1d:be:bf:10:3a:69:89:
                    9a:e3:8e:1a:7e:f6:cc:3e:c9:e5:d4:25:cd:ca:4d:
                    98:11:af:e6:3a:3d:31:2a:91:9b:8b:c7:04:79:5a:
                    3a:50:35:18:02:48:ab:f2:0c:85:f0:1f:35:b2:2e:
                    80:3f:0a:64:dd:e1:64:ed:d5:38:9f:79:76:7d:8a:
                    8c:45:a8:ea:d9:4b:c9:0b:f3:f2:72:2e:4a:1b:e3:
                    f6:ce:17:0f:68:d3:20:4e:3a:d3:f2:db:23:eb:c8:
                    62:de:e5:bb:ef:47:0b:0f:48:6c:c4:d4:35:19:6f:
                    1c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0F:16:EB:8D:61:51:71:66:21:3E:B4:07:0F:C3:CA:DE:4D:0F:0C
            X509v3 Authority Key Identifier:
                keyid:E6:ED:52:F9:F0:DC:DF:D8:43:91:E0:3F:B3:FE:AF:8A:3E:B7:4B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3bwtpDxJGEpW1C8BYQd9RSxxyLqiU93YQd62zf3rgJ8/0/E6ED52F9F0DCDFD84391E03FB3FEAF8A3EB74BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6ED52F9F0DCDFD84391E03FB3FEAF8A3EB74BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3bwtpDxJGEpW1C8BYQd9RSxxyLqiU93YQd62zf3rgJ8/0/3138312e3233322e3134362e302f32332d3233203d3e20323731333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:7a:09:68:db:0f:6c:70:c2:da:e9:16:28:f1:cb:dd:10:f0:
         1b:57:0e:51:38:7c:fd:6d:d8:c3:28:a8:f4:62:50:f0:74:a7:
         bb:8e:19:f4:eb:39:c7:77:59:cc:17:da:cb:cd:02:f3:4b:0f:
         50:cc:48:0e:0f:d8:01:67:20:df:13:17:0b:5b:21:ec:27:c6:
         49:11:73:0f:02:a7:6f:14:1d:d7:fb:ed:95:db:b0:fe:7a:c5:
         54:33:5b:3e:fa:ef:5d:ce:23:da:4b:36:ba:b7:43:bf:34:d2:
         af:a3:9e:50:ad:3d:c3:73:d8:c9:e5:06:6c:ec:12:4d:88:1c:
         0a:e5:e8:87:a7:c9:6c:21:22:5a:09:c5:69:2e:7c:ef:71:7f:
         fe:8e:e9:05:9a:b9:25:46:4f:84:34:79:5f:64:5a:c8:dc:88:
         ce:03:06:fa:44:d0:ca:42:67:50:38:b5:7c:c1:ab:a0:f3:3f:
         ef:5f:a9:52:6d:b9:e5:41:61:4b:8a:77:93:64:70:c4:d2:7a:
         8e:49:c5:8f:ab:35:0a:06:1b:fc:96:17:f5:f2:b6:b7:a7:d2:
         ef:e1:30:27:56:02:04:f3:44:ae:8f:df:07:6a:f8:87:72:ec:
         f9:d0:16:c9:d0:a3:89:b7:f2:8e:6d:50:69:70:d3:cf:00:94:
         21:76:9a:9a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIVm+f6pEF5ocsHPUiYpdQ2CnIqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZFRDUyRjlGMERDREZEODQzOTFFMDNGQjNGRUFGOEEz
RUI3NEJCMDAeFw0yMzExMTQxNzA3NTlaFw0yNDExMTIxNzEyNTlaMDMxMTAvBgNV
BAMTKEE5MEYxNkVCOEQ2MTUxNzE2NjIxM0VCNDA3MEZDM0NBREU0RDBGMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Sj0F56N+SSgjLkKbDqlM2fHi
j8lyUbPf3HgOWPVUHKAkOH1B7lAZhsy0lj/RTmsX/1dsjGvzG6Hd85YNp3i2fQx7
McdbhnHpS8yR5LdJEeVahlf2GkFEowKNwsudJjFyrahxjh42lnj9YzLvwFcPKO/H
fc1xWCYR0ce7tuHGPkID2yzZk1+6bwO2RbKvHb6/EDppiZrjjhp+9sw+yeXUJc3K
TZgRr+Y6PTEqkZuLxwR5WjpQNRgCSKvyDIXwHzWyLoA/CmTd4WTt1TifeXZ9ioxF
qOrZS8kL8/JyLkob4/bOFw9o0yBOOtPy2yPryGLe5bvvRwsPSGzE1DUZbxzLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqQ8W641hUXFmIT60Bw/Dyt5NDwwwHwYDVR0j
BBgwFoAU5u1S+fDc39hDkeA/s/6vij63S7AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjNid3RwRHhKR0VwVzFDOEJZUWQ5UlN4eHlMcWlVOTNZUWQ2MnpmM3Jn
SjgvMC9FNkVENTJGOUYwRENERkQ4NDM5MUUwM0ZCM0ZFQUY4QTNFQjc0QkIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U2RUQ1MkY5RjBEQ0RGRDg0
MzkxRTAzRkIzRkVBRjhBM0VCNzRCQjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0YzYnd0cER4SkdFcFcxQzhCWVFkOVJTeHh5THFpVTkzWVFkNjJ6ZjNyZ0o4LzAv
MzEzODMxMmUzMjMzMzIyZTMxMzQzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMTMzMzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbXokjANBgkqhkiG9w0BAQsFAAOCAQEAU3oJ
aNsPbHDC2ukWKPHL3RDwG1cOUTh8/W3Ywyio9GJQ8HSnu44Z9Os5x3dZzBfay80C
80sPUMxIDg/YAWcg3xMXC1sh7CfGSRFzDwKnbxQd1/vtlduw/nrFVDNbPvrvXc4j
2ks2urdDvzTSr6OeUK09w3PYyeUGbOwSTYgcCuXoh6fJbCEiWgnFaS5873F//o7p
BZq5JUZPhDR5X2RayNyIzgMG+kTQykJnUDi1fMGroPM/71+pUm255UFhS4p3k2Rw
xNJ6jknFj6s1CgYb/JYX9fK2t6fS7+EwJ1YCBPNEro/fB2r4h3Ls+dAWydCjibfy
jm1QaXDTzwCUIXaamg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:58:53 2025 by rpki-client